Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VYMkSQy9FuPqNOUy3uoGW0KiejA.roa
File: VYMkSQy9FuPqNOUy3uoGW0KiejA.roa (raw, json)
Hash identifier: MsHyAmO8hSHTMWRGvvzbPdzvHAlZcUy+6VLmFLRirmQ=
Subject key identifier: 55:83:24:49:0C:BD:16:E3:EA:34:E5:32:DE:EA:06:5B:42:A2:7A:30
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1549
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VYMkSQy9FuPqNOUy3uoGW0KiejA.roa
Signing time: Sun 07 Feb 2021 12:03:48 +0000
ROA not before: Sun 07 Feb 2021 12:03:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.126.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5449 (0x1549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:03:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=558324490CBD16E3EA34E532DEEA065B42A27A30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:0a:8d:29:fa:18:a6:3d:62:d8:7e:72:c8:
a4:85:39:43:34:bf:9b:0a:08:53:3a:4b:27:8b:91:
9d:65:46:0e:f1:97:63:e6:e8:27:b5:41:5d:83:47:
a6:a7:a5:20:cd:c3:89:be:9d:89:54:65:8b:a7:d1:
fa:5f:c4:5f:6d:d9:ca:fa:12:46:dd:d9:c2:91:5d:
87:d1:8e:91:03:3d:43:43:71:59:9e:e0:97:08:48:
98:b4:2a:8a:2f:7f:0c:b7:39:13:9a:52:2e:33:29:
08:68:4b:45:33:02:9d:8b:98:05:d0:f7:d2:60:61:
53:a7:c8:61:51:21:ce:f7:45:a6:e8:29:89:50:64:
5e:c3:f5:58:10:d3:8a:8a:89:e8:26:83:6b:6b:e9:
c6:6d:b5:14:d3:1a:25:25:48:d3:a0:0a:4c:79:b9:
e4:f4:18:d6:8e:67:87:3d:54:4d:5f:46:f2:d0:f7:
77:65:0e:6e:97:e7:ce:7f:c2:60:c2:a0:3f:e0:6e:
3b:7b:e5:51:1b:b1:92:93:5e:a4:71:80:62:d5:23:
7a:2d:76:b6:29:aa:be:ac:5c:f8:f0:e1:d2:1e:a1:
82:a5:f4:ba:a7:27:5a:8e:a9:3e:14:38:aa:62:9d:
15:ff:ce:df:de:05:97:27:ea:ca:3d:e1:b5:21:84:
e5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:83:24:49:0C:BD:16:E3:EA:34:E5:32:DE:EA:06:5B:42:A2:7A:30
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VYMkSQy9FuPqNOUy3uoGW0KiejA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.126.0/23
Signature Algorithm: sha256WithRSAEncryption
79:1b:54:33:08:f5:d2:88:22:75:2e:b6:43:29:d7:c7:64:e7:
00:5f:de:65:f8:63:df:e5:9c:b3:22:9a:f3:a7:98:bb:7e:6a:
a1:54:68:47:3f:2b:61:32:0f:a2:52:ec:c0:60:7f:b3:36:1d:
0c:5b:36:88:ab:43:6d:1b:bf:0f:3e:2d:2f:b8:ab:b0:21:b2:
ac:2e:e7:2a:21:07:13:4b:5a:b4:fc:1e:0b:81:a7:6c:9a:74:
88:d6:56:80:d0:e7:d5:7f:9e:31:da:73:d3:93:0c:51:ab:2c:
31:ac:73:a2:5d:32:55:b5:aa:e5:a9:b9:94:b7:e9:a8:0f:c9:
29:93:23:05:3c:bb:c5:77:40:3b:a2:06:ff:de:ae:a9:2f:76:
a1:8c:20:35:c8:a0:81:c5:3e:8a:e3:d1:b3:78:de:a3:b3:64:
3b:03:34:46:82:a4:9e:de:a1:b8:58:25:2c:c7:d7:75:b3:77:
7c:e3:c6:d3:62:76:53:d3:ef:d1:06:40:43:c3:f8:d0:25:2c:
6b:7f:40:3a:a7:e6:42:cf:84:f6:2a:79:a7:4f:f0:d1:12:62:
e1:e4:7c:82:57:e0:e7:f4:7b:24:83:06:6c:79:f6:08:0c:25:
92:bd:72:63:b8:3b:0f:db:20:b8:1e:0d:1b:b2:c9:b5:b9:46:
e5:6a:d5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org