Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UgqP_1fBN7SWD3NGRKzskC7OmfY.roa
File: UgqP_1fBN7SWD3NGRKzskC7OmfY.roa (raw, json)
Hash identifier: Z3zn/3xdbgNPyN57nqu2+4jCMApuHxUq/KSaY18dDTw=
Subject key identifier: 52:0A:8F:FF:57:C1:37:B4:96:0F:73:46:44:AC:EC:90:2E:CE:99:F6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D71
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UgqP_1fBN7SWD3NGRKzskC7OmfY.roa
Signing time: Tue 29 Sep 2020 09:54:34 +0000
ROA not before: Tue 29 Sep 2020 09:54:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3441 (0xd71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=520A8FFF57C137B4960F734644ACEC902ECE99F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:96:61:56:eb:eb:18:12:7b:97:1f:86:12:61:
4e:40:4b:3b:0c:0c:8a:b7:f7:24:b8:a2:37:e5:62:
3b:a5:4b:42:11:c8:fb:08:f3:00:9b:02:24:a1:82:
ca:14:49:d4:4a:25:0a:a7:de:21:c4:6e:33:ce:d8:
80:cb:fb:3a:30:dd:4e:52:01:9c:0e:40:05:09:b4:
8c:b0:43:dd:68:fb:a4:5e:be:10:0e:07:4a:6f:79:
c2:82:0d:2b:28:df:02:68:c6:90:14:4d:76:84:15:
c9:49:44:c6:e0:f0:cc:4b:99:40:85:98:c5:98:b9:
61:cb:3c:27:14:b1:9c:29:17:2f:86:a9:b2:e3:b0:
b6:61:78:c0:6d:75:f3:e8:b1:3b:cb:1d:5f:1e:8f:
23:1c:e2:d8:84:95:06:d5:b6:5d:f9:9a:b5:7a:a5:
73:e9:ae:ee:5c:41:39:36:e1:c3:9c:c8:00:d0:f7:
b9:a4:03:1b:f1:4c:a0:4a:28:38:01:9b:08:50:2d:
43:81:c0:3d:b6:51:11:23:17:61:87:56:87:10:43:
ff:b3:03:14:c3:c9:45:9d:19:46:47:93:75:d7:86:
33:8b:26:c5:1e:43:14:71:da:a9:b3:0d:e0:f4:63:
63:c2:bd:a6:62:f4:4b:d3:7f:70:39:2e:69:cc:47:
db:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0A:8F:FF:57:C1:37:B4:96:0F:73:46:44:AC:EC:90:2E:CE:99:F6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UgqP_1fBN7SWD3NGRKzskC7OmfY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.216.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:a0:6c:6c:7f:2c:17:5c:43:62:f3:09:05:d5:41:b2:3b:ce:
74:08:7e:59:de:72:f9:5b:23:63:1c:ff:df:5b:c8:72:59:ce:
91:0a:f1:11:47:3c:2b:fc:5f:3a:6f:8a:76:23:3a:a0:d2:d1:
42:59:51:2f:82:0f:a6:e4:9c:78:98:fc:08:ac:f1:cc:10:3f:
e2:4d:ec:9f:29:15:ad:36:80:51:b3:0b:a4:25:68:ac:ad:98:
12:b2:20:14:f4:87:89:53:f1:dc:aa:22:9f:ec:5f:0b:81:63:
49:e2:5c:6a:43:04:77:ec:a5:90:de:7e:0c:d6:8c:bf:31:dd:
a8:9e:5f:57:68:0e:da:5e:98:20:d8:2e:d4:31:3d:07:d3:66:
fb:dc:ea:bc:21:19:16:2a:f1:89:dc:94:95:13:3d:c2:4e:92:
00:c1:93:5c:33:6d:83:c9:33:c0:d1:88:91:f9:d7:d0:f9:ec:
8a:76:e8:12:15:b9:a9:61:24:3b:10:26:21:bc:25:dd:61:48:
69:6e:2b:16:74:98:a8:b4:1a:b9:20:ea:a1:2f:4a:6e:9e:d3:
86:99:b7:3a:28:8d:38:2f:a8:bd:2b:dd:3b:3b:09:19:7e:c1:
1e:6e:a1:69:3f:ef:d2:1e:57:e1:c5:44:14:a4:3b:e9:1f:f0:
c9:c7:e9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org