Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iUBr2rrhkSrPRt5ge_XVbtSY6qs.roa
File: iUBr2rrhkSrPRt5ge_XVbtSY6qs.roa (raw, json)
Hash identifier: s1jIY3TV3ZWE3lufA2cAzvre0R/XmulcYEC61dJji7M=
Subject key identifier: 89:40:6B:DA:BA:E1:91:2A:CF:46:DE:60:7B:F5:D5:6E:D4:98:EA:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F41
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iUBr2rrhkSrPRt5ge_XVbtSY6qs.roa
Signing time: Tue 29 Sep 2020 09:56:42 +0000
ROA not before: Tue 29 Sep 2020 09:56:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3905 (0xf41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=89406BDABAE1912ACF46DE607BF5D56ED498EAAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:97:21:c3:4f:c5:a7:6d:ab:a7:8d:79:67:c0:
98:6c:6c:f8:90:06:cc:b0:84:13:6b:24:87:01:8a:
e4:73:eb:36:92:18:25:82:c8:03:5d:d7:7b:a1:46:
65:23:2f:19:84:8b:3d:4a:75:93:63:b7:a5:8f:58:
b7:c3:e0:48:33:cd:da:9d:49:9c:1d:89:c3:8a:ab:
58:9e:93:43:65:52:83:9d:54:78:89:44:f2:35:01:
73:b3:16:1b:6e:20:8d:64:c0:4b:03:01:69:63:19:
85:26:c3:cd:38:81:29:9d:f1:c4:48:85:69:ab:0a:
8b:87:ed:0b:f9:4f:23:7f:a1:44:05:da:44:d8:c3:
03:80:be:38:f3:53:69:5c:59:57:80:97:fa:39:9a:
ff:78:64:27:84:4c:93:94:0c:26:97:0d:b3:30:9a:
ed:1f:62:66:d7:44:87:24:1d:78:4b:fe:c8:0f:a9:
8d:d1:23:c7:d0:ef:36:4c:ae:8d:4f:40:89:7a:35:
1e:c6:7e:f0:7f:f3:a9:93:b3:9f:75:83:04:53:49:
b1:a0:02:46:00:cf:79:c3:e5:a7:5e:97:d1:12:48:
21:dd:ca:4b:85:ed:45:e6:af:a7:a3:3a:c9:a9:8d:
07:de:49:0c:f0:44:36:c9:de:c5:7e:17:8e:aa:7f:
26:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:40:6B:DA:BA:E1:91:2A:CF:46:DE:60:7B:F5:D5:6E:D4:98:EA:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iUBr2rrhkSrPRt5ge_XVbtSY6qs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.76.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:27:e7:e7:65:a4:e5:94:ac:ae:9f:a7:fb:04:45:7b:c5:74:
9f:1c:b3:84:5b:09:d4:09:64:33:1a:de:66:8b:41:ac:3b:c6:
7b:bf:41:76:bc:08:ff:06:85:7a:95:1c:f6:0f:74:52:28:db:
e6:00:38:fa:c1:36:32:ca:8c:f2:78:7c:83:b4:de:16:36:1a:
e6:aa:ea:44:13:f7:b9:44:11:d0:39:d4:46:83:4a:a6:60:a6:
8f:06:bb:90:b9:c3:33:51:e4:0f:9b:83:d7:86:64:6c:9b:c2:
69:fc:cb:83:4f:dc:1a:9e:1c:d3:aa:02:03:91:3f:cf:5a:95:
48:4d:17:f8:4a:55:5d:28:4c:4b:dc:f7:11:84:b3:22:33:cd:
14:24:ce:e3:6e:80:a8:26:d9:b6:28:e4:e8:3c:aa:72:20:06:
d3:3e:6d:e0:70:f5:cf:1d:ff:27:f4:9d:9b:ff:07:6b:a7:89:
0b:90:2b:23:28:dc:0d:ba:af:13:61:71:33:b1:a2:cc:0b:4a:
3f:f7:06:a4:a2:c6:a1:15:6e:5b:c5:ca:5b:63:de:ec:29:9e:
0a:8f:4c:91:f2:30:29:83:41:64:9a:05:af:31:d5:60:f2:4d:
38:cd:07:5c:d5:3a:82:3b:ac:66:f1:56:05:33:07:97:2c:0d:
2b:74:be:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org