Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fkI_epkLy-B4FWPgIgvYPEYMA-c.roa
File: fkI_epkLy-B4FWPgIgvYPEYMA-c.roa (raw, json)
Hash identifier: I+pcYI5kIyYDvPkn2pLUdy07EfrE+Gy3JXZeiE1ZnbU=
Subject key identifier: 7E:42:3F:7A:99:0B:CB:E0:78:15:63:E0:22:0B:D8:3C:46:0C:03:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1627
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fkI_epkLy-B4FWPgIgvYPEYMA-c.roa
Signing time: Sun 07 Feb 2021 12:08:40 +0000
ROA not before: Sun 07 Feb 2021 12:08:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5671 (0x1627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:08:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7E423F7A990BCBE0781563E0220BD83C460C03E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:56:7d:95:d8:ed:73:f1:23:d8:f5:69:f5:01:
02:cc:53:6f:20:a1:0a:ac:38:c1:cb:67:2d:57:49:
ac:ac:19:70:7f:38:b3:11:6f:f8:33:ef:4c:62:9f:
04:53:bf:db:a1:96:cb:5a:4d:57:ca:f1:54:18:f0:
cd:d6:76:12:b3:27:4e:a7:a2:00:61:65:51:a8:01:
1b:54:d9:f9:43:e3:d3:55:cb:a6:29:80:36:f7:52:
31:49:44:bc:21:3b:ef:33:3f:70:91:9a:63:00:8f:
c1:55:ed:1e:d7:ac:c9:a1:79:b6:43:ef:cb:2c:c3:
81:98:5b:99:de:ce:5d:a3:a7:3c:8e:37:f2:96:4b:
76:f3:ca:af:7f:2b:ed:dd:92:16:a5:8f:fb:a5:4f:
49:79:18:82:14:03:9e:48:c6:2f:f6:62:b9:a1:d9:
4f:23:f5:ed:b1:7e:ff:3c:be:33:2b:c5:e7:64:72:
d0:0c:55:3c:56:c4:2f:21:cc:c6:8e:83:cb:4b:62:
01:09:af:f0:a8:b4:aa:38:13:06:d1:95:13:99:a6:
fe:c3:c7:26:d4:47:99:e3:ac:44:c1:35:84:5b:0b:
5b:19:a7:2e:60:ad:b4:37:8e:83:41:aa:4c:48:b2:
db:9a:f4:d1:1e:ed:1a:6c:01:d3:1b:30:4d:49:91:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:42:3F:7A:99:0B:CB:E0:78:15:63:E0:22:0B:D8:3C:46:0C:03:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fkI_epkLy-B4FWPgIgvYPEYMA-c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.108.0/22
Signature Algorithm: sha256WithRSAEncryption
92:da:be:2e:80:96:0d:a9:15:1a:29:86:2f:49:a9:2f:0f:b3:
36:4d:d7:77:77:fd:52:3e:fb:4a:df:1a:50:4c:e2:44:bb:87:
50:d3:24:34:38:14:41:24:7c:78:c4:e6:01:08:31:a6:a7:41:
40:ca:24:f3:07:0c:f8:04:77:39:1e:30:67:af:47:22:f9:42:
8a:18:c1:85:3b:9b:bd:04:ee:a7:f6:72:7b:e0:e8:47:fd:c1:
1e:9a:aa:7d:32:d7:cb:b4:f8:c6:5b:a3:7e:88:5e:95:e5:e9:
0f:ec:65:a4:50:20:62:4b:f1:e8:a7:46:26:6c:63:cf:be:df:
6a:31:dd:4a:35:ea:49:f7:50:14:67:38:8c:9c:48:84:e7:c4:
d6:6d:8d:7f:97:16:6f:f9:10:d3:1a:98:9d:8f:6c:b6:01:bb:
9c:54:c6:cb:7a:32:72:ff:09:9b:bf:6f:9f:59:d7:76:bc:b8:
ac:8b:b2:1d:68:e1:b6:4b:dc:c3:96:b3:0a:c8:79:f8:c2:4f:
29:a9:0e:cf:94:ca:12:a0:56:ea:ff:8b:e4:31:4d:41:30:07:
cc:58:20:f8:8e:29:f7:f6:92:16:9c:6e:18:a3:c9:67:5c:39:
45:2c:51:10:72:97:08:c2:e0:84:dc:cc:60:fe:ee:ea:03:63:
c8:a3:5d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org