Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aoXhYB2c4CoKmGq4hHYHOL3XmXw.roa
File: aoXhYB2c4CoKmGq4hHYHOL3XmXw.roa (raw, json)
Hash identifier: jHqnCN6eV7mlmYe3xJVCdMYMJ8R5aOOkibIhyNxxES8=
Subject key identifier: 6A:85:E1:60:1D:9C:E0:2A:0A:98:6A:B8:84:76:07:38:BD:D7:99:7C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aoXhYB2c4CoKmGq4hHYHOL3XmXw.roa
Signing time: Thu 15 Sep 2022 02:52:38 +0000
ROA not before: Thu 15 Sep 2022 02:52:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6A85E1601D9CE02A0A986AB884760738BDD7997C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:8f:d6:0e:cf:c3:77:c8:fa:65:ef:db:73:
3a:d1:13:b4:a2:e6:41:ce:2f:5e:61:34:6e:60:8d:
dc:7d:6d:05:5e:e9:65:94:64:72:65:d9:57:fb:f4:
8a:7e:1b:33:53:40:87:3e:1a:a6:b6:a5:39:5a:f6:
5a:45:0f:e5:dd:14:81:53:29:47:3f:ae:db:83:15:
97:09:6a:cc:ab:4a:fd:0e:50:03:17:49:0d:78:28:
78:9f:10:86:36:91:b9:27:bc:2c:c2:0c:2a:49:f3:
e0:bc:fc:8f:b6:dd:64:0d:64:5c:bc:05:a8:f7:1c:
1f:9e:8c:0e:4c:04:8f:98:76:38:37:39:9c:fb:d3:
3b:d9:de:f1:c9:b9:42:37:31:dd:e2:bd:dc:11:14:
8b:3b:44:43:27:51:8f:45:8d:09:75:3b:4c:f9:51:
f9:64:35:a2:86:4d:72:e9:1d:a6:73:bf:2a:2d:df:
a6:76:59:9f:0d:4c:1c:cd:ed:3f:f6:fb:45:e7:9d:
52:54:a0:b7:12:00:92:56:9f:f4:19:44:1a:47:a3:
68:f6:13:69:db:11:4b:ae:14:7f:58:1e:7d:08:35:
08:d9:b6:a9:d3:e2:00:6c:52:4f:4f:5d:20:ec:08:
15:41:5d:38:f5:1e:ea:92:a8:80:3a:83:17:14:5d:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:85:E1:60:1D:9C:E0:2A:0A:98:6A:B8:84:76:07:38:BD:D7:99:7C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aoXhYB2c4CoKmGq4hHYHOL3XmXw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.248.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:19:3d:b0:4b:4f:bf:2f:96:2b:ed:62:bc:5c:a5:03:23:c0:
73:3c:4f:9d:96:9d:7c:d3:c4:0b:b9:ee:80:12:72:80:28:c3:
9c:3c:b3:d3:c6:26:26:25:58:f4:d7:93:4f:75:87:ca:7a:9e:
4b:c5:44:7c:6f:22:d5:c4:70:5a:51:85:8e:4f:a9:29:01:5e:
0f:4f:13:65:3e:39:37:5f:25:db:fe:0d:90:30:c0:4c:01:32:
1d:82:5f:6d:3f:47:14:e3:9f:37:d3:3a:7f:53:82:2e:19:ee:
66:c2:2e:9c:a3:1a:0b:e1:42:b8:f3:95:fc:15:05:30:27:f5:
be:0c:fc:13:e9:b9:d7:7e:2a:23:30:11:00:cc:e3:02:22:c2:
50:f5:5d:1c:8a:96:94:07:3e:ea:3d:a5:d8:75:b4:04:bb:ed:
5a:9b:f7:e5:48:67:22:d7:ba:84:35:06:73:f5:cc:20:95:44:
77:f9:01:21:54:3b:75:4f:ef:db:63:b2:e7:46:19:47:9e:2a:
5b:7a:8c:6f:4e:dd:b4:fc:c9:69:28:9e:c0:97:3b:9f:18:23:
ca:ef:f8:80:49:69:12:23:80:1e:72:df:fe:44:b4:f9:64:41:
81:62:54:5f:07:36:d5:81:01:3e:20:cf:c8:ea:24:df:4a:49:
e5:6f:a8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org