Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fpoixzUbeVbC0QmwSh6zFMXmU70.roa
File: fpoixzUbeVbC0QmwSh6zFMXmU70.roa (raw, json)
Hash identifier: g8tYy8YbQ77gJTyWYrZ1c2LrSTn1Dl6bNrfDg9rjv0M=
Subject key identifier: 7E:9A:22:C7:35:1B:79:56:C2:D1:09:B0:4A:1E:B3:14:C5:E6:53:BD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 178D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fpoixzUbeVbC0QmwSh6zFMXmU70.roa
Signing time: Sun 07 Feb 2021 12:20:11 +0000
ROA not before: Sun 07 Feb 2021 12:20:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6029 (0x178d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:20:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7E9A22C7351B7956C2D109B04A1EB314C5E653BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:86:fa:17:f0:e7:f7:28:7f:53:5b:0e:95:
ef:d0:2c:b2:4a:17:71:de:20:cb:56:fc:3c:1d:56:
dd:b1:77:12:b7:e7:be:61:8f:7f:9e:5f:c4:f3:b9:
77:dd:24:87:66:5c:c2:14:a2:97:49:76:f7:f5:73:
a6:b8:92:a9:d4:0e:d5:c1:88:f6:65:08:d0:7b:46:
39:92:ec:99:db:e5:d7:a8:ea:72:4d:f5:c3:b1:49:
3f:f3:bf:ba:af:52:a0:90:89:35:7b:fe:89:9a:dc:
51:2f:04:08:b2:49:15:6f:a0:b1:81:1c:03:f7:4e:
86:49:06:7b:93:16:40:71:34:50:1a:2d:75:0a:96:
8b:5b:9d:da:72:85:51:9f:8a:4d:a1:65:2e:bd:81:
3c:da:f6:11:b7:e5:48:6a:52:96:44:a6:6d:9c:5e:
ad:46:4b:64:03:25:3b:0e:53:5e:71:31:d3:d5:01:
91:42:3a:ce:ff:98:ac:5d:ec:f6:52:6f:62:c6:47:
19:3e:fd:cb:df:3d:c1:c4:64:56:5c:40:1a:7b:09:
be:9a:17:4b:04:fb:54:08:1e:3f:ed:88:88:a6:6f:
40:45:27:8a:a0:2e:60:ff:a7:99:d8:5f:fe:ac:1d:
12:5d:df:f0:41:ea:0f:0b:0d:61:f4:9a:1e:3f:f1:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9A:22:C7:35:1B:79:56:C2:D1:09:B0:4A:1E:B3:14:C5:E6:53:BD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fpoixzUbeVbC0QmwSh6zFMXmU70.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.168.0/22
Signature Algorithm: sha256WithRSAEncryption
81:10:29:1c:e6:21:99:0e:8d:dc:dd:e0:c5:ca:90:bc:3a:78:
20:b5:b5:71:7b:1e:e7:5a:8d:18:20:cd:02:c7:08:fc:9e:f4:
db:c6:e3:4b:bc:10:a7:c6:f8:b7:a2:88:d2:c3:a1:cf:c0:de:
c3:a6:57:3c:bd:a9:62:d5:a3:61:94:c8:9b:17:88:f0:61:b3:
5c:bc:47:03:71:51:84:ef:a5:27:68:43:0c:21:56:83:29:2f:
de:f0:e3:6c:fa:09:10:dd:c8:ed:e7:8b:b9:77:81:bc:a4:e6:
a7:2d:cb:e0:c0:81:6b:cc:55:d8:82:e1:a9:f5:8a:9f:f2:7e:
81:a6:8f:b0:59:ae:3e:7b:39:bd:bc:38:49:32:86:2c:e3:09:
7e:1a:98:cd:4c:ff:35:8e:9a:f7:df:5f:87:65:ad:d9:9c:53:
bb:bd:8f:1b:fe:da:b3:61:4f:11:73:42:26:df:1f:0b:0c:f2:
31:e9:1d:3e:d7:c1:54:be:4b:67:89:7d:2d:51:82:e5:bf:6e:
e6:93:ab:e6:24:ca:4b:68:f2:36:cb:79:1d:af:d1:ec:1e:93:
cd:4f:67:33:f0:20:90:37:8a:18:92:50:ee:f9:5b:ce:49:9b:
08:9f:fc:1d:63:71:14:f7:59:a0:3d:6e:9f:7d:34:bf:5f:d0:
1c:b4:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org