Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WZwokBUKL89RxHFypuBlLe5e-nY.roa
File: WZwokBUKL89RxHFypuBlLe5e-nY.roa (raw, json)
Hash identifier: YUYsl50gsDpHdkrBUvC5ABvDQ+BSkgo/OVJwwjXys/g=
Subject key identifier: 59:9C:28:90:15:0A:2F:CF:51:C4:71:72:A6:E0:65:2D:EE:5E:FA:76
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WZwokBUKL89RxHFypuBlLe5e-nY.roa
Signing time: Thu 15 Sep 2022 02:53:30 +0000
ROA not before: Thu 15 Sep 2022 02:53:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=599C2890150A2FCF51C47172A6E0652DEE5EFA76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:15:09:5d:20:4e:53:60:ed:35:ce:b2:e0:
f6:69:03:e0:02:c8:71:77:48:41:96:38:96:7a:97:
2d:d4:f8:b0:64:4a:6d:20:dd:c0:67:9b:b0:ff:e8:
4d:02:68:6b:7c:e4:04:ce:c4:c3:ab:22:47:83:72:
87:f9:a9:da:28:1e:c5:da:64:33:37:35:4d:1b:89:
87:cc:cd:bc:eb:82:e3:7a:2d:35:9b:8f:c9:b8:43:
b7:a8:87:45:65:aa:33:86:7a:b3:10:12:6e:90:ce:
cf:c0:c2:53:19:77:bd:13:bf:ca:80:5f:74:7d:36:
15:a3:1c:08:70:a0:da:a2:68:d9:8f:39:bf:01:1c:
d0:ef:f8:e7:ba:25:c6:31:00:b2:83:dd:f4:52:f9:
2c:0a:70:36:21:33:43:74:3d:41:8e:6b:7e:2f:77:
b2:79:7c:a3:42:bd:ab:f8:ae:6d:5b:8a:b8:a0:6c:
53:e3:62:dd:90:53:de:23:33:87:34:6e:79:ef:75:
37:14:2f:7a:aa:09:bc:5c:55:66:7e:0d:ee:0a:a5:
ab:c8:59:55:b4:7d:71:b2:08:4a:12:9e:9e:85:57:
73:26:c6:9b:37:bb:37:a1:9d:b7:26:37:a1:18:cb:
0e:3f:c6:48:8f:2b:ff:90:e7:49:4f:1c:78:d9:51:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9C:28:90:15:0A:2F:CF:51:C4:71:72:A6:E0:65:2D:EE:5E:FA:76
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WZwokBUKL89RxHFypuBlLe5e-nY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.168.0/21
Signature Algorithm: sha256WithRSAEncryption
24:8d:32:08:a9:9c:88:7c:76:66:df:e8:4b:20:25:23:02:87:
80:c9:f5:16:dd:b6:5e:1c:f1:1a:a8:ff:66:11:fe:3f:3f:d2:
a9:a4:1d:8d:06:66:df:55:8b:a5:ef:52:1b:21:55:24:d0:0b:
f9:e1:54:b7:f0:25:ed:25:c0:d3:fd:f6:9a:d5:72:f6:e8:00:
33:e1:fe:d2:6e:61:66:f7:9e:4d:de:d9:6e:3b:97:a4:27:71:
2d:a4:4b:25:9d:d0:07:15:d5:46:35:29:54:3a:1c:82:df:22:
8a:47:de:f6:6d:fc:a3:d6:96:f0:f7:2c:76:54:9e:88:17:06:
c0:f4:e9:9e:7e:10:47:21:f5:93:db:7c:43:22:81:aa:35:5d:
e0:18:26:03:cf:ab:b7:d4:a4:2f:cf:04:93:b6:0b:44:65:47:
0c:10:80:dc:9b:eb:c7:ed:85:bd:92:f5:e5:ba:df:ee:57:c7:
20:7b:d3:65:d8:9e:07:d5:cc:76:87:be:4e:ea:35:fd:4b:4c:
eb:ca:be:d4:51:0f:db:43:11:1e:f9:34:a0:8a:b5:be:c5:91:
3b:ab:f0:c8:aa:b6:35:19:59:71:70:39:4e:d0:03:c7:ff:f0:
33:b6:f4:67:cc:5c:f0:48:ba:a2:fe:2d:a7:0d:20:88:a2:a1:
61:c8:b2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org