Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aOjTo6momHxlPPZeAu6K5qETJZk.roa
File: aOjTo6momHxlPPZeAu6K5qETJZk.roa (raw, json)
Hash identifier: CrZPCdW4cm+IMr0Vbt8SjA1MfJcyhxCpsLh3qXe39aA=
Subject key identifier: 68:E8:D3:A3:A9:A8:98:7C:65:3C:F6:5E:02:EE:8A:E6:A1:13:25:99
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2198
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aOjTo6momHxlPPZeAu6K5qETJZk.roa
Signing time: Fri 25 Nov 2022 04:40:06 +0000
ROA not before: Fri 25 Nov 2022 04:40:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8600 (0x2198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=68E8D3A3A9A8987C653CF65E02EE8AE6A1132599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:58:1b:59:3a:64:a1:87:c6:c5:8c:33:19:
d2:82:f4:4a:33:e6:28:81:10:09:4f:64:fb:ce:9a:
7a:b0:e9:44:07:b1:d2:a8:8b:c2:3c:71:13:5c:27:
15:ff:b0:a7:4a:98:62:25:01:bc:15:2b:80:8c:e6:
7c:55:af:f6:9f:3e:ad:33:73:c1:ed:63:74:bd:00:
9d:66:31:89:af:45:72:f0:7f:66:e0:7e:9b:fc:ae:
d0:4e:ef:0b:0d:9a:47:fa:84:7b:07:7b:9a:a5:b9:
24:fd:cf:ec:98:2b:b7:54:04:57:ec:6b:29:36:a3:
1f:72:8d:1f:2b:56:4f:49:14:5f:be:39:84:4b:76:
8f:ef:23:de:10:db:0d:26:5d:4e:6f:f3:f2:69:b7:
53:58:7f:0a:20:9b:87:54:0f:f0:59:f2:51:89:e4:
22:44:88:f1:91:ec:11:cc:bc:42:a5:ee:90:ff:d4:
10:10:6b:1b:c9:e2:07:e2:43:ff:34:4a:4b:53:7f:
2e:26:68:87:af:a4:ba:ea:91:17:68:3f:49:ca:31:
d4:0f:2d:39:4b:3d:1f:73:93:f4:37:6a:99:cd:4d:
4a:5b:d7:c1:4e:77:8e:0f:ef:eb:d8:6b:a3:8b:cd:
82:b8:a7:76:f3:54:c6:41:df:ed:de:2d:51:3f:0e:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E8:D3:A3:A9:A8:98:7C:65:3C:F6:5E:02:EE:8A:E6:A1:13:25:99
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aOjTo6momHxlPPZeAu6K5qETJZk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.22.0/24
Signature Algorithm: sha256WithRSAEncryption
36:31:14:ef:5e:83:32:9f:85:d3:95:44:12:1a:da:2c:1b:66:
40:ef:68:47:61:8d:36:f4:10:20:d6:33:61:8c:d3:34:58:71:
96:44:88:69:cf:5a:fd:92:90:40:4d:51:98:2b:9a:f5:76:d5:
e3:d4:09:59:cb:4d:70:65:d3:5c:27:69:8b:61:a3:2c:43:8e:
d1:23:f2:c1:29:e5:99:fc:e7:ab:78:38:6c:8f:45:30:9b:92:
75:32:71:50:54:85:3c:b3:45:7f:dd:33:45:e0:ee:3d:e0:24:
11:f2:31:d2:9a:04:ab:62:68:0d:9e:32:96:e3:a8:b8:fa:8c:
1d:65:07:14:c9:0f:e5:8c:36:89:d1:2d:56:0c:22:a3:f6:70:
1b:99:e0:e1:1f:d9:43:0f:f6:5c:81:6e:66:fe:81:4f:c9:e4:
f0:83:41:5d:e7:39:fb:7b:66:33:c5:07:ff:82:69:f8:a1:70:
85:9b:c4:fb:95:18:da:4b:a5:94:22:7c:61:c2:17:ab:f4:c7:
3e:58:cd:cb:7c:47:ac:b5:9c:8a:07:8f:96:bc:9c:19:60:c1:
bc:5e:69:24:82:6a:b5:42:de:5d:d6:97:8c:4e:52:48:0d:3c:
23:83:fc:26:87:91:79:d4:aa:b3:12:50:27:48:f1:bc:c6:14:
70:eb:75:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org