Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wm5UnxcvCiuJQ2GwSF1tPlAvzok.roa
File: Wm5UnxcvCiuJQ2GwSF1tPlAvzok.roa (raw, json)
Hash identifier: D6rJH5MNuzWYHM2Mg1beWWAWRYpf96y46GhI8s2FkeE=
Subject key identifier: 5A:6E:54:9F:17:2F:0A:2B:89:43:61:B0:48:5D:6D:3E:50:2F:CE:89
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 16B5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wm5UnxcvCiuJQ2GwSF1tPlAvzok.roa
Signing time: Sun 07 Feb 2021 12:13:48 +0000
ROA not before: Sun 07 Feb 2021 12:13:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5813 (0x16b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:13:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5A6E549F172F0A2B894361B0485D6D3E502FCE89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4e:fb:e8:e5:3a:8e:c7:b3:b0:12:73:ad:b1:
49:69:c5:f4:d3:42:28:d4:24:70:96:00:18:94:59:
c2:30:46:44:05:1a:f0:c7:11:20:22:8e:50:1c:2e:
1e:08:ad:33:2f:3b:84:22:d9:aa:5d:f8:94:5e:8b:
2f:20:60:1c:f9:aa:f8:8d:13:e8:fe:f4:5d:1d:01:
43:c3:d0:f6:9a:25:2a:94:d8:3e:98:8a:ec:54:d8:
04:e3:c8:10:b6:07:6f:02:0c:8c:e9:06:10:d0:d9:
db:e1:5a:1a:c5:a1:ac:6e:39:43:c5:64:8f:f9:58:
61:eb:03:ad:1d:8f:1b:f6:5c:45:8f:b1:6d:8b:3a:
e2:dc:82:cf:c0:1b:6a:17:a4:8c:66:08:bf:a6:42:
31:76:60:6f:86:5f:f5:01:78:b4:25:99:a9:16:d3:
4b:74:82:0e:3d:7e:0d:0c:98:94:45:34:0d:b8:3c:
5b:0b:af:cd:68:d6:52:ad:d7:dc:87:74:20:ce:c9:
3f:4a:5c:34:ea:76:1f:84:d6:18:ed:bf:0c:73:e9:
a4:8f:35:e0:59:b3:99:e5:6b:b8:29:87:fc:9b:64:
21:55:6c:7d:9b:31:ef:25:14:8c:84:7e:5c:73:25:
b8:00:b3:72:3e:46:ad:af:5a:a5:a3:6e:a9:7c:23:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6E:54:9F:17:2F:0A:2B:89:43:61:B0:48:5D:6D:3E:50:2F:CE:89
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wm5UnxcvCiuJQ2GwSF1tPlAvzok.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:84:13:60:14:1d:c7:b3:a6:15:1c:84:aa:1c:69:f2:28:0e:
02:66:b0:ef:3e:b5:a7:ba:7e:23:d9:61:2c:7e:81:7e:66:17:
76:f1:f4:f1:a7:16:e2:cb:79:8e:f2:82:26:b7:e5:39:be:13:
1b:f8:22:75:3d:78:54:51:78:32:9e:8f:ab:bc:d6:7f:81:8e:
1e:93:40:5e:43:01:00:6d:9f:67:a0:d0:bc:be:48:c4:7f:0f:
23:91:6c:88:79:b3:b7:5b:68:c3:80:b3:ff:8f:c8:dd:64:47:
a7:7a:34:45:81:9a:39:9f:87:b0:6f:23:bf:b2:a8:ee:d3:5f:
a5:aa:dd:3e:b5:6f:06:0a:20:f2:13:ea:cd:c3:d7:9c:41:b0:
04:2c:f1:55:b9:79:99:63:28:42:70:e2:22:8e:8a:65:1a:65:
79:5c:d2:54:f1:88:19:f0:10:65:d9:24:78:2c:ef:33:2b:7d:
a7:92:3e:29:07:5b:f2:74:79:41:19:dc:91:67:5a:40:1a:09:
3e:77:d0:76:12:5a:ab:e7:dd:b6:34:71:05:be:65:23:f4:f7:
7c:e9:dd:99:ae:c3:9a:8c:71:35:8c:fa:f2:17:ee:31:f6:65:
ec:0f:5c:c7:a6:96:50:39:d2:eb:54:b0:3d:f0:8f:34:ce:73:
0a:a4:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org