Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_MnYPO6eHqaJV0uoGuT3FLxk5yE.roa
File: _MnYPO6eHqaJV0uoGuT3FLxk5yE.roa (raw, json)
Hash identifier: 48WsT+Mr67b1YILTG5rIyWaQPOMsahXmHuCpiyIZ+bc=
Subject key identifier: FC:C9:D8:3C:EE:9E:1E:A6:89:57:4B:A8:1A:E4:F7:14:BC:64:E7:21
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F12
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_MnYPO6eHqaJV0uoGuT3FLxk5yE.roa
Signing time: Tue 29 Sep 2020 09:56:27 +0000
ROA not before: Tue 29 Sep 2020 09:56:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 180.176.220.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3858 (0xf12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:27 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FCC9D83CEE9E1EA689574BA81AE4F714BC64E721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a6:1e:e5:c7:ab:74:38:c4:dc:4d:d8:bc:ae:
f1:22:f2:b1:17:4c:a6:c3:e9:f7:14:be:8f:22:2f:
07:a0:73:dc:2d:38:a2:67:87:c4:dd:be:65:61:7e:
1d:f4:23:82:7d:23:75:82:c5:37:f3:c7:05:2a:b2:
83:6b:d8:f9:78:1e:49:4b:8c:1c:f9:05:41:25:59:
46:86:4a:50:66:12:ba:a5:b2:af:ff:ea:46:74:6e:
3c:d9:53:39:6b:a4:28:12:a0:d5:fc:f0:38:e0:81:
4f:f8:bc:b8:69:38:37:28:a5:e3:a4:62:3d:3c:53:
78:11:0e:c2:23:64:fd:73:3b:33:bf:cb:de:ed:f4:
6f:c6:e0:ce:72:28:d0:33:80:09:05:c3:73:08:8a:
69:a7:88:51:54:f1:4e:ca:e5:87:dd:62:5d:2b:f4:
f3:a7:18:64:7a:16:75:75:6d:f2:46:f4:d5:29:45:
1a:65:20:c0:ec:63:f0:20:ae:26:39:e8:59:75:b8:
3f:fa:af:6d:2a:01:1f:0c:92:9f:d0:ad:5d:e6:15:
05:e3:56:30:56:7a:f9:71:88:aa:c9:56:0d:a9:6c:
b9:20:d8:66:33:21:07:74:1e:4a:6e:b6:23:a8:c1:
47:4e:78:4f:d6:2b:01:a5:db:39:f4:a5:fc:79:63:
25:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C9:D8:3C:EE:9E:1E:A6:89:57:4B:A8:1A:E4:F7:14:BC:64:E7:21
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_MnYPO6eHqaJV0uoGuT3FLxk5yE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.220.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:dd:bb:f4:0f:93:20:05:d9:49:c1:b6:b9:ed:7a:ac:dc:66:
b3:67:da:96:12:32:fd:3b:61:59:33:c2:ca:be:a5:5d:9a:c9:
58:fd:7a:53:1b:93:7c:5e:c0:49:fc:ff:8b:0b:2e:35:eb:79:
d2:52:dc:0c:f6:d5:0f:db:dc:5f:bf:7c:1d:92:14:37:fc:5e:
f4:b8:6d:b0:16:de:c5:9f:37:de:3b:8c:50:0f:13:bf:76:8c:
b4:ef:0b:f8:35:d6:39:27:d8:18:27:26:1c:9b:db:3a:06:f4:
44:51:29:ae:ab:87:94:35:f3:1e:b2:ad:39:1d:58:76:20:af:
e7:fc:b7:f8:cb:e0:6e:af:88:27:cd:b3:43:8f:e6:96:5c:9c:
c9:f2:bd:90:39:31:18:00:4f:1d:1b:88:af:5d:73:da:35:20:
b7:0b:4f:2b:21:c5:cc:cc:6f:9c:7f:42:66:41:0e:4c:0c:db:
9d:6a:f5:b4:c3:a7:16:54:5a:b6:31:37:e7:46:63:d2:e2:d7:
d2:2e:42:ef:36:d1:77:ac:73:a3:18:94:07:d3:e4:5b:ab:fa:
52:59:1c:04:94:3d:94:d8:b4:b2:78:36:92:5e:7f:ab:55:5d:
39:73:60:9f:ba:05:25:4d:87:cb:72:b5:00:1a:c5:fd:e3:0b:
c4:ca:c9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org