Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VABkz-Prms4bC0KmmqzJIeUkdgc.roa
File: VABkz-Prms4bC0KmmqzJIeUkdgc.roa (raw, json)
Hash identifier: bYfpY8PG8HiGYz0saI8SiA/NjFJe+EZs9a+LDl9pMyY=
Subject key identifier: 54:00:64:CF:E3:EB:9A:CE:1B:0B:42:A6:9A:AC:C9:21:E5:24:76:07
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VABkz-Prms4bC0KmmqzJIeUkdgc.roa
Signing time: Thu 15 Sep 2022 02:45:05 +0000
ROA not before: Thu 15 Sep 2022 02:45:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=540064CFE3EB9ACE1B0B42A69AACC921E5247607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:95:f7:c9:32:71:79:0a:d7:a8:fe:a2:3c:
f0:99:00:ae:95:88:62:74:6a:9d:95:42:d2:12:54:
36:64:fd:76:5f:08:7f:bb:3e:93:0b:7a:6f:77:52:
27:a9:47:cd:7c:b7:5d:18:b7:86:68:41:65:55:ca:
4a:a0:1d:ab:77:85:8d:f4:f9:02:af:49:e2:90:62:
e2:e7:af:29:5d:f3:96:71:f4:98:aa:0f:2c:03:26:
b2:cf:b5:66:39:3a:eb:b0:83:2e:cd:b9:c9:14:e4:
e4:6b:23:ea:8a:17:ac:f1:28:51:40:55:51:6f:61:
04:bd:13:da:47:4d:08:8f:07:9e:40:53:ce:05:1e:
3b:08:da:db:f5:ce:6c:29:c1:c5:6d:79:48:4a:35:
20:9d:26:96:99:95:f8:c6:53:a5:32:f4:74:69:4a:
ef:ba:49:40:9a:b7:cd:f5:cf:c1:d4:cd:26:d8:18:
80:1b:1e:a4:d6:1c:28:2e:46:2a:cb:a0:a4:58:95:
4b:1e:f0:ac:17:ad:b4:26:d5:f7:4f:d2:d6:0e:8e:
a3:13:5f:a8:c7:0e:b5:5e:22:22:c5:38:d8:f1:fb:
82:db:c5:07:31:55:54:61:77:0e:a5:01:84:40:18:
cc:a7:d5:34:70:d8:28:7e:b7:d5:44:eb:79:48:b8:
13:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:00:64:CF:E3:EB:9A:CE:1B:0B:42:A6:9A:AC:C9:21:E5:24:76:07
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VABkz-Prms4bC0KmmqzJIeUkdgc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:c8:36:db:0f:fc:f7:9a:3d:12:b3:9b:90:21:31:00:e5:49:
d0:65:25:87:20:22:8e:de:49:a3:74:16:ce:64:98:10:5a:6f:
d1:cd:0e:b9:8a:f7:53:d3:59:24:1f:e7:64:24:42:f1:b5:b0:
41:d8:6d:e9:dc:2a:03:82:e6:61:2b:8a:86:a6:e7:ab:f5:3d:
2d:c3:42:1c:bc:7a:22:ea:e5:40:96:69:b6:d9:65:8f:ad:95:
fe:ce:ba:7c:b2:39:0b:b0:b9:cc:cd:da:45:30:3f:0d:87:cc:
7f:d1:16:76:93:98:40:60:2a:35:69:db:72:dc:d9:af:1e:c1:
93:79:fe:37:97:11:db:51:e8:3c:f5:aa:79:64:70:f8:70:5d:
0c:5e:eb:1e:0b:35:b8:35:1a:93:c8:3f:82:d0:6a:34:16:15:
32:6a:48:11:87:9a:85:59:d0:8f:46:53:78:82:b9:8c:08:05:
ef:14:2e:28:94:4d:83:9b:5c:2a:78:8e:47:6f:47:c2:da:0e:
7f:d8:65:e5:68:58:da:9d:de:ee:69:9a:09:3e:f3:c7:43:00:
b9:e2:33:98:c0:4d:b0:cd:0d:91:f7:26:6f:85:5a:7b:75:05:
04:9f:70:b3:67:ff:ab:7f:8c:31:92:54:06:6f:ab:25:9e:24:
bf:36:17:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org