Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YWWHU6pv2RymtWmz9oGGKkOD2kc.roa
File: YWWHU6pv2RymtWmz9oGGKkOD2kc.roa (raw, json)
Hash identifier: iVabfFfKymRg04uMxiYJMXFw1VUSeSKb+k5ptooauZ0=
Subject key identifier: 61:65:87:53:AA:6F:D9:1C:A6:B5:69:B3:F6:81:86:2A:43:83:DA:47
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CEA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YWWHU6pv2RymtWmz9oGGKkOD2kc.roa
Signing time: Wed 29 Sep 2021 02:48:23 +0000
ROA not before: Wed 29 Sep 2021 02:48:23 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.177.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7402 (0x1cea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:23 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=61658753AA6FD91CA6B569B3F681862A4383DA47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e1:6d:a1:9f:3e:27:18:df:4e:e5:f6:10:45:
cb:78:d5:47:19:3f:11:4f:75:a6:de:26:ae:7a:73:
ea:56:fe:cd:69:dc:99:dd:e7:0b:25:66:40:ed:99:
f3:17:fa:36:89:a4:65:02:d0:50:f8:7f:50:14:77:
65:66:c9:bf:c8:c7:e5:08:e7:d4:a2:21:ee:7d:27:
18:01:85:e9:d5:9c:32:5e:23:af:6e:b9:e0:dd:84:
19:10:05:f7:be:b7:59:0c:5a:0b:89:4a:28:49:03:
6e:6c:c1:59:7d:57:a0:e3:88:ad:02:8e:ef:96:5d:
29:23:0f:ac:37:ea:0b:42:0e:4a:ad:8b:b5:4f:21:
a4:a6:75:42:97:ff:0b:37:d8:01:f9:97:16:f7:cf:
17:59:e5:2f:71:83:12:9c:51:75:8a:31:1a:d1:af:
2e:05:53:d8:f5:32:5c:f8:e7:60:e6:9b:85:29:85:
ea:72:d9:67:fb:91:ca:e9:0e:a5:0c:41:cd:02:d0:
1f:72:23:82:fa:0b:88:2f:8c:c2:11:33:52:8b:1d:
88:b0:0e:4e:0d:34:b3:26:8e:fc:de:8c:98:00:9a:
04:eb:13:9f:a3:82:8c:cc:30:ae:e3:41:26:b5:93:
c7:7d:25:8b:a0:61:9b:72:cb:53:65:18:b4:a9:b1:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:65:87:53:AA:6F:D9:1C:A6:B5:69:B3:F6:81:86:2A:43:83:DA:47
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YWWHU6pv2RymtWmz9oGGKkOD2kc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.184.0/21
Signature Algorithm: sha256WithRSAEncryption
75:dd:ed:d6:4f:ee:61:84:e4:54:2a:5e:b1:f4:cd:fb:ef:be:
d8:b2:e1:e8:64:98:85:56:40:6e:16:4e:90:05:e6:55:02:06:
f0:c0:6c:8a:93:94:a2:04:34:33:13:b3:75:7a:69:cb:88:17:
c3:a6:47:2e:03:74:00:5a:45:87:d1:ef:e7:ff:63:0a:f9:80:
28:bb:05:36:fb:ba:49:6d:df:78:c1:2c:f0:a5:bc:f6:d0:82:
16:83:2b:cd:4c:a8:12:f8:d2:9b:e5:f8:09:99:c6:22:87:c2:
37:39:79:e7:f2:db:b2:ea:e2:18:5e:13:04:05:16:50:7a:4f:
8f:37:4e:22:03:63:e9:71:a0:3b:d8:1d:30:d0:46:c8:e3:0d:
fa:73:96:f8:ee:74:54:2c:64:3f:51:40:30:86:61:5c:94:40:
36:c4:f9:47:05:f3:89:9c:f8:62:ab:54:5d:54:5f:78:04:7d:
d7:81:e5:64:e9:e4:57:96:4a:5d:70:44:f6:05:99:56:80:b2:
22:1d:f1:54:be:70:1f:64:a6:f2:42:cc:76:da:95:02:50:58:
81:88:07:62:a3:72:74:cf:69:0d:44:db:57:44:6f:f7:6d:5a:
84:04:3e:bc:03:d3:6a:99:5c:1b:8b:e8:86:ad:32:34:0c:c2:
f3:e7:9a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org