Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wn7xMAjnDn_Ktw1XJvePm7oBjME.roa
File: Wn7xMAjnDn_Ktw1XJvePm7oBjME.roa (raw, json)
Hash identifier: PMNKfcL3iQHSXZBzC4YnGYIG6ph0OdMLw2Q2sTpZWoY=
Subject key identifier: 5A:7E:F1:30:08:E7:0E:7F:CA:B7:0D:57:26:F7:8F:9B:BA:01:8C:C1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BBC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wn7xMAjnDn_Ktw1XJvePm7oBjME.roa
Signing time: Wed 29 Sep 2021 02:46:56 +0000
ROA not before: Wed 29 Sep 2021 02:46:56 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.177.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7100 (0x1bbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:56 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5A7EF13008E70E7FCAB70D5726F78F9BBA018CC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:35:3b:9c:ab:d4:b1:72:1e:23:20:c8:92:6f:
48:ec:25:51:e1:4a:f7:90:f0:85:4c:1f:a0:c7:2e:
fa:99:f9:b0:d3:9e:4b:b8:47:8d:06:27:35:e7:52:
b8:47:6f:d3:3c:d9:bd:ea:f9:cc:54:9c:59:53:1c:
a2:1a:4f:02:11:0c:85:a4:e8:a8:a1:49:bb:51:6d:
8d:0f:28:06:24:8d:29:ce:09:bb:1e:d1:5d:62:32:
2d:cc:19:f3:08:f5:fd:5f:93:32:1a:c3:c5:ed:53:
13:f7:72:bb:d2:a8:d7:12:f7:f4:99:8f:8a:34:db:
78:cd:7e:1c:6f:61:4f:9e:9e:af:f9:32:e3:bc:0f:
80:d3:12:c7:93:b8:22:cc:64:ad:05:01:91:b4:e3:
b7:a6:03:96:09:92:ef:52:2b:7b:61:69:9c:f3:c0:
17:c2:90:5e:e2:71:97:cb:4c:25:23:19:25:34:0e:
a7:df:07:0d:91:52:b1:3b:7e:50:3c:02:91:b4:6b:
85:ca:dd:2f:5e:2a:db:1f:83:14:5e:1d:6a:f8:3a:
05:88:6d:28:53:b6:5a:cf:14:c4:5b:30:6e:a7:66:
f8:c2:34:18:e3:6c:91:0f:0b:1f:2b:a7:0e:78:e0:
7e:a2:cd:01:2b:af:b6:53:14:12:6d:d9:b4:d6:e5:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7E:F1:30:08:E7:0E:7F:CA:B7:0D:57:26:F7:8F:9B:BA:01:8C:C1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wn7xMAjnDn_Ktw1XJvePm7oBjME.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.108.0/22
Signature Algorithm: sha256WithRSAEncryption
27:21:ea:20:b3:30:88:3a:9c:c1:ec:bc:e8:02:c2:f6:57:b6:
92:e2:b0:5d:c7:7d:59:e6:d8:d1:38:e1:4a:b3:c7:2b:c6:ea:
09:07:97:10:bf:4a:8c:7e:04:f5:72:1e:c7:59:1b:62:8a:07:
83:cd:7f:87:06:22:14:cf:af:88:df:55:c4:92:42:d7:d4:b8:
36:31:39:02:50:1a:e6:eb:94:67:1d:02:33:7c:ef:a6:56:c1:
1e:64:66:da:1e:e0:01:25:ad:5d:93:78:b5:71:7e:58:c6:8d:
68:c4:24:dc:37:65:ce:0b:16:20:62:12:26:59:f0:b9:89:50:
56:a7:4e:a6:16:db:35:2c:47:fb:ea:ef:05:af:d1:81:3e:ce:
db:1a:54:f1:48:77:a2:0c:cc:d0:35:2d:75:94:da:71:87:60:
03:a1:f1:4f:40:55:94:9a:cb:fc:ab:45:f6:34:83:cc:6e:82:
65:dd:cb:79:33:65:bc:b9:69:f1:98:f7:30:43:97:a6:dd:c0:
5b:5f:12:f8:3d:73:e7:46:e1:c2:2e:5f:fa:4e:5a:7f:a7:35:
f1:ca:8b:f7:4e:d0:79:6c:fc:c7:b9:e6:9f:0d:e4:e0:53:66:
40:da:d8:45:1b:b9:b2:f8:03:40:b8:85:bc:b1:17:f6:5f:80:
27:5d:62:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:21 2023 by rpki-client on console-ams.rpki-client.org