Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/avtUH0Via2ZUhJG8d7A1aJzfLis.roa
File: avtUH0Via2ZUhJG8d7A1aJzfLis.roa (raw, json)
Hash identifier: brmwNnuwPlIf7Bvm3DdK2Wqb3s1rbV0fHaHcX9lMzcg=
Subject key identifier: 6A:FB:54:1F:45:62:6B:66:54:84:91:BC:77:B0:35:68:9C:DF:2E:2B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B14
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/avtUH0Via2ZUhJG8d7A1aJzfLis.roa
Signing time: Wed 29 Sep 2021 02:46:07 +0000
ROA not before: Wed 29 Sep 2021 02:46:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.176.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6932 (0x1b14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6AFB541F45626B66548491BC77B035689CDF2E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:62:f6:cc:ec:1f:ad:30:bd:bc:b1:10:0d:
02:e9:0e:ac:89:eb:cc:4d:06:8b:4f:d9:aa:1d:f5:
88:cd:a8:52:aa:e6:77:c9:b3:2a:ef:7d:a6:0e:ba:
1c:69:37:94:51:84:ce:39:30:fe:90:b2:1b:55:c8:
d3:8c:60:15:ec:e9:cf:7e:8f:41:f1:5e:f9:d3:56:
c4:f2:86:ec:5e:5d:72:3e:57:49:b8:81:0f:82:16:
5e:e1:71:22:cf:5a:4a:87:e3:d9:3b:e4:f2:02:97:
ed:cd:58:ee:81:88:27:07:73:82:e2:1c:76:de:ee:
09:b4:9d:94:6b:ac:b5:c2:eb:8f:ff:8b:e5:1e:9b:
30:6c:e4:8b:d7:f0:9d:63:c1:70:ff:7f:58:2a:70:
09:9b:00:dd:b3:39:88:3a:97:eb:3b:bf:ce:34:67:
11:1c:37:0b:17:9e:1a:c1:5c:88:b5:82:8b:4b:6b:
16:da:54:1d:41:1c:c9:27:40:09:96:5c:a6:bf:bb:
7e:a7:80:39:ae:6f:0c:4f:70:65:32:3c:53:fc:9f:
9e:17:fc:e0:63:c0:1e:f1:6a:2f:1a:3d:aa:6c:69:
dc:31:80:b7:03:54:ca:a7:67:2e:8b:5b:5c:36:ac:
ab:79:60:13:a2:d1:9f:08:a5:53:1f:02:38:e4:01:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FB:54:1F:45:62:6B:66:54:84:91:BC:77:B0:35:68:9C:DF:2E:2B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/avtUH0Via2ZUhJG8d7A1aJzfLis.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.96.0/21
Signature Algorithm: sha256WithRSAEncryption
75:e5:39:29:82:eb:60:10:49:c5:db:40:01:64:1d:f9:fa:a5:
a1:52:a8:7e:e8:41:d4:04:93:2d:26:9c:60:22:eb:0b:49:0a:
28:a3:68:12:f4:4d:67:bd:dd:5d:c8:f6:fc:a7:c6:01:03:63:
26:f6:94:f7:2b:de:17:0c:22:fd:3a:37:73:34:0f:a5:74:5b:
75:c2:c4:28:84:ca:c9:bd:ca:a9:98:6e:9f:38:67:b3:e6:44:
d7:7d:0c:19:5c:98:3c:77:13:a8:4c:b6:eb:e0:8d:48:9f:ae:
d1:b4:09:b4:f2:9f:12:99:71:fc:b5:93:d8:82:8f:33:57:18:
da:f1:2b:05:b4:91:ae:a2:e9:e7:41:bf:d8:04:ad:78:84:59:
ca:15:f1:7f:7c:af:4f:60:fa:f6:8c:99:15:b4:c9:94:a7:92:
99:d1:6e:23:f7:48:13:da:83:8d:06:60:08:4e:d9:8a:6e:a8:
0a:8c:84:3f:17:d0:d7:1e:ca:e3:aa:ce:15:98:46:9b:6f:bc:
16:de:15:9a:a9:d7:b3:05:0c:c9:dd:3c:5b:d9:b3:6d:86:4a:
89:31:93:fe:ea:7b:34:1a:63:e2:4d:bc:95:d9:8b:f8:a6:40:
c1:34:e1:2e:7c:91:f8:5a:de:07:29:18:4d:dc:d5:c0:32:66:
6f:41:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org