Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kl_NWVbELh3yxW1944ILNKwnrQc.roa
File: kl_NWVbELh3yxW1944ILNKwnrQc.roa (raw, json)
Hash identifier: hJK7ESOJ8vyJCheveWqz15kVfHES59kMyqsjcuRuEBM=
Subject key identifier: 92:5F:CD:59:56:C4:2E:1D:F2:C5:6D:7D:E3:82:0B:34:AC:27:AD:07
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2095
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kl_NWVbELh3yxW1944ILNKwnrQc.roa
Signing time: Fri 25 Nov 2022 04:38:53 +0000
ROA not before: Fri 25 Nov 2022 04:38:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8341 (0x2095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=925FCD5956C42E1DF2C56D7DE3820B34AC27AD07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d1:8e:96:0c:14:0d:5a:da:ea:96:f9:91:fd:
4b:4f:da:1f:4c:a9:74:ff:25:bd:f2:2c:80:50:d7:
ec:d2:cd:26:71:6e:ab:e2:29:c6:3f:93:a7:5a:cd:
ff:77:f1:84:9d:f3:ee:b7:d9:a3:c1:76:0b:2a:e8:
11:fd:55:96:1e:eb:7e:bf:c6:c2:44:f0:60:ca:17:
39:da:7a:bd:ca:d2:4c:54:8e:f9:37:76:1b:1d:14:
64:6d:52:1b:fd:a8:55:8d:14:1f:c1:a0:6f:4a:c9:
f7:6d:7b:45:62:a3:e8:57:e6:77:0e:9c:6f:2f:2b:
9f:cb:72:bb:63:0e:a9:bf:ce:4f:eb:19:08:ca:10:
f7:cd:f1:71:0a:cf:24:89:17:a4:5d:73:6f:41:f9:
49:74:13:6b:c5:3f:b9:97:df:39:98:9e:f5:0b:dd:
3d:dd:b1:86:9b:35:ad:57:df:ee:8a:2c:f1:72:f2:
fd:e0:a7:d1:1c:da:63:c8:76:42:58:8d:41:fe:9a:
ed:77:c9:ab:ab:fc:a0:03:f6:ee:9b:83:8b:68:e5:
fe:84:0c:4e:28:10:eb:59:ca:84:53:6c:a2:8e:84:
b5:aa:8e:4b:bd:8a:93:1b:f3:ce:82:1a:4b:c1:61:
c9:ea:dd:9f:1d:3d:d9:d1:d3:62:e5:1e:41:1f:c7:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5F:CD:59:56:C4:2E:1D:F2:C5:6D:7D:E3:82:0B:34:AC:27:AD:07
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kl_NWVbELh3yxW1944ILNKwnrQc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.172.0/22
Signature Algorithm: sha256WithRSAEncryption
89:22:30:72:4d:c3:51:8c:6a:b9:f2:6e:b4:3b:32:bc:78:83:
38:0a:e5:84:0e:04:7a:0f:b3:7e:f5:b0:2c:8e:1b:79:0f:42:
55:f0:90:3c:9c:13:3e:33:7a:b1:c9:36:f1:5b:81:94:99:55:
fa:ab:a1:db:4a:e1:f8:2b:ef:ac:79:dc:eb:20:d7:d0:f6:71:
f8:27:16:c2:0f:76:11:26:b0:6c:81:d4:c2:88:8b:17:60:95:
73:25:ac:88:4a:e1:87:62:fc:77:0e:90:66:3e:fc:ea:3e:03:
1c:a9:6a:ce:34:9c:72:6d:e0:45:c0:43:55:51:f1:2d:8a:b6:
03:a8:bb:5b:b6:6c:4e:65:7d:9a:18:21:94:87:f4:5c:8d:c2:
26:9f:72:b0:f8:9f:80:d2:7e:72:c1:d3:0a:24:b3:10:04:30:
e8:9b:58:ba:55:d2:64:e1:e6:69:39:63:9e:27:70:d2:10:28:
fe:5f:bc:fc:31:2b:e8:e0:a6:dc:86:88:c7:da:fa:8c:b8:3b:
65:20:f5:76:53:d1:9b:f5:5a:fc:fa:17:d5:54:3e:0b:46:4f:
63:0c:f3:4f:f2:ce:8d:af:e7:c9:6e:d0:a1:88:38:91:67:5b:
2b:de:03:5f:18:ab:3b:1b:a8:b5:12:ad:2b:03:8a:70:1c:5b:
63:54:30:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:48 2025 by rpki-client