Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j53Qkaig2-AvyY7dVr76Xrr8hic.roa
File: j53Qkaig2-AvyY7dVr76Xrr8hic.roa (raw, json)
Hash identifier: 65XELHg+Wxz5gpTm0dNH4WCK4hloNAWRW99fECbc4xw=
Subject key identifier: 8F:9D:D0:91:A8:A0:DB:E0:2F:C9:8E:DD:56:BE:FA:5E:BA:FC:86:27
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1593
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j53Qkaig2-AvyY7dVr76Xrr8hic.roa
Signing time: Sun 07 Feb 2021 12:05:22 +0000
ROA not before: Sun 07 Feb 2021 12:05:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.46.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5523 (0x1593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:05:22 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8F9DD091A8A0DBE02FC98EDD56BEFA5EBAFC8627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:13:8f:d3:fd:66:56:c0:fb:ab:39:7b:38:54:
60:26:0d:a1:5b:47:1a:20:1d:b2:8e:da:38:27:b6:
ae:a4:a6:87:ed:7c:27:04:65:08:b3:96:37:2b:f4:
0f:4d:70:8e:fb:36:d4:ca:39:3a:aa:62:93:0f:55:
3d:a1:1f:f9:15:f5:bf:c4:d3:6c:5b:24:34:da:5e:
62:c7:00:7e:15:7b:91:d4:a4:c9:a9:4e:d5:26:c1:
fc:b4:77:57:54:a6:92:e5:06:71:b6:f7:16:a4:cd:
4a:23:24:7e:9d:bb:b6:b9:23:aa:44:72:8a:d3:03:
59:5d:40:95:1b:ba:0d:e5:57:ef:6b:3e:0f:e8:e3:
e9:12:8c:e6:4a:89:aa:f9:33:aa:e5:c3:99:ba:e5:
75:b9:7d:11:60:0c:74:84:a6:12:a9:eb:fc:7d:42:
6f:47:84:b4:06:7a:d2:84:bb:df:40:1c:f0:68:6a:
25:31:44:cd:c0:9a:68:1f:6a:8a:89:c5:1a:c6:df:
4e:1e:3f:7d:c0:9c:31:ce:43:a6:11:4e:89:49:25:
c1:10:c7:2a:c1:7a:bf:ff:ee:da:1c:57:74:05:0f:
02:61:a8:0b:48:b9:88:ed:5b:a2:6e:dd:0c:0c:c0:
41:06:bc:8c:22:21:79:59:a9:8f:6e:eb:b3:bd:16:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9D:D0:91:A8:A0:DB:E0:2F:C9:8E:DD:56:BE:FA:5E:BA:FC:86:27
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j53Qkaig2-AvyY7dVr76Xrr8hic.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.46.0/26
Signature Algorithm: sha256WithRSAEncryption
58:76:8e:31:4d:13:95:93:ee:7a:50:7e:e9:52:02:19:60:5c:
4f:0c:e2:70:8e:18:21:6d:21:df:82:24:d3:a4:56:e7:c4:9d:
db:db:d5:77:ec:e0:b2:9c:07:dd:87:8e:e7:80:f9:9e:d7:9f:
87:93:a7:73:cb:57:c2:50:77:30:f8:88:e8:af:9e:66:ff:10:
7d:9e:d5:f9:fd:84:f2:db:7d:88:ae:73:c2:fe:ab:8d:c9:c8:
be:8f:4d:a2:28:c8:ed:d0:67:f6:12:f6:6a:8b:27:7e:73:4f:
18:36:8f:a8:28:74:ef:a6:3b:01:de:19:ff:99:db:4f:f5:e7:
41:bd:c1:44:1d:2a:cf:9c:d2:50:9d:cc:4f:1a:06:37:b2:61:
e3:6d:74:f5:b5:a2:57:d3:78:04:4c:9c:b2:c4:dd:2c:26:dd:
66:e4:8e:5c:59:d4:e5:99:ce:12:0c:90:42:b0:ed:f5:72:89:
63:43:40:c8:ac:aa:7b:ed:cb:25:c6:7f:99:3b:89:0f:74:44:
7e:09:03:8a:1c:c9:a9:6a:03:0b:b0:6f:a6:64:f2:b0:c4:a2:
ef:35:42:e4:4f:d8:7b:95:6d:df:4f:16:dc:fd:b3:5c:4c:93:
d7:ab:f8:15:4e:5e:e0:fa:4c:4f:2e:9f:55:a9:77:c3:4b:b9:
18:19:87:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org