Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UpnQBxHxiZt6iLeuMGqj1jOXuVQ.roa
File: UpnQBxHxiZt6iLeuMGqj1jOXuVQ.roa (raw, json)
Hash identifier: 0AqJFdr4BBKrx8Sq8tYKk49zu4iWwZENMovkgit/kAc=
Subject key identifier: 52:99:D0:07:11:F1:89:9B:7A:88:B7:AE:30:6A:A3:D6:33:97:B9:54
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21FE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UpnQBxHxiZt6iLeuMGqj1jOXuVQ.roa
Signing time: Fri 25 Nov 2022 04:40:39 +0000
ROA not before: Fri 25 Nov 2022 04:40:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8702 (0x21fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5299D00711F1899B7A88B7AE306AA3D63397B954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:2f:29:84:e4:d7:75:f3:78:08:76:11:1b:
e4:26:99:23:e5:bc:a9:f5:b9:f8:42:c5:b4:f2:0a:
e7:04:dd:bf:ee:4b:b6:cf:8e:e4:b4:ae:b5:f7:c9:
f1:67:3d:7f:c4:d0:d6:ad:fe:1a:e9:fe:6d:c2:86:
2e:76:c1:84:cd:35:8a:8a:e6:25:17:50:aa:f4:df:
a4:ae:c3:68:9d:85:7f:21:99:92:f9:71:79:d2:10:
ca:1f:35:c8:11:27:b6:56:e9:09:c4:7c:8c:8f:cc:
5b:5b:e1:17:6c:1b:a2:e1:cd:e0:29:5c:c2:24:9d:
c0:01:9b:c1:6c:30:fc:07:57:a9:ab:54:4e:f4:59:
59:87:a3:cb:f0:30:56:cb:36:7e:73:dc:61:fd:35:
b0:88:5e:70:ee:16:36:20:45:a3:82:71:d5:85:46:
d9:d1:9b:8d:c1:e3:fa:2f:49:8b:e8:20:cf:89:de:
fc:dd:8d:83:31:3c:9c:87:59:8a:ed:0e:3f:f2:70:
ab:63:fc:3d:6d:ab:9d:39:29:ce:ef:62:ba:4c:81:
4c:fd:32:f7:a9:e9:cd:c1:ee:2c:f1:94:ef:47:10:
11:70:a6:d9:c0:d7:82:01:08:38:9e:8f:a7:d6:1e:
d1:af:9d:7d:dd:ab:68:8a:21:72:bf:6f:9f:81:60:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:99:D0:07:11:F1:89:9B:7A:88:B7:AE:30:6A:A3:D6:33:97:B9:54
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UpnQBxHxiZt6iLeuMGqj1jOXuVQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.32.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:29:da:e4:93:f7:1c:9c:48:8e:a2:a3:08:16:5e:6b:60:b8:
a6:63:69:07:c3:34:58:1f:92:b3:f7:2b:b6:27:d1:45:59:71:
fd:d3:61:30:ed:f4:d1:38:32:51:fc:1d:b1:26:87:38:da:4a:
00:78:58:90:7d:72:1f:1b:19:95:09:fb:69:aa:96:bb:51:c8:
4e:00:8f:8d:ed:8f:11:0d:76:5a:db:01:b3:d6:d9:dd:bf:e2:
b1:24:31:64:89:8a:9d:10:20:ee:2f:40:ec:ce:20:68:fb:a6:
54:ef:80:ed:cd:e1:30:ac:c3:61:9d:1a:00:d6:cd:16:a4:34:
59:f3:8d:d3:4e:bc:e2:b4:32:06:c5:af:64:fe:40:82:a7:ac:
45:6b:4e:b1:b5:77:16:49:b0:0a:07:58:bb:60:33:41:81:05:
9e:09:61:2c:56:fb:7e:a6:68:be:16:24:77:36:e4:9b:3f:3b:
1c:9b:d9:66:bf:d1:88:9f:1d:4f:21:28:21:9e:79:79:03:ea:
9c:53:4b:3b:34:0e:34:83:70:86:a3:20:9b:b5:86:f4:45:67:
03:7e:1d:87:d1:81:ad:a6:61:88:5d:ef:32:83:d5:40:71:78:
ef:a6:76:70:55:f7:25:78:77:5b:ba:44:bf:85:0f:a1:0e:27:
ef:f0:04:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org