Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UpFO95avXs1fzisXUFsszoWXNDM.roa
File: UpFO95avXs1fzisXUFsszoWXNDM.roa (raw, json)
Hash identifier: GyhSe1jQyUYgQ2RNEfOHpPAWAD0siFbLaF/0nEdxfc8=
Subject key identifier: 52:91:4E:F7:96:AF:5E:CD:5F:CE:2B:17:50:5B:2C:CE:85:97:34:33
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UpFO95avXs1fzisXUFsszoWXNDM.roa
Signing time: Thu 15 Sep 2022 02:52:27 +0000
ROA not before: Thu 15 Sep 2022 02:52:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=52914EF796AF5ECD5FCE2B17505B2CCE85973433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:04:f7:d4:3f:bd:11:33:1e:e6:92:4e:0b:
83:1b:99:7b:09:27:c7:bd:3c:10:a5:a0:c5:ce:56:
2b:81:b3:80:c9:ef:3e:ad:19:86:d2:bc:79:2f:70:
9a:b1:87:a1:cf:f5:2f:3f:c5:fb:dd:52:5d:86:47:
6d:9f:01:a6:87:d8:74:86:f8:ce:0c:8a:09:d1:bc:
a5:10:3a:90:f2:61:9e:59:c9:37:48:de:f2:3f:4b:
3e:67:7a:db:72:e5:0f:66:81:bd:d0:9c:a2:c1:b0:
c8:b1:3b:3a:ab:a3:c8:b1:95:59:e9:1e:1c:2f:9e:
29:8d:d5:cc:f2:e6:70:3e:9c:11:d2:d7:a0:d1:c0:
c0:94:8c:0d:39:0d:fb:ab:a8:8f:ce:03:af:0b:5d:
f2:eb:2a:37:8a:b1:ed:2a:53:15:b4:94:0d:30:dd:
b3:01:cc:70:f2:88:0a:e7:40:6d:42:8f:7d:38:60:
7d:a1:2c:02:a2:9b:3f:8f:9a:bf:9a:70:0a:f2:f3:
96:14:23:79:7d:cc:ea:90:eb:10:f7:c9:02:4f:b0:
da:11:9b:f9:86:42:e1:2d:3f:68:f1:ef:ff:a5:15:
9b:55:be:5c:f1:39:7a:80:92:91:fc:fd:70:f7:40:
03:4e:fd:8c:cf:39:20:d9:e2:9d:ca:2d:f6:27:c5:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:91:4E:F7:96:AF:5E:CD:5F:CE:2B:17:50:5B:2C:CE:85:97:34:33
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UpFO95avXs1fzisXUFsszoWXNDM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.232.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:10:67:42:fe:b0:fc:83:db:65:08:0c:36:29:fc:bc:41:17:
65:bd:0c:bb:94:a1:96:7d:5c:c3:75:97:b5:53:bb:e2:e6:4c:
6b:f5:c2:56:d1:fc:d6:dd:32:f8:74:39:ae:78:7e:e6:0b:85:
49:86:87:a1:79:d6:39:7f:62:9a:1a:50:3d:24:57:84:cb:72:
e2:d4:d4:c5:3e:d2:ba:9a:0a:a2:d6:61:94:f0:f6:4c:95:15:
58:90:94:26:4a:0e:6d:1d:93:bf:ff:ec:c0:1b:06:68:a4:2b:
9b:41:be:2f:8e:de:ed:7a:f9:78:ce:bf:00:6d:7e:48:d4:e3:
fd:1a:90:94:de:7d:dc:03:21:2b:8d:a7:d6:fe:e2:61:e8:40:
0e:a1:69:7a:81:e3:5c:a3:f6:ed:ba:b6:4b:36:24:07:94:d6:
52:56:b8:83:9f:50:4b:9c:69:6f:49:7b:18:1d:8f:d6:d7:96:
dd:e3:2a:08:02:0c:52:33:e0:10:d2:6a:a4:f4:c4:d9:64:9e:
96:0d:3a:86:fb:ce:78:0e:da:e2:60:c1:02:52:97:0e:18:d0:
38:46:13:d9:41:f2:db:9d:9a:25:8f:0e:da:99:1e:a4:c2:2a:
e1:bc:48:f8:e9:04:e1:7b:2a:a2:e8:d2:05:a2:88:43:e1:5c:
ff:0a:40:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org