Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X_Kb8OeVveRXVwMz7gAljDus98E.roa
File: X_Kb8OeVveRXVwMz7gAljDus98E.roa (raw, json)
Hash identifier: cHGQjrFTarymqmjB1rwOTGFEtwv+oyOrYTciDCVk3B0=
Subject key identifier: 5F:F2:9B:F0:E7:95:BD:E4:57:57:03:33:EE:00:25:8C:3B:AC:F7:C1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1581
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X_Kb8OeVveRXVwMz7gAljDus98E.roa
Signing time: Sun 07 Feb 2021 12:05:00 +0000
ROA not before: Sun 07 Feb 2021 12:05:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5505 (0x1581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:05:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5FF29BF0E795BDE457570333EE00258C3BACF7C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:63:46:38:ab:6d:2c:33:61:a6:d4:81:c4:c0:
55:28:a3:f9:28:f2:9d:68:a2:13:87:69:10:a3:c4:
26:e9:e2:03:59:85:61:74:f7:d2:04:a5:0d:9d:77:
61:3c:26:f3:4c:a2:70:e0:e5:3c:e8:55:ff:4e:6c:
56:d3:bf:52:89:01:14:01:4a:e6:2c:a7:09:29:c5:
d2:8d:de:a6:26:cb:2b:1b:d9:c8:3f:bc:17:af:d1:
93:43:b0:62:62:a6:0d:f9:f8:01:bf:07:a8:7a:0f:
2e:05:4e:99:c1:b0:dd:d6:b9:f1:39:a8:48:24:0e:
9b:88:c6:bc:6d:68:40:6b:89:b1:30:91:88:18:8a:
19:f3:e3:75:c1:af:5b:7a:7a:12:51:90:3b:e5:ab:
04:82:6a:15:ba:90:a1:ba:90:61:c0:ac:74:a2:66:
2d:f1:53:7c:76:5e:11:30:f2:2a:04:84:32:6f:a9:
e9:30:6a:dc:c9:90:13:ea:13:82:c0:90:d7:9d:09:
7e:0b:a6:2f:9d:a9:9c:4a:39:26:6f:cb:3f:a1:cf:
11:09:b3:cd:ae:28:c5:34:c1:bd:a8:90:6f:b7:40:
f9:05:c7:42:4a:de:af:b4:92:16:15:50:6c:fd:4c:
68:4f:31:a1:39:dd:75:3e:b4:78:bd:71:7f:b2:e2:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F2:9B:F0:E7:95:BD:E4:57:57:03:33:EE:00:25:8C:3B:AC:F7:C1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X_Kb8OeVveRXVwMz7gAljDus98E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.208.0/21
Signature Algorithm: sha256WithRSAEncryption
af:b3:12:28:f1:da:14:85:96:9b:83:1d:a4:ca:fe:90:47:ea:
c8:5b:72:02:ab:14:51:2c:2a:df:3e:ef:08:5c:88:d6:3a:49:
44:0e:04:c8:8a:2d:99:4b:c9:a3:d4:bf:74:30:e8:df:a2:6a:
c7:6d:ef:ab:ef:5e:e7:56:9f:77:ac:63:b4:df:cd:aa:54:44:
fa:cf:4b:77:f1:da:ad:79:b4:94:29:28:70:a8:7e:b0:35:34:
af:fa:70:e6:9f:fe:93:f2:3f:43:f4:58:01:ec:fe:3f:09:46:
55:70:a2:ba:34:ea:8d:73:1a:16:04:f1:c1:50:51:6a:3e:c6:
0c:4b:75:b6:69:09:a3:9d:b9:5e:d1:c6:50:57:77:e6:80:35:
ec:a7:d9:b9:a6:f3:ec:8e:fb:79:dd:0a:87:b4:c9:54:18:3d:
05:11:be:18:d9:39:0b:9f:2b:58:c2:8b:da:78:d5:5a:0d:c9:
3f:6a:3c:ef:2d:87:7f:41:e8:7d:c5:53:a9:09:27:8d:06:f2:
30:7f:c5:76:1d:c0:b0:85:8d:03:ef:69:69:8c:4c:b5:53:b7:
79:4a:f0:f7:fb:25:a5:75:e4:37:4c:01:96:7a:34:65:c0:31:
30:50:e0:65:a4:0c:bc:c2:87:dc:d3:02:f9:09:72:30:12:b6:
e6:d7:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org