Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jx3R88gaptkw4CgNAxnfI5AUUJM.roa
File: jx3R88gaptkw4CgNAxnfI5AUUJM.roa (raw, json)
Hash identifier: eY/PPY8a03GqXSML6SOcZflJrLvZDNMes7tQY2ugoHA=
Subject key identifier: 8F:1D:D1:F3:C8:1A:A6:D9:30:E0:28:0D:03:19:DF:23:90:14:50:93
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 168F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jx3R88gaptkw4CgNAxnfI5AUUJM.roa
Signing time: Sun 07 Feb 2021 12:12:48 +0000
ROA not before: Sun 07 Feb 2021 12:12:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5775 (0x168f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:12:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8F1DD1F3C81AA6D930E0280D0319DF2390145093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:4f:5b:8a:75:30:ca:95:87:67:f6:b0:1b:
3a:a1:19:39:78:4d:68:94:bf:f6:63:55:3f:fe:6f:
65:e2:ad:ed:ff:85:90:94:e7:34:dd:f9:6f:9c:19:
93:03:c0:9d:54:da:35:89:ba:4e:de:00:6e:85:af:
17:72:c5:75:c3:66:7d:84:e4:d0:17:64:db:f4:48:
70:49:6c:b8:8b:4c:d3:3c:bf:81:f4:95:ac:58:3f:
4a:ab:c6:b4:1a:2c:61:e1:34:7e:70:01:53:1d:a8:
31:8b:6e:03:4d:e4:ba:8b:87:89:69:71:32:90:fa:
65:2d:45:d6:d0:94:5c:40:fd:46:76:d3:7c:8c:b9:
7f:ef:f4:1c:a3:c2:40:c0:5f:a6:92:e4:3e:8d:fa:
2a:66:75:e7:a1:d0:95:93:3f:9b:0f:38:58:06:b0:
4b:ba:e0:04:25:18:4a:8e:16:11:b3:db:e3:ff:28:
f0:17:7a:9b:0b:15:ab:64:bd:44:4d:c2:59:fd:65:
da:1e:7a:d1:28:80:b0:05:a3:30:70:98:32:ed:d3:
d6:a1:af:72:59:a0:2f:9d:23:90:18:77:d0:9f:88:
ef:2b:09:06:21:a4:9d:3c:c8:f6:be:2b:da:1d:61:
25:92:44:c4:ed:b0:ca:29:de:0e:ec:ac:fb:6e:7b:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1D:D1:F3:C8:1A:A6:D9:30:E0:28:0D:03:19:DF:23:90:14:50:93
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jx3R88gaptkw4CgNAxnfI5AUUJM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.216.0/21
Signature Algorithm: sha256WithRSAEncryption
63:d2:7b:dc:ac:19:00:02:58:67:51:72:1b:3f:3c:b8:b6:93:
00:37:9e:7e:58:25:6e:bc:dd:7f:41:05:99:fc:34:05:7c:9f:
88:d4:72:b4:8b:4d:9d:6c:b2:ed:89:aa:05:27:98:38:9f:27:
b5:3b:dc:87:9c:ec:86:5e:a6:b6:f8:31:06:c9:2c:95:f4:8b:
63:09:31:80:db:fe:0d:c5:80:03:11:73:10:a0:67:96:0d:2f:
3d:75:30:e6:91:2e:39:c8:ef:63:b8:4d:1e:8a:ec:26:8f:a5:
1c:0c:3d:66:a0:f0:f0:27:b6:54:5b:5f:8d:8e:78:28:e1:f0:
b9:f6:28:38:aa:a1:e6:bd:44:43:e3:bf:48:f8:97:e0:9c:b9:
2e:1c:61:7d:2e:b3:d3:b4:f3:29:26:60:6b:76:55:04:3e:8f:
ff:75:99:80:3f:da:23:d3:8b:d5:07:89:31:ae:6d:7c:c6:4d:
ab:ab:b0:ca:73:94:4c:7b:f4:d3:4e:c0:9e:b0:b3:48:c9:95:
43:c5:b6:86:08:df:0b:7c:5c:38:fb:e1:b4:5f:c4:fb:c4:52:
ba:d8:24:a2:a6:2a:ce:ed:70:ea:c3:43:2e:d9:24:85:3b:00:
ee:a8:34:01:ad:84:63:d6:9a:2e:a0:dd:72:fb:30:1a:c5:c8:
dd:77:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-fra.rpki-client.org