Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dkQuJcbf0BKoITvB_CVrhzWt1Z8.roa
File: dkQuJcbf0BKoITvB_CVrhzWt1Z8.roa (raw, json)
Hash identifier: q1hEZQJPS95Hfwte5Xx03l+p+R6dvjz3CSACKvHM4V4=
Subject key identifier: 76:44:2E:25:C6:DF:D0:12:A8:21:3B:C1:FC:25:6B:87:35:AD:D5:9F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0ED0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dkQuJcbf0BKoITvB_CVrhzWt1Z8.roa
Signing time: Tue 29 Sep 2020 09:56:10 +0000
ROA not before: Tue 29 Sep 2020 09:56:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3792 (0xed0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:10 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=76442E25C6DFD012A8213BC1FC256B8735ADD59F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:ec:8b:8f:4b:76:4c:23:d1:ab:41:5d:f7:
0e:cb:6c:6f:a2:ae:b6:5a:e6:3a:76:e6:9a:b4:42:
50:45:a7:18:7b:f7:e7:cf:e3:99:12:5f:1d:90:54:
69:fd:55:7c:ac:72:c8:df:77:e2:c5:c9:48:11:21:
31:4d:0e:67:4f:ee:c3:2c:07:6f:9b:88:09:29:0f:
cd:61:71:82:da:5e:03:07:1b:1a:82:3f:af:10:fc:
52:7b:ef:ce:30:9a:a1:75:47:9a:ae:1e:67:3d:95:
2b:89:4f:ad:d2:8b:1a:bc:e3:8b:a0:36:c0:d9:51:
82:8e:32:a4:de:93:b9:1c:1e:2e:76:2c:78:81:f2:
ee:af:e3:da:b0:76:74:52:35:23:e9:89:39:b4:eb:
73:2d:f4:4a:0d:6e:f2:0c:5f:00:2b:30:d3:36:8a:
95:fc:e2:36:47:b7:54:6a:5c:1e:28:0a:c7:d0:6b:
73:2a:2f:2a:fa:78:1f:cb:dc:eb:a5:d4:76:c2:51:
d9:51:59:ce:90:71:e0:a2:9c:0a:b0:cc:27:29:17:
bd:71:78:4a:fc:60:1d:30:df:5e:62:dc:6d:57:71:
dd:49:c6:16:d8:fb:03:3c:5d:e4:7d:c5:b3:e0:2f:
50:a3:85:bf:70:95:1c:00:e0:d8:14:88:5c:83:b6:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:44:2E:25:C6:DF:D0:12:A8:21:3B:C1:FC:25:6B:87:35:AD:D5:9F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dkQuJcbf0BKoITvB_CVrhzWt1Z8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.96.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:68:97:e6:c7:51:3a:63:ee:61:db:0a:45:fd:39:11:60:00:
77:8a:42:41:20:8e:8a:a7:a8:45:4e:bb:86:ee:24:68:4a:a6:
6a:75:fb:cb:64:ef:55:58:f3:1b:02:df:85:98:8d:38:0e:44:
c9:a9:54:67:c8:e4:10:d0:ae:c8:fe:de:1f:a2:c7:bc:d3:65:
9a:01:48:25:6d:01:ad:66:8a:a3:51:24:cd:10:6d:f8:ca:71:
18:9c:47:b1:2c:26:20:e0:12:87:97:b0:dc:7f:d1:bc:a9:d3:
f6:cd:7c:26:cd:fb:39:04:37:34:e8:dc:38:95:7c:28:56:3f:
4b:8d:1e:58:33:bd:dd:c3:92:8c:b5:73:8c:01:f8:7c:34:e2:
84:8f:eb:66:24:de:e4:61:0a:9d:40:ad:63:ac:33:bf:ac:61:
bf:5e:d1:a8:3a:14:5f:b7:ba:bd:fc:ee:98:1d:a8:1f:39:77:
e8:08:af:ac:83:c4:e6:ab:ab:a5:4f:3a:f5:28:62:50:89:b0:
a3:d8:be:9c:e4:8b:7d:12:b5:eb:0a:ee:9b:26:5d:40:9e:df:
5c:74:6a:a1:00:d0:f1:b4:e0:b7:3b:01:1f:99:e7:bd:70:1c:
a0:fc:13:01:d9:20:51:5f:02:9b:8f:b1:d0:30:7e:a6:48:70:
d0:28:48:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org