Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hr28QN-OyKSe5M-c8rMq_vLOLOI.roa
File: hr28QN-OyKSe5M-c8rMq_vLOLOI.roa (raw, json)
Hash identifier: t6VoDx7UgsCmXLl/pA042f2FZ65wB3b+AnINUfyIu/0=
Subject key identifier: 86:BD:BC:40:DF:8E:C8:A4:9E:E4:CF:9C:F2:B3:2A:FE:F2:CE:2C:E2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hr28QN-OyKSe5M-c8rMq_vLOLOI.roa
Signing time: Thu 15 Sep 2022 02:45:19 +0000
ROA not before: Thu 15 Sep 2022 02:45:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=86BDBC40DF8EC8A49EE4CF9CF2B32AFEF2CE2CE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:66:d9:17:e2:f8:87:0c:01:c6:17:26:12:
c2:cb:4e:9d:1a:5c:73:58:ea:9f:5b:44:7d:60:82:
03:8a:3c:98:30:44:2b:58:52:a6:1a:9e:8b:b3:2a:
d2:af:4b:7e:85:8c:29:38:6b:bb:1e:01:52:e5:8b:
86:f1:d2:9d:2e:31:c1:02:bf:a9:f2:10:8c:b7:5d:
a3:a7:6f:51:7e:fe:24:33:fd:b0:ac:60:28:04:94:
b8:da:de:c0:ba:24:e2:50:17:b8:46:8a:46:a9:90:
81:47:be:73:c8:69:64:b0:1b:c1:1f:b8:c4:da:3b:
10:f5:94:e5:8d:32:8c:7c:8b:c2:cc:5c:fe:67:53:
4d:a6:29:d7:52:c1:0a:6c:ef:06:da:8a:b6:10:bd:
8b:ec:38:89:3c:e2:c5:b1:32:2e:87:e0:bf:29:e0:
fa:20:fa:d3:2c:d5:5d:29:f9:95:d1:f2:9a:5e:16:
81:b9:17:a6:a9:3b:cf:46:e2:ea:6f:94:07:bf:c6:
ba:48:3c:89:17:ff:0b:fd:41:76:37:bd:81:d0:e8:
e8:49:fc:49:52:dd:98:cb:18:9b:8f:0d:ee:87:24:
b7:18:66:ac:bc:48:1c:34:1d:4b:b6:7a:f2:5f:90:
94:1d:2d:bc:23:c6:46:f6:5c:94:85:9d:19:be:73:
91:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BD:BC:40:DF:8E:C8:A4:9E:E4:CF:9C:F2:B3:2A:FE:F2:CE:2C:E2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hr28QN-OyKSe5M-c8rMq_vLOLOI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.132.0/22
Signature Algorithm: sha256WithRSAEncryption
77:71:4e:c9:d2:45:df:f4:6a:8c:40:24:0a:fc:7d:cc:c7:4a:
ec:5d:6c:4b:bb:19:2d:68:bc:2d:1e:91:86:83:15:2d:05:7f:
e4:59:cf:ba:fb:f5:05:11:dd:94:04:50:f6:8d:1a:f5:25:35:
f8:15:83:9e:5f:ac:f8:78:31:51:3d:8c:4f:c5:93:ed:6b:d7:
59:83:f1:87:a3:70:ac:53:2f:69:94:fa:54:3b:ee:61:2a:ea:
29:78:f6:08:b7:f8:57:bd:d5:94:a6:dc:54:6b:80:45:ce:4d:
40:85:93:6e:8f:e4:2a:2d:48:a2:d3:86:9b:66:18:25:79:d7:
4c:83:5b:bc:ed:82:5f:9f:5b:e2:ad:91:0f:95:6f:2b:42:9a:
ad:16:26:70:c3:5f:f2:1d:11:69:b1:c1:fb:6f:22:35:43:90:
ec:61:93:a8:06:42:c4:c2:7d:a6:16:0a:a6:a9:2e:5a:7b:36:
c2:b3:4b:7a:25:4d:72:45:37:7b:ba:d4:8d:92:3c:c7:11:3d:
30:fd:f6:03:df:ca:83:66:97:92:c7:96:86:c5:38:c5:0e:4c:
69:30:29:d8:1d:d1:0a:c0:20:b3:db:ec:9a:25:fa:ba:a8:7b:
3c:03:f4:0b:5c:0a:27:af:95:97:78:55:7c:e0:75:d0:7f:3b:
ee:6d:af:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org