Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b3Roqy24Ol-rATsF3ieJPgCi7mk.roa
File: b3Roqy24Ol-rATsF3ieJPgCi7mk.roa (raw, json)
Hash identifier: Rj7CG1R0i5oP3jLwRPBukMU2+D5OTOLtFdYBl8eCrGE=
Subject key identifier: 6F:74:68:AB:2D:B8:3A:5F:AB:01:3B:05:DE:27:89:3E:00:A2:EE:69
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B91
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b3Roqy24Ol-rATsF3ieJPgCi7mk.roa
Signing time: Wed 29 Sep 2021 02:46:45 +0000
ROA not before: Wed 29 Sep 2021 02:46:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.176.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7057 (0x1b91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6F7468AB2DB83A5FAB013B05DE27893E00A2EE69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:63:09:12:9f:39:8c:da:47:ff:9c:32:c2:
f4:b0:0f:47:c8:3b:e4:6e:5c:3a:ba:6e:a1:4f:34:
ad:0e:b3:f3:b1:83:5d:a2:88:57:f5:7e:84:db:83:
ee:62:2d:d3:49:c7:09:54:3c:00:02:1c:6d:16:14:
8b:4d:60:c8:2e:16:2e:04:13:7c:f7:e5:25:c2:49:
c2:94:00:d9:f8:4f:58:aa:22:f2:3e:6f:e4:14:5d:
76:ae:66:1e:27:67:80:f3:8c:89:84:f0:61:de:a8:
68:5c:2d:00:42:e7:c1:5f:4f:e5:b4:bf:21:46:a7:
15:89:8c:b0:89:c4:2b:38:df:49:83:96:a4:50:ba:
93:72:fc:30:da:ac:a3:f2:a7:6c:7f:fd:75:65:31:
90:8f:1c:f2:fb:1e:83:18:d5:56:aa:36:cf:88:ac:
79:e6:2e:7f:62:8c:61:e7:7f:36:8d:bb:b7:d0:20:
33:97:2a:20:96:7f:28:50:7d:5c:cf:ec:80:44:8d:
3e:83:0a:f8:13:35:3e:bc:8b:86:94:be:3a:21:d1:
27:71:6a:50:34:af:27:b2:de:76:9d:27:b3:47:2d:
29:5b:6b:ba:f1:42:37:15:3f:f4:ee:85:1d:95:89:
c6:87:46:41:64:75:27:d0:38:ee:96:91:12:ac:10:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:74:68:AB:2D:B8:3A:5F:AB:01:3B:05:DE:27:89:3E:00:A2:EE:69
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b3Roqy24Ol-rATsF3ieJPgCi7mk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.128.0/21
Signature Algorithm: sha256WithRSAEncryption
62:86:d0:b6:2d:07:ed:9f:59:52:06:83:0e:71:63:8c:ab:b9:
e2:b3:dc:fc:ad:37:5b:9f:24:f5:51:c7:57:4b:24:b7:6b:8e:
5b:c6:58:f9:20:67:d6:52:a7:91:83:66:9e:e2:1e:25:01:33:
ee:ad:c4:bc:fb:b4:2f:a5:08:3b:72:9c:d2:e0:50:ec:82:22:
84:48:88:ab:15:84:a1:80:4c:66:2d:45:5d:58:42:76:85:8e:
c1:ff:b9:90:48:1c:7b:17:f4:19:9f:97:65:fa:40:fd:b2:f7:
2a:17:6d:3c:fd:38:34:6c:33:de:fa:c8:92:47:c0:77:1c:76:
54:43:39:86:dc:eb:61:4b:2a:78:a7:36:fe:82:b2:58:dd:e0:
9f:60:3f:13:e2:1f:bf:1c:db:96:9a:62:23:f0:b3:91:9a:96:
9f:6e:ca:82:e7:49:3b:df:51:9f:20:60:f1:7d:78:59:c4:e9:
2e:53:8e:4c:02:83:b1:fb:8d:5c:7e:44:9c:f6:f2:6d:af:17:
a1:38:ad:cc:7f:b4:19:be:14:4b:19:58:5b:33:33:1e:16:f0:
17:b5:8b:eb:dd:93:93:c6:f0:6a:89:0b:76:27:8c:83:72:01:
d1:79:ac:66:6f:67:6b:ea:71:d1:d4:53:fd:48:ad:02:0c:38:
5d:ec:84:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org