Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZCL273uOQSbmQIQYbkXE2nfVHPU.roa
File: ZCL273uOQSbmQIQYbkXE2nfVHPU.roa (raw, json)
Hash identifier: Oe92FQqH/X+VXmOnkV4tEx7dMWIQ9tOBJ06DHVGJPOQ=
Subject key identifier: 64:22:F6:EF:7B:8E:41:26:E6:40:84:18:6E:45:C4:DA:77:D5:1C:F5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZCL273uOQSbmQIQYbkXE2nfVHPU.roa
Signing time: Thu 15 Sep 2022 02:53:03 +0000
ROA not before: Thu 15 Sep 2022 02:53:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.46.64/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6422F6EF7B8E4126E64084186E45C4DA77D51CF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:82:25:ad:f3:2d:96:e0:44:8d:14:04:69:
d0:df:f1:1d:83:a6:8d:bb:0b:e0:92:09:21:8a:0f:
f4:fc:72:50:bf:59:1d:6a:38:c1:9a:e1:9a:b8:d9:
0e:83:74:ba:4b:1a:db:b3:40:b1:3f:ad:39:85:00:
82:a6:88:79:4a:1a:e7:8b:76:d1:56:60:00:e7:df:
aa:4a:ac:e2:b0:ca:ae:bc:e3:b4:04:5d:70:16:d0:
58:63:9d:24:b7:29:0c:4b:5e:4e:cb:18:fb:d3:2f:
55:d2:ee:2c:bb:17:03:5b:fd:18:76:84:23:c5:3f:
8d:38:45:9f:74:30:cc:2a:a3:e4:ac:40:17:32:f6:
4a:67:fd:b7:2d:45:12:96:e2:2a:8a:52:19:2f:5b:
3b:2c:9c:d0:e0:0b:c2:0d:9b:28:50:c1:17:56:a0:
b6:e3:31:99:f1:9d:f5:84:0a:c3:22:e5:9e:05:88:
00:82:aa:35:56:2c:3a:fe:83:64:ca:7f:37:e6:14:
ea:bb:2c:38:96:19:37:fc:c5:49:07:5a:7a:01:35:
08:91:14:7e:12:79:83:94:8c:1b:f5:25:0b:b7:df:
51:91:b3:21:a7:05:ac:a4:18:5d:50:7c:cc:61:44:
84:43:38:a7:41:dd:63:8f:b7:58:7b:66:33:cf:f3:
e2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:22:F6:EF:7B:8E:41:26:E6:40:84:18:6E:45:C4:DA:77:D5:1C:F5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZCL273uOQSbmQIQYbkXE2nfVHPU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.46.64/26
Signature Algorithm: sha256WithRSAEncryption
46:7f:f6:5b:c2:6a:8e:e2:b9:0d:06:ca:6a:06:27:e9:d0:3e:
b9:89:2b:43:82:26:be:c6:f5:9f:a6:4e:aa:51:a3:96:47:06:
8c:9a:14:04:13:f0:b8:47:f5:dc:f9:73:62:d8:9f:94:ec:d4:
5e:90:2b:4a:c7:85:44:c1:80:09:62:a4:ca:10:f7:81:c6:00:
72:56:b0:7b:b8:07:30:52:ec:80:1d:69:2c:dc:96:ce:f5:30:
33:15:66:2c:48:f8:3d:34:d4:21:56:11:82:27:1b:0c:4f:5b:
b3:44:0b:b0:a7:b5:8b:03:3a:86:33:37:6e:0e:5c:0b:b3:7c:
5d:23:b3:80:e7:b7:98:f6:61:e6:8f:d4:61:8c:f7:c9:74:f0:
fe:80:3f:0f:46:64:a6:35:e3:b7:03:af:26:43:d5:c6:72:9a:
39:e3:f6:7c:e6:5b:52:77:b2:b4:14:ec:58:67:35:20:1b:c0:
e5:c1:07:b5:cd:5c:c0:c4:f0:21:60:48:de:2b:a8:e4:b8:f7:
cf:de:a7:44:43:e0:5b:21:1d:9d:e9:88:9b:bb:f2:2a:44:23:
14:c7:81:9a:16:8f:4c:9c:0e:e0:33:8e:a1:ab:c4:9f:93:cc:
f6:8b:06:39:5a:72:45:d9:3c:21:db:2f:71:34:c1:bc:21:ec:
d4:64:70:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org