Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i77OfKGKlSrMWHNg2Bouno8zYrQ.roa
File: i77OfKGKlSrMWHNg2Bouno8zYrQ.roa (raw, json)
Hash identifier: NRyub4nCZ8MWx97dUxjH4wl9eOKSQ/4ex7pLIpb39uM=
Subject key identifier: 8B:BE:CE:7C:A1:8A:95:2A:CC:58:73:60:D8:1A:2E:9E:8F:33:62:B4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DF5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i77OfKGKlSrMWHNg2Bouno8zYrQ.roa
Signing time: Tue 29 Sep 2020 09:55:10 +0000
ROA not before: Tue 29 Sep 2020 09:55:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3573 (0xdf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:10 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8BBECE7CA18A952ACC587360D81A2E9E8F3362B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:db:5f:c1:f7:e2:a6:d2:c4:c5:ae:47:cd:
cd:3c:e6:71:2d:a0:06:ad:ef:8f:d7:ce:43:82:10:
a6:7f:5a:75:2c:a5:6b:6b:d5:ad:6d:41:3f:b7:ec:
3c:05:37:da:e3:6d:ec:da:cd:13:74:42:f3:71:8e:
c4:04:5f:e2:73:4f:be:31:68:e1:f7:02:87:24:0d:
ff:a2:05:28:c4:5c:98:15:43:89:c0:44:d0:6d:b8:
83:03:37:2a:0b:26:13:60:ac:2b:b1:a2:ae:41:8c:
b8:17:ba:f2:12:56:29:fe:e2:81:51:3b:60:cb:82:
cf:81:16:e1:28:04:72:0c:d3:43:62:62:a9:bc:bb:
4d:1c:d2:6f:16:d8:69:d1:dd:d2:77:27:72:ec:15:
ad:f0:d1:0f:8a:ac:53:3f:21:16:8a:85:0e:5a:8e:
45:9a:e2:a9:a2:b8:c6:a2:81:e6:2f:00:1b:18:36:
d9:fd:cb:b0:87:2b:b7:e8:33:c4:1d:c5:d5:00:7a:
24:a1:86:82:c0:b4:9c:26:93:1d:8c:21:94:12:47:
3e:ec:43:38:b5:18:9e:f8:b5:74:3f:a9:03:97:d0:
5e:a2:98:26:1e:1f:2e:a0:43:37:1a:c4:77:98:9a:
34:12:58:b7:67:26:2e:8e:a8:cb:60:ad:f7:f2:27:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BE:CE:7C:A1:8A:95:2A:CC:58:73:60:D8:1A:2E:9E:8F:33:62:B4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i77OfKGKlSrMWHNg2Bouno8zYrQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.48.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:af:86:00:91:e5:40:22:48:5d:30:aa:58:ab:8a:09:8f:a2:
74:d7:84:ca:6a:9f:3c:52:31:f3:59:47:df:9f:57:eb:e3:ca:
f5:3b:37:be:b5:6d:f0:2f:67:5a:f4:c9:75:d1:83:2a:eb:1f:
1e:3d:51:02:b1:af:7d:77:4e:00:81:ac:c9:3e:1a:67:9b:18:
72:60:b0:5d:97:80:fc:dd:d4:43:fd:ad:07:2c:8a:56:2b:b3:
77:a7:11:c5:6b:e0:bc:da:2d:f5:55:dd:80:c4:85:45:e3:e2:
79:a7:b4:68:fd:f0:ec:ed:fc:31:f9:21:8e:7e:18:27:00:ba:
87:c5:c1:17:8d:6b:de:f6:eb:f6:e5:9b:bd:9c:3e:04:1e:ed:
84:25:83:bc:eb:78:e0:f8:61:9c:bf:c7:16:20:c0:79:0d:f5:
56:61:0a:ed:8a:5a:63:16:f5:46:4d:e3:de:5b:09:29:a3:87:
cd:d5:58:de:f0:71:40:0c:19:ca:f0:86:bd:26:e1:b4:c4:32:
1d:08:73:f4:68:7f:0c:d9:fe:97:cd:94:d0:81:ce:ce:82:10:
8f:18:58:67:ca:b0:52:66:c5:49:d6:65:a3:9b:23:81:8c:6b:
34:3e:29:40:36:04:00:d6:b5:53:b6:3c:84:3b:95:31:86:a1:
58:ba:e3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:08 2025 by rpki-client