Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b0df5a69Xg1QHth7wWpnOHJ5AEw.roa
File: b0df5a69Xg1QHth7wWpnOHJ5AEw.roa (raw, json)
Hash identifier: j5HW+QvobEnnnE8F1qa0XiHv41bjyy2CcSsuCwf278s=
Subject key identifier: 6F:47:5F:E5:AE:BD:5E:0D:50:1E:D8:7B:C1:6A:67:38:72:79:00:4C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CEB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b0df5a69Xg1QHth7wWpnOHJ5AEw.roa
Signing time: Wed 29 Sep 2021 02:48:23 +0000
ROA not before: Wed 29 Sep 2021 02:48:23 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.177.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7403 (0x1ceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:23 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6F475FE5AEBD5E0D501ED87BC16A67387279004C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:97:01:84:be:8f:09:a8:4d:56:be:70:0d:df:
4d:70:43:2d:3d:77:f3:61:47:fa:6c:65:66:f9:bd:
bd:c3:81:c5:fd:53:32:b7:48:d2:38:11:0e:cb:29:
76:00:98:91:ab:1c:c5:18:0a:20:ae:0a:99:c9:ca:
7b:fa:ca:bf:85:10:86:05:9c:51:56:c8:da:cf:d4:
73:36:97:d9:f4:a5:4c:07:44:2b:34:dd:47:b5:d0:
4f:a2:99:34:03:8a:b3:5f:9a:1c:c9:f2:d5:86:63:
cc:7d:9c:d3:bd:a3:97:73:70:02:ff:c7:37:b2:6d:
30:3c:1d:a2:cc:c6:34:8f:dc:b9:1c:48:ad:6a:d7:
0d:2e:ba:f6:0c:aa:62:ed:56:b3:04:ed:b4:ac:33:
c9:a2:f0:4e:3f:df:fc:24:0e:81:b1:69:2d:8b:1f:
7b:d7:6b:57:b9:f3:bf:cc:44:5a:a0:fa:8d:f7:72:
26:04:ac:5f:8e:23:68:9b:e3:da:7f:ac:6e:4b:ed:
89:8d:ac:9e:cd:60:ac:90:a0:ae:2a:cc:18:90:1f:
3d:6f:e8:ae:28:81:29:0f:01:45:15:2d:1b:5b:05:
27:f5:a5:7b:68:1a:2c:58:3e:b3:ea:5e:1e:a0:8e:
c5:09:03:25:2a:b5:4d:27:9a:f5:72:a4:f0:9b:06:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:47:5F:E5:AE:BD:5E:0D:50:1E:D8:7B:C1:6A:67:38:72:79:00:4C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b0df5a69Xg1QHth7wWpnOHJ5AEw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.192.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:d0:91:a2:c9:8c:e5:8b:d5:4a:53:b8:3d:73:3d:4b:75:ae:
4a:b8:d3:da:b7:45:bd:98:7b:40:d1:de:f2:00:5d:13:58:fb:
d9:f3:28:09:ec:cc:fa:e3:29:1b:71:fb:54:4e:cc:bf:63:6c:
7f:cd:93:a1:35:87:c5:c9:ce:3b:54:84:79:b6:50:8a:4e:95:
69:9b:e8:d1:7d:56:33:af:38:d9:66:7e:08:d8:3f:f2:8c:d2:
9c:af:75:10:60:01:ff:9a:08:2e:9a:85:19:7b:14:bd:e4:20:
d5:34:f1:9d:00:6d:ee:9c:6e:cf:77:56:7e:95:09:70:bd:22:
bd:73:a0:4e:be:d0:9a:8f:b4:f2:ae:d2:aa:68:16:b4:45:09:
aa:e0:a7:40:96:75:7b:b0:e6:cf:4e:ae:36:00:9e:27:fc:a3:
af:b1:e3:60:4f:a6:18:39:42:ea:ec:4e:b8:bc:e1:52:08:e8:
4b:a7:e5:b8:46:8e:01:07:0c:7e:20:1c:53:09:3c:23:3b:93:
15:97:b4:42:b3:97:9e:31:01:e1:72:4d:26:f8:83:0b:1a:d2:
80:da:17:5f:da:20:8d:f4:da:18:21:91:75:da:cc:bc:78:e1:
46:e3:de:ca:b3:36:fd:71:68:c3:26:cb:e2:52:97:19:a4:48:
74:98:c1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org