Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bjsW37zYvgBfGy1oXzo5OMw9KEE.roa
File: bjsW37zYvgBfGy1oXzo5OMw9KEE.roa (raw, json)
Hash identifier: 0R1PgXvt9Xxg/cJhh8iLE4vwin0JL22hfcGoCn5EL50=
Subject key identifier: 6E:3B:16:DF:BC:D8:BE:00:5F:1B:2D:68:5F:3A:39:38:CC:3D:28:41
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2110
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bjsW37zYvgBfGy1oXzo5OMw9KEE.roa
Signing time: Fri 25 Nov 2022 04:39:28 +0000
ROA not before: Fri 25 Nov 2022 04:39:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8464 (0x2110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6E3B16DFBCD8BE005F1B2D685F3A3938CC3D2841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:13:f1:8b:34:c7:f4:d6:d4:a8:a0:24:87:
0f:27:c6:d2:3b:16:76:fd:fa:81:22:d3:de:ae:ab:
69:af:7c:1e:92:9c:10:46:c0:b8:e1:38:ce:3e:c3:
4e:c2:23:c8:62:ce:3d:e3:d6:49:e5:c7:f2:fc:2f:
ca:38:45:38:8c:99:c9:c4:dd:7c:31:de:16:4d:17:
08:66:78:df:d9:dd:98:4a:c9:5e:49:66:37:7f:4e:
ab:d7:4d:db:49:ca:04:9a:b0:1d:0b:23:c9:b6:dd:
9d:7b:b9:75:a8:26:10:1e:23:7b:8d:35:47:88:bb:
82:63:ce:44:9a:bc:3e:09:5f:06:d4:ab:34:8c:a8:
4b:83:7d:b7:c8:d9:b5:6f:9f:68:74:ba:74:a0:62:
d9:70:d5:ed:d8:05:1a:01:b1:95:07:25:21:a2:2a:
c4:a4:2f:90:91:8b:24:4a:99:0a:e0:7c:75:9f:fc:
53:83:88:e9:41:36:00:c3:83:f3:83:f0:68:80:3a:
85:d7:c0:71:be:65:74:47:0c:5d:57:8e:e4:2c:94:
1d:79:a8:28:cd:7f:55:19:5f:17:ba:c9:03:a6:c3:
49:88:54:f2:e4:ad:e2:50:5d:1b:94:5d:10:b5:70:
64:19:73:a8:af:59:3a:9b:a9:2d:88:ca:ce:15:50:
eb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3B:16:DF:BC:D8:BE:00:5F:1B:2D:68:5F:3A:39:38:CC:3D:28:41
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bjsW37zYvgBfGy1oXzo5OMw9KEE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:0f:3d:52:06:3c:08:03:d8:00:0b:e4:89:24:a6:f5:48:fd:
8b:fe:77:7f:cb:53:0b:c4:da:d1:95:91:b7:79:ac:05:30:45:
00:1a:c3:7f:10:2d:26:44:29:6c:f8:25:8e:f5:8d:d0:fc:a2:
9b:38:cb:11:97:ce:e3:86:05:8e:f8:d2:0b:72:fa:42:82:72:
14:72:75:67:68:5d:40:68:27:bc:c5:4e:f4:e2:5d:e2:75:12:
71:b6:fa:fd:f3:50:ea:2a:dd:1f:1c:86:e7:d6:bc:d5:4e:b9:
3c:72:82:3b:c3:00:6d:f5:d4:59:75:d5:54:e3:40:86:65:bb:
b2:9f:be:37:3c:30:28:9d:f5:30:f7:37:45:59:7e:95:fa:b9:
11:14:96:ff:77:a2:40:a3:55:74:63:66:15:85:fb:73:dd:48:
c4:36:d5:f2:da:f9:4a:c0:e3:a7:39:f4:13:5d:24:2b:70:fe:
5a:85:9e:c6:b2:4b:eb:7f:3b:1f:c2:4d:31:0a:24:d6:35:b1:
9d:0f:6c:66:e7:78:f3:f9:0b:18:91:04:3d:68:90:44:95:e2:
00:df:d0:16:a4:88:28:57:e8:ab:f9:92:dc:dc:5c:40:55:30:
2c:5b:66:39:48:91:5b:1b:93:88:17:a5:8f:0c:38:c4:91:d5:
58:31:cd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org