Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VCKzaKMLqtA7N-BCFveawkbaq4E.roa
File: VCKzaKMLqtA7N-BCFveawkbaq4E.roa (raw, json)
Hash identifier: RSTSh7tpKqhp8fNV54yHDxe3rDxqspLw8b4PXZBOUug=
Subject key identifier: 54:22:B3:68:A3:0B:AA:D0:3B:37:E0:42:16:F7:9A:C2:46:DA:AB:81
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1797
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VCKzaKMLqtA7N-BCFveawkbaq4E.roa
Signing time: Sun 07 Feb 2021 12:20:31 +0000
ROA not before: Sun 07 Feb 2021 12:20:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6039 (0x1797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:20:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5422B368A30BAAD03B37E04216F79AC246DAAB81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:5d:0a:2d:07:d9:0a:cb:6f:70:ff:39:12:
0e:2c:34:90:11:a7:cf:ea:00:95:97:c9:20:c9:ea:
ae:24:5a:31:25:17:4e:41:76:78:89:2c:06:8b:16:
d1:dc:6c:63:b3:34:41:b5:11:9b:91:6d:e7:df:76:
3d:f6:b5:cb:bf:76:5e:08:d2:88:d8:e5:e9:fd:19:
c4:24:5f:7f:33:8d:97:1b:20:76:40:a2:a2:25:bc:
e8:68:b3:97:3d:68:5a:5d:e1:7a:ed:fd:3b:e1:7f:
5f:19:b9:a8:d2:42:3c:f3:e0:f3:c6:72:aa:71:27:
e2:be:d2:4c:4c:13:40:a9:4f:d0:da:12:3f:4c:70:
1a:76:4c:d4:be:b0:0d:30:b9:65:7b:eb:5b:86:d9:
b3:55:d6:bf:72:8f:86:dc:c0:9e:66:cb:4c:3d:b8:
19:4d:7d:3d:57:5f:60:53:37:db:f5:4c:62:df:77:
08:f8:df:bf:05:e9:8c:e6:e7:e5:2f:3f:5c:cc:3b:
8b:2d:a8:86:6b:06:a9:fe:2e:ba:39:35:b7:d4:22:
31:00:67:e3:66:9e:3f:69:fe:3b:e3:6b:87:8f:43:
ce:36:8b:e1:2c:3e:28:4d:d5:57:2a:78:66:cc:75:
a2:d8:a1:3d:27:fd:ad:ad:fd:a9:d8:c5:c4:16:e1:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:22:B3:68:A3:0B:AA:D0:3B:37:E0:42:16:F7:9A:C2:46:DA:AB:81
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VCKzaKMLqtA7N-BCFveawkbaq4E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.248.0/21
Signature Algorithm: sha256WithRSAEncryption
36:91:46:97:f6:e8:be:d5:23:d0:9c:7d:90:96:c3:20:e6:3b:
71:f5:01:f9:d9:ab:c2:39:34:14:65:6e:bc:a4:4a:cf:18:96:
85:39:5f:5b:2a:90:3b:7e:bb:a3:f8:e5:5b:58:43:63:02:42:
ec:2b:69:5c:9e:e7:1c:16:e6:7e:76:5e:c3:d1:c6:55:87:80:
ff:a4:0a:80:eb:cc:2b:a3:f0:bf:eb:b1:07:47:ef:4a:14:26:
fe:c8:c2:7c:d2:e6:30:42:06:03:60:4e:9e:72:32:c3:e5:4d:
84:c2:f2:77:e5:43:b7:53:31:7a:e2:20:8a:4f:99:c6:6a:00:
53:85:7f:7c:01:ec:97:89:80:dc:b2:69:3c:37:f1:43:86:ea:
72:1a:6b:99:f7:48:75:ad:9f:d5:43:a8:9a:04:34:66:ba:3d:
1c:4a:ac:cd:8a:38:f1:f5:17:5f:48:29:a2:5c:ad:ec:a1:75:
23:6e:44:df:d6:55:c0:6c:5e:81:e0:f1:0d:e1:99:ec:d2:58:
95:0d:b8:0a:80:bf:8e:e1:88:bd:7d:4c:33:dc:02:67:f3:97:
27:69:f3:f2:f1:e1:c2:c9:13:a3:86:10:d2:29:e3:b6:a3:a1:
d5:be:21:71:bb:44:4b:9f:ed:45:ca:73:a6:a3:1c:e0:a8:4d:
d1:36:37:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org