Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iduhUzXnt2RerGwuUAtG7JHv6-M.roa
File: iduhUzXnt2RerGwuUAtG7JHv6-M.roa (raw, json)
Hash identifier: 3CkzAromBaz7zSSa4p4EBq/RRJcBuyg/Bda9aGIDuxA=
Subject key identifier: 89:DB:A1:53:35:E7:B7:64:5E:AC:6C:2E:50:0B:46:EC:91:EF:EB:E3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1425
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iduhUzXnt2RerGwuUAtG7JHv6-M.roa
Signing time: Sun 07 Feb 2021 11:57:33 +0000
ROA not before: Sun 07 Feb 2021 11:57:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5157 (0x1425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=89DBA15335E7B7645EAC6C2E500B46EC91EFEBE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ff:c9:b2:57:08:5d:5a:cb:6f:72:95:6a:01:
89:c3:b1:9e:14:da:92:f7:76:b8:27:f7:72:32:69:
f2:76:a0:e0:cc:3a:ce:44:4a:93:02:e1:dd:16:3e:
57:a5:39:f6:92:83:bb:8d:39:48:d9:d6:71:bb:e5:
05:f8:32:64:a1:46:b3:b7:fd:03:e1:35:24:78:d4:
1b:ed:ba:30:8f:61:fd:e5:82:eb:1a:b8:fb:1d:d2:
f6:a7:74:a9:77:86:71:ac:95:1e:9b:45:77:0a:1a:
97:55:15:5b:c3:d2:55:8e:38:eb:8a:04:ab:d9:91:
5a:f8:da:80:91:91:b6:e4:36:29:20:39:d8:37:15:
5f:58:93:08:5a:52:ae:25:08:71:a1:fb:2d:5e:3d:
7f:e9:b0:4f:a5:4c:21:bc:d9:a5:f3:7c:6e:93:7c:
14:41:ca:62:40:0e:f0:32:84:e9:0f:b5:33:66:62:
71:84:54:68:4c:fa:2f:9e:b4:f3:6e:24:4b:17:3d:
5c:03:61:af:74:4a:d7:68:b0:59:4d:8a:d5:86:05:
f3:2f:3f:52:8b:53:b3:7b:5c:8d:0a:5f:77:8a:85:
8e:1d:ae:56:b8:e1:bb:65:3d:47:84:8c:fc:7c:14:
00:df:e0:eb:d3:0a:d6:f5:84:71:61:3b:40:cf:48:
b2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DB:A1:53:35:E7:B7:64:5E:AC:6C:2E:50:0B:46:EC:91:EF:EB:E3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iduhUzXnt2RerGwuUAtG7JHv6-M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.32.0/20
Signature Algorithm: sha256WithRSAEncryption
94:4a:ee:e3:07:7f:ca:61:c5:26:52:46:0b:86:74:6d:b4:2a:
21:bf:bd:66:a6:2d:d9:f8:d2:d8:63:02:e5:1d:1a:e9:e0:13:
30:2a:8e:9c:bc:7f:88:74:1f:fb:e4:78:56:30:cf:52:ad:e2:
a4:fc:20:2e:26:c9:6d:aa:f4:77:2b:42:d2:f1:5a:86:35:65:
db:d2:0c:30:10:32:1d:57:82:f6:7a:bd:e9:db:f0:a7:b0:f9:
45:89:d5:cc:27:2c:c4:3f:10:8a:d1:47:b7:de:79:b6:3e:50:
6f:cf:c3:6c:a3:e8:a0:83:c3:51:a5:6c:ae:c5:c0:69:71:7e:
d4:90:28:fe:fc:88:ce:d0:fc:e8:3f:b2:69:1b:9b:f0:28:41:
33:03:24:cd:0c:c5:08:11:b1:c2:01:61:9e:fe:8f:3a:b3:35:
2c:ca:23:ac:0b:f1:29:eb:8d:ee:38:0d:9b:a1:5e:9e:a5:d0:
a6:c4:5a:c6:fa:69:fd:b1:22:6c:f5:1b:1f:bc:15:6c:6c:6a:
65:dd:fa:52:b4:d7:6e:00:c3:b9:58:f0:eb:52:0c:96:a4:d6:
66:30:ae:06:68:9b:16:44:96:09:6b:b9:a0:56:3a:a1:8a:dc:
b8:37:d2:0a:a9:f8:52:50:80:37:3b:1d:49:26:96:9f:ea:ed:
5b:b4:0d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org