Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jggh2gVINkyxiDi5vIvsYaFNtdQ.roa
File: jggh2gVINkyxiDi5vIvsYaFNtdQ.roa (raw, json)
Hash identifier: woJRWvjQ+a8Rfe5ewRm4uyEvbmOmSTkzf06G7z07Rbo=
Subject key identifier: 8E:08:21:DA:05:48:36:4C:B1:88:38:B9:BC:8B:EC:61:A1:4D:B5:D4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jggh2gVINkyxiDi5vIvsYaFNtdQ.roa
Signing time: Thu 15 Sep 2022 02:45:54 +0000
ROA not before: Thu 15 Sep 2022 02:45:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8E0821DA0548364CB18838B9BC8BEC61A14DB5D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:d9:6b:b3:ce:60:25:94:05:7c:ab:48:7e:
0d:18:2f:4b:86:20:b8:7d:1c:63:b2:11:61:3e:60:
19:d8:ef:ce:8c:18:f4:c5:77:94:b0:fc:5a:f4:38:
be:66:a4:7a:c9:9c:68:e1:2c:8d:74:98:a6:b2:f2:
3c:b7:ee:4d:47:40:e0:62:66:b0:69:c3:27:8f:14:
7c:57:ae:25:05:e4:95:ea:29:99:48:25:c5:f1:c8:
83:1d:b9:63:56:c2:4f:ba:d2:af:33:2f:44:e0:e7:
cf:53:be:77:54:c1:09:1d:7b:32:57:9c:78:77:8d:
c7:11:68:11:c7:2b:b0:9f:d1:ae:3d:63:e8:23:bb:
67:bd:37:af:a1:77:84:22:1d:02:e7:e6:48:04:f4:
81:86:67:78:06:33:ea:74:f7:84:05:6c:b3:1f:c0:
b9:96:02:84:d2:90:9c:73:96:0e:40:9a:15:80:31:
44:46:e4:59:14:9e:c3:64:c5:a1:f4:5b:ea:53:8b:
88:e1:d0:c2:87:29:4e:f9:58:e2:b8:f5:cc:d7:b3:
92:0d:41:42:55:22:3d:be:ad:46:2e:1d:b7:7a:07:
98:0c:b6:37:db:2a:f5:69:bb:ae:f2:62:47:0f:b3:
30:1a:64:86:7e:19:49:e1:52:43:21:ea:76:1c:9b:
b4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:08:21:DA:05:48:36:4C:B1:88:38:B9:BC:8B:EC:61:A1:4D:B5:D4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jggh2gVINkyxiDi5vIvsYaFNtdQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.56.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:da:fe:eb:b0:88:49:b0:12:e0:32:0f:2a:33:bc:ee:0d:19:
db:3f:95:5f:77:f9:f1:43:57:07:dc:9f:15:87:19:1e:46:5a:
75:b7:ee:8d:5f:d3:90:10:9f:d2:f0:fe:3d:13:38:07:48:7f:
8a:df:8d:8e:0c:79:bf:1b:9f:69:8c:15:c5:cb:75:40:69:0e:
d4:84:48:6c:08:74:74:dc:06:a6:c9:b3:c3:8c:94:d5:14:30:
b8:d3:74:97:1e:c0:e1:43:51:eb:c8:5a:a3:1c:e1:70:6b:6b:
fe:dc:da:c3:56:f2:bb:64:d6:e1:f7:96:4c:60:51:dc:1e:fb:
c3:5e:45:38:63:cf:66:a5:2c:4a:70:8f:39:7d:01:04:4d:27:
b5:37:e7:37:ad:c7:2a:6a:ba:fe:a0:fd:6c:d2:4d:78:09:cc:
b1:48:5b:7b:94:4e:42:7b:fc:14:01:32:6f:dc:43:32:da:d6:
b6:11:92:eb:37:f2:4b:c3:07:e5:85:10:bd:43:0d:ec:46:46:
f4:0f:65:90:3b:2f:68:05:77:37:4c:61:98:5c:25:34:21:1f:
f9:69:9d:9e:41:cb:13:52:77:a2:41:b1:25:bd:e0:5f:60:8a:
dd:c0:f5:ab:b1:1f:dc:70:42:24:5d:63:d6:81:54:d0:13:b4:
cd:32:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org