Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f1BQMyGqAkuzaMJYaLuMxatv_wg.roa
File: f1BQMyGqAkuzaMJYaLuMxatv_wg.roa (raw, json)
Hash identifier: PkG+gGfJVxw/pzbnk8Xsb5iZerPzkirh9Vj+Lytr3Sk=
Subject key identifier: 7F:50:50:33:21:AA:02:4B:B3:68:C2:58:68:BB:8C:C5:AB:6F:FF:08
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f1BQMyGqAkuzaMJYaLuMxatv_wg.roa
Signing time: Thu 15 Sep 2022 02:53:58 +0000
ROA not before: Thu 15 Sep 2022 02:53:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7F50503321AA024BB368C25868BB8CC5AB6FFF08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:e7:bb:e1:df:19:df:cd:3b:fc:85:8b:b6:
3b:98:7e:7c:98:fc:75:92:9d:4d:52:f6:fc:40:e9:
8d:1d:92:1c:52:40:d5:9b:e8:f7:42:9d:2e:cb:c4:
fd:aa:05:1e:22:06:15:e3:90:28:04:05:7b:b1:bf:
d9:ab:e1:54:d0:43:c3:45:c9:e5:42:86:b9:d6:7c:
68:de:c6:1b:a6:f6:7e:c0:80:b1:71:22:6d:37:17:
44:e7:37:8a:87:27:0d:d0:b2:07:49:a3:e4:4e:77:
63:74:9b:63:f1:3e:87:8a:dc:96:a1:d0:2e:26:55:
95:78:3f:fd:df:d9:34:1c:ee:9e:c1:d6:b4:fd:d8:
e0:7c:19:b8:ce:e8:64:ab:17:48:ed:c7:20:cd:a8:
22:9c:67:6c:61:43:d4:e3:21:43:ef:f2:35:f8:97:
42:97:0e:35:30:12:ff:01:b7:a3:6e:d2:09:ab:30:
22:d2:17:b3:c1:23:e9:fb:f1:d3:42:38:d2:75:95:
ff:66:5f:72:bf:38:73:af:41:c6:74:f7:dc:9c:f9:
40:51:76:ed:b4:9c:5b:ed:c6:61:75:ac:ac:31:21:
ac:53:c9:da:b7:8f:fa:7d:e9:81:33:8d:30:92:79:
a1:25:bb:c5:da:67:de:b3:07:0e:30:a1:2c:7a:02:
32:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:50:50:33:21:AA:02:4B:B3:68:C2:58:68:BB:8C:C5:AB:6F:FF:08
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f1BQMyGqAkuzaMJYaLuMxatv_wg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:d1:d5:d4:78:c4:6a:58:31:2f:75:63:b3:07:14:5a:63:f0:
1a:4f:4c:b0:f2:f7:b5:8c:03:96:c8:25:76:6a:e9:d3:8e:12:
83:5b:59:cc:c3:3c:a2:f9:bf:03:69:8b:a7:f2:37:db:0a:74:
4a:02:91:3d:c5:ee:1f:cb:c9:c2:79:a4:29:83:11:4d:5e:0f:
17:04:cc:b1:45:0c:73:b5:98:35:50:cb:15:0f:43:c9:9b:9d:
1b:8a:a5:fd:c8:5f:89:0d:2f:62:00:f7:a9:4d:38:f2:cb:42:
4f:c8:14:c7:f6:dc:0d:92:d0:f6:69:0d:67:e4:62:ba:3e:79:
bc:e9:94:83:b9:f4:a5:40:f3:94:4e:13:65:f8:56:9e:9e:dc:
90:75:b9:2b:ab:f5:75:8a:bf:1c:06:aa:53:37:02:76:8b:a2:
62:c7:b4:fd:db:a4:20:08:65:88:6c:3c:ed:db:43:98:8d:99:
6c:39:19:e7:89:c6:07:dd:11:87:59:09:91:01:6e:8f:46:31:
99:ea:52:f5:fb:e8:02:24:5f:f5:4d:99:9b:e9:c0:5f:6f:98:
d8:5c:9d:34:18:09:d1:5f:97:e5:80:8a:58:b3:e9:0c:d8:49:
0b:07:10:fc:f6:9d:d8:2b:c6:1a:2d:de:b4:32:b0:71:20:2f:
0f:63:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org