Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_UY8P4iJddnqRd2uO4_wuL04T7Q.roa
File: _UY8P4iJddnqRd2uO4_wuL04T7Q.roa (raw, json)
Hash identifier: Uc9g8IIiqCowWL+lFm0WpX1muKI5WUxqXNm/NOSvKcI=
Subject key identifier: FD:46:3C:3F:88:89:75:D9:EA:45:DD:AE:3B:8F:F0:B8:BD:38:4F:B4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 141B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_UY8P4iJddnqRd2uO4_wuL04T7Q.roa
Signing time: Sun 07 Feb 2021 11:57:25 +0000
ROA not before: Sun 07 Feb 2021 11:57:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5147 (0x141b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:25 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FD463C3F888975D9EA45DDAE3B8FF0B8BD384FB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:bb:ca:b8:0a:0d:f7:1b:9f:b9:e8:6d:da:
d0:39:01:01:9d:8d:73:a9:03:f3:65:93:5e:b6:54:
19:09:c9:86:53:45:c8:d5:fa:56:6b:21:08:a0:17:
aa:2b:59:d6:c0:b8:39:1b:2c:0e:6b:02:4b:3b:cd:
70:88:fb:a4:6f:47:d7:bb:c7:d8:ac:01:52:42:bf:
f7:b7:17:18:a2:a7:9c:6f:b5:47:69:31:e3:c6:3a:
44:fa:15:37:e4:36:b4:f9:32:fd:1e:43:fa:42:e9:
b1:0a:46:d3:5a:13:b5:3f:dc:b1:80:f6:17:dd:5d:
f8:5f:b0:f3:e3:e8:4a:de:ba:4a:70:ce:97:bd:d4:
f7:cb:25:a5:2c:ad:8a:83:8d:b7:ed:85:f8:04:6b:
d2:c5:84:9a:69:f1:c0:19:c4:70:aa:e0:2e:80:a5:
e8:d5:64:0c:5b:e1:fd:c8:41:fa:5c:9e:ed:de:f4:
92:8c:79:0c:3c:11:85:02:ac:0f:a5:91:13:66:cc:
d5:11:a4:b7:fb:e4:c8:cc:47:21:d0:35:01:bb:b8:
b6:6b:29:25:fc:1b:8c:69:3f:53:c6:65:dc:b6:54:
ca:dd:c9:e9:fc:b0:be:29:fe:aa:94:05:1e:a7:f1:
94:49:e0:40:b0:7c:f1:0d:2a:7d:46:8b:cf:d5:d6:
8b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:46:3C:3F:88:89:75:D9:EA:45:DD:AE:3B:8F:F0:B8:BD:38:4F:B4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_UY8P4iJddnqRd2uO4_wuL04T7Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.16.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:68:ed:f2:28:6e:7e:13:1e:19:19:86:fb:f7:6e:0e:2d:c8:
41:4a:5e:cf:74:bf:4f:8c:b2:58:ce:d1:96:09:3f:48:78:e6:
6b:9b:95:10:5d:f1:8d:2a:2c:89:3b:f2:49:f6:05:26:d0:53:
4e:90:b4:42:67:a4:56:3f:43:1f:21:09:65:4d:b4:53:c5:e7:
32:d5:da:9e:49:62:52:fb:57:c9:f5:9b:14:1a:ec:ff:84:f2:
2a:9a:e4:dc:8a:bd:6f:8f:a4:44:5f:f2:74:56:75:42:dc:18:
6b:81:83:ce:94:49:bc:8c:87:74:77:31:2e:2e:d7:91:10:d7:
30:1a:e8:c1:8c:e3:ff:60:57:f3:d4:d0:2d:af:77:e9:ed:43:
78:b8:10:3f:b9:1d:2e:7e:24:cf:e3:6f:24:87:18:61:8e:a7:
55:c9:05:3d:9b:7e:7f:9c:5e:50:9d:64:12:24:3b:e3:f7:95:
fb:e8:0c:03:71:bc:15:85:d1:24:fe:71:11:d7:07:84:ff:58:
e1:7e:c3:9b:f5:05:7b:e9:54:23:93:3c:89:50:4e:bf:12:6e:
dc:ce:88:aa:2c:3d:47:a3:42:a4:a7:f9:1b:94:09:fe:30:99:
3d:77:5b:56:25:f7:3d:47:02:d6:07:89:8f:c3:1f:a4:1a:b5:
b8:0a:27:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:22 2023 by rpki-client on console-ams.rpki-client.org