Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cHWGa6WYDOlOirB3glDwmz8RsxE.roa
File: cHWGa6WYDOlOirB3glDwmz8RsxE.roa (raw, json)
Hash identifier: uZtOTc/omGROZQLPPWvZXKIbdR6Fw7ou6NgQ2aGFVPs=
Subject key identifier: 70:75:86:6B:A5:98:0C:E9:4E:8A:B0:77:82:50:F0:9B:3F:11:B3:11
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1413
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cHWGa6WYDOlOirB3glDwmz8RsxE.roa
Signing time: Sun 07 Feb 2021 11:57:19 +0000
ROA not before: Sun 07 Feb 2021 11:57:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5139 (0x1413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7075866BA5980CE94E8AB0778250F09B3F11B311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:96:0f:df:d6:05:f9:1f:c5:aa:28:9e:4c:
e3:f7:66:2b:2f:15:b1:92:0c:08:7d:90:8b:bf:17:
ba:38:0f:b2:17:aa:95:e0:70:25:d5:43:72:b5:a1:
a0:8d:2b:94:c2:0b:61:ce:62:ea:cd:d8:49:f4:53:
e5:0d:4f:3a:c3:aa:1c:e0:fd:50:9d:0b:dc:04:13:
90:a5:7e:cd:8b:de:de:16:e3:0d:88:f3:91:f6:c7:
1b:c6:51:51:1c:db:a4:42:0c:2b:e7:20:bc:09:17:
ac:3d:f7:3a:e4:f0:2e:18:f9:3f:49:d2:1b:58:33:
01:d1:bc:e9:d3:e3:e4:c1:17:a4:50:fb:40:b5:48:
e8:1c:7f:e1:d3:3c:8b:17:ec:7c:1c:7c:1b:00:a3:
4a:16:c4:11:6f:36:a0:67:bd:d5:04:61:54:00:73:
cf:37:00:b5:a8:c3:e3:cd:07:2c:dd:ba:68:a3:57:
20:f4:62:7e:ed:56:6c:de:a1:1b:4d:fb:50:a9:b5:
c4:cb:81:5d:64:73:03:fd:04:05:c7:a4:4c:76:e4:
c0:e8:fa:47:3f:86:d3:f8:be:47:d3:b3:9b:16:b0:
59:4d:06:73:93:32:30:d8:52:9e:c6:93:69:5a:9c:
57:ad:8e:d2:2d:41:76:ef:e6:1c:1f:2a:1a:0d:a7:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:75:86:6B:A5:98:0C:E9:4E:8A:B0:77:82:50:F0:9B:3F:11:B3:11
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cHWGa6WYDOlOirB3glDwmz8RsxE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.0.0/18
Signature Algorithm: sha256WithRSAEncryption
3d:da:94:83:0f:6f:3c:f9:a6:55:72:5f:38:a8:9f:9d:27:da:
b0:d0:87:24:a2:b2:b8:c3:21:29:24:ea:d5:da:d7:ca:10:a6:
29:5d:68:1d:f2:d8:64:8c:a6:58:65:2e:5f:d9:74:01:aa:a5:
6f:e2:a1:40:b9:9c:ea:94:0d:0f:8f:f4:ea:9c:af:2c:0c:6e:
97:38:e2:bf:9a:f4:70:5e:b1:90:1d:c8:01:f5:72:1a:be:1d:
42:cb:c3:ed:c9:5f:5a:b6:21:4d:03:c9:39:9a:58:86:81:6e:
11:af:98:52:29:f1:4c:ef:90:cb:25:51:78:25:ed:22:d4:fa:
f3:8c:f7:17:b6:70:2c:54:63:21:03:52:33:00:6b:02:c2:e6:
fe:95:3a:da:99:bd:1b:7c:17:1d:55:e5:0e:6e:0b:af:a9:1d:
39:a9:ba:e0:98:00:c3:78:bf:15:53:e0:fc:41:50:a0:a6:d9:
b1:50:26:f8:28:ac:13:0c:30:aa:b4:c6:71:e9:27:17:eb:aa:
70:c4:cd:61:00:c8:4c:37:8b:e6:10:5c:d1:88:0b:52:e6:fc:
63:be:48:1e:b2:62:a5:a4:ec:b4:15:31:bc:46:ba:b5:ba:0a:
d7:16:c0:6d:6c:2a:4e:24:94:25:c7:8b:14:4a:1c:ee:af:86:
01:73:d1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org