Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e1qWmHXaDNQK6q7a8WU4bQ9wVrs.roa
File: e1qWmHXaDNQK6q7a8WU4bQ9wVrs.roa (raw, json)
Hash identifier: D3kMgpAfk2aD63ZTdHsFBUbQZPxIhg/4SdNjbTc9G3w=
Subject key identifier: 7B:5A:96:98:75:DA:0C:D4:0A:EA:AE:DA:F1:65:38:6D:0F:70:56:BB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 219C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e1qWmHXaDNQK6q7a8WU4bQ9wVrs.roa
Signing time: Fri 25 Nov 2022 04:40:07 +0000
ROA not before: Fri 25 Nov 2022 04:40:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8604 (0x219c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7B5A969875DA0CD40AEAAEDAF165386D0F7056BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:3e:d1:51:1b:95:8d:90:3a:92:5f:5f:92:
fb:fe:8b:81:00:eb:38:fd:a5:f1:9a:8c:a0:b9:fb:
59:b8:30:6d:af:0f:44:d5:30:19:0a:73:95:a4:80:
a6:b7:ec:9b:cb:57:5e:57:a2:35:9d:44:bc:4c:99:
e9:45:54:5b:0c:c4:14:5d:8c:ec:8d:1c:f1:ed:cf:
01:46:c2:b9:4b:37:9f:11:57:4d:51:d3:a7:5f:ab:
2b:0e:c9:0d:3c:3c:70:c7:99:c8:16:b9:01:c4:f2:
1a:c3:0c:f0:70:0e:fe:a6:d6:f7:24:73:2c:ad:60:
3a:17:6e:ba:0f:94:4b:e1:b8:cd:77:fa:53:33:d2:
94:2b:fe:6a:fa:e1:89:cc:69:fb:40:44:25:f3:bf:
44:b8:68:cc:af:4f:0b:fd:a4:0c:60:5f:eb:f7:ca:
b2:5d:e0:a7:9f:0f:d8:be:09:6e:57:66:c8:d1:19:
19:40:00:27:de:50:b6:1a:2a:df:7f:aa:8d:90:41:
d0:85:49:ee:54:e5:c7:10:2c:90:14:84:2e:ab:a6:
aa:87:a6:12:ee:0f:d0:ff:40:83:67:e3:36:ae:22:
7e:d3:15:3c:00:04:e7:fa:46:5c:94:5a:53:bb:2f:
93:f2:12:25:93:16:a2:27:94:cd:28:fa:da:62:20:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5A:96:98:75:DA:0C:D4:0A:EA:AE:DA:F1:65:38:6D:0F:70:56:BB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e1qWmHXaDNQK6q7a8WU4bQ9wVrs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.223.0/24
Signature Algorithm: sha256WithRSAEncryption
95:05:b3:69:eb:9c:8c:96:47:51:7c:15:bf:69:c0:ba:b7:37:
20:4d:08:99:36:22:99:7c:04:8f:58:13:de:50:b6:a7:8e:33:
25:58:3f:e8:d4:b6:91:f4:6e:b7:13:75:a9:80:5d:10:3e:12:
1f:93:8c:2e:7e:9f:3d:47:4b:f1:fd:50:b5:99:2d:44:6c:50:
66:f2:29:0c:7e:6a:fe:1d:bd:96:70:32:94:58:88:82:f6:60:
14:15:f7:9f:d0:bc:e2:a6:7e:77:bc:ab:bd:da:75:46:fd:89:
85:20:05:b2:23:ee:55:86:30:af:9c:8a:d5:65:8a:0a:68:5e:
0b:97:0e:4f:d1:57:c2:2a:5a:74:10:21:50:3f:90:eb:9e:8d:
f9:ef:d7:3a:6e:77:d5:50:dd:15:14:3b:70:81:57:dc:58:e9:
43:c5:4c:8b:16:42:56:30:9e:90:13:a1:0e:33:4a:38:ad:10:
8a:b7:f2:18:a1:07:94:39:4c:19:32:ab:27:07:5d:11:f0:cb:
48:0f:9f:3e:47:93:4b:c1:31:84:80:ba:ee:c8:9b:0b:1e:ad:
f5:90:a6:8b:28:0e:cb:d4:fe:cb:c1:33:c7:dc:eb:dd:57:c3:
31:38:12:e5:d0:ff:37:07:92:7f:10:c0:f1:b7:ff:d3:f0:75:
c5:7e:b9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org