Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iINOgEicAXt66nB-EnIvFZI2Ukc.roa
File: iINOgEicAXt66nB-EnIvFZI2Ukc.roa (raw, json)
Hash identifier: DDyibRu6AtniTefpgp+Kx58b5T9q3ScX0plAtndVcQw=
Subject key identifier: 88:83:4E:80:48:9C:01:7B:7A:EA:70:7E:12:72:2F:15:92:36:52:47
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iINOgEicAXt66nB-EnIvFZI2Ukc.roa
Signing time: Thu 15 Sep 2022 02:53:38 +0000
ROA not before: Thu 15 Sep 2022 02:53:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=88834E80489C017B7AEA707E12722F1592365247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:05:a0:3e:77:f2:ae:22:7f:4d:4c:c1:9d:
45:44:da:8b:17:4e:68:9a:db:b2:d4:55:86:88:c2:
ad:51:0d:e7:ff:bc:fb:02:2d:3e:fb:e2:11:de:aa:
4d:89:c1:e9:bc:72:30:33:ac:8d:32:33:3c:8c:09:
c2:1b:55:81:35:be:7c:7b:b0:de:08:4b:03:fd:c3:
74:45:e5:c5:61:49:a4:e7:9e:99:b2:23:47:c7:35:
e3:27:19:b9:b8:df:c2:bc:cb:7d:ce:ba:86:37:37:
e8:f8:87:b7:70:f3:dc:bb:72:19:31:29:2b:b7:71:
29:f6:5f:d6:e3:a8:8e:e8:0a:84:ea:1f:84:df:fa:
54:e0:5a:4a:1b:93:44:61:fb:0c:02:92:bf:a5:a2:
e5:66:a9:f7:25:0b:4a:e5:be:39:6b:24:47:40:a4:
a3:87:b7:a0:4d:66:06:7a:a2:d6:be:7a:90:35:b4:
03:03:85:54:d1:f6:5b:c1:ca:0d:2c:0a:b8:4f:d2:
ed:2f:a6:b2:e9:a6:e6:ee:b8:05:1a:1d:9b:51:4d:
5c:32:30:7e:1c:c1:8b:63:42:cf:1e:7f:41:f9:4f:
8a:a0:5c:d1:7e:d1:28:cd:8d:04:40:42:13:a9:ea:
6e:9f:5f:04:25:ca:75:bd:6d:6e:57:89:c8:eb:e4:
cc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:83:4E:80:48:9C:01:7B:7A:EA:70:7E:12:72:2F:15:92:36:52:47
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iINOgEicAXt66nB-EnIvFZI2Ukc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.228.0/22
Signature Algorithm: sha256WithRSAEncryption
35:9a:2a:73:b5:ca:99:f9:9d:43:10:72:5a:06:ac:94:a4:1f:
b1:49:c7:c3:f7:20:84:36:ea:8f:5f:c2:86:5c:dd:8e:44:c7:
86:98:e5:b8:1e:ec:d6:05:d7:07:54:5d:93:9c:49:80:08:18:
ee:c6:6b:32:1d:9d:a5:38:81:37:10:9b:06:6e:7e:21:b5:8f:
e7:42:04:c1:ac:f2:51:87:7d:ac:da:1a:03:43:ca:7d:90:03:
65:5d:de:f1:4e:75:ee:b3:f8:62:b4:84:8a:b8:bb:ee:93:9b:
52:bf:2b:86:5d:22:b0:c0:e0:0e:4e:02:47:f6:7f:ea:e9:4e:
75:30:29:4d:cf:95:8a:46:28:aa:91:90:df:4c:6e:50:62:37:
44:3d:13:fc:9d:4b:75:95:ae:f8:59:3c:79:44:2d:d2:97:be:
0e:a4:c0:a9:6f:59:3e:53:c9:74:ba:9d:3b:d8:fe:0c:21:13:
33:80:c6:99:f9:aa:d6:62:05:d3:ae:97:f4:49:77:b7:43:5a:
83:0f:48:6f:e8:79:36:a5:fb:2b:b5:59:68:e5:5d:6c:7c:66:
f6:bc:a2:b1:d1:49:08:b0:cc:77:85:1f:fa:34:d1:3f:2e:b1:
84:0c:8f:83:fb:fd:c0:de:c9:97:a8:3d:68:88:f3:11:93:b9:
d6:a3:2e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:10 2025 by rpki-client