Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lJn63ND_LTbFT4_ZT7OqDoSSNDo.roa
File: lJn63ND_LTbFT4_ZT7OqDoSSNDo.roa (raw, json)
Hash identifier: leRToxrIDpxULYGd9gfXfhsD42gRtx9JH8nhOuYlWiE=
Subject key identifier: 94:99:FA:DC:D0:FF:2D:36:C5:4F:8F:D9:4F:B3:AA:0E:84:92:34:3A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AB9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lJn63ND_LTbFT4_ZT7OqDoSSNDo.roa
Signing time: Wed 29 Sep 2021 02:45:40 +0000
ROA not before: Wed 29 Sep 2021 02:45:40 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.176.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6841 (0x1ab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:40 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9499FADCD0FF2D36C54F8FD94FB3AA0E8492343A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:bb:ec:11:86:98:40:64:ec:f9:4b:fb:3d:
ed:a0:66:47:fc:03:d0:23:d8:8e:30:0f:12:20:09:
fe:e7:cf:b3:eb:85:6f:cf:b5:10:9a:17:80:e0:03:
2f:b4:6b:84:ed:4b:5c:1e:60:3a:de:44:08:a2:f7:
8d:b8:84:a1:15:41:bc:16:34:67:ab:3b:04:f4:79:
41:54:38:77:99:41:63:77:19:4f:3b:81:07:26:f6:
39:6b:1e:69:00:29:17:d7:cf:e7:b3:69:00:33:40:
0f:0d:04:2a:82:95:13:22:13:ee:e6:38:5c:ed:61:
80:e1:75:ef:38:b2:10:42:57:a1:ce:5e:37:6b:bd:
81:4e:c9:f2:42:2a:47:3b:4d:69:8b:da:66:83:95:
bf:9f:ce:08:e5:be:d6:32:05:81:25:5b:6b:19:58:
8e:83:58:d6:50:89:40:36:4b:5f:7c:29:44:5e:a1:
60:1b:7a:df:0a:8c:91:9b:d7:4a:51:7a:b6:4c:ad:
8d:3e:04:10:6f:5a:97:7b:ed:9b:ef:5a:d2:4c:84:
54:14:17:11:cf:52:a3:d0:69:fb:d2:1d:b9:41:fd:
0c:83:f2:57:cc:a1:7d:a6:14:ef:09:dd:60:5c:63:
49:bf:4d:86:8d:93:dd:96:f1:30:14:8e:3f:13:9a:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:99:FA:DC:D0:FF:2D:36:C5:4F:8F:D9:4F:B3:AA:0E:84:92:34:3A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lJn63ND_LTbFT4_ZT7OqDoSSNDo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.40.0/21
Signature Algorithm: sha256WithRSAEncryption
80:94:ff:1f:b0:de:10:1e:42:d6:15:c6:54:57:7d:4b:86:3c:
83:7e:d8:22:d7:f2:1c:7d:0d:4d:a2:b3:5c:2b:68:5f:62:6d:
0f:c9:d1:86:c2:ff:af:19:02:2b:6f:83:26:72:66:f4:13:87:
62:76:6f:5a:10:ac:ec:0c:23:e0:c5:9e:50:c2:ac:4f:ed:ee:
87:c5:9e:92:8d:ab:3a:b3:e5:49:41:6b:9b:e6:6d:b1:05:6b:
06:ba:ba:89:1b:71:69:61:23:a9:f1:06:b1:18:91:b6:ac:63:
4c:5f:e1:b8:97:3d:e2:c9:6b:ca:ba:5c:8f:4d:56:8d:af:f7:
ad:ba:24:79:07:35:1d:55:89:83:0b:34:50:82:d5:36:55:85:
7d:90:84:c3:e1:96:35:fc:73:fb:3f:56:b9:8a:79:36:22:aa:
58:95:2d:88:1e:e4:95:da:d7:1b:60:cb:dc:0d:8d:dc:90:4e:
56:77:23:6b:11:d9:68:90:85:6c:12:de:d3:fc:9f:c2:bf:65:
46:31:2a:14:5e:65:86:f1:19:4b:79:18:a0:2d:c2:8c:f1:8e:
ec:aa:67:a4:b6:6d:7d:15:5e:65:9f:c0:6c:9f:21:c5:9e:14:
4d:b1:b1:6e:c3:d3:94:2a:7d:73:ff:30:17:4f:f3:78:fb:f1:
11:de:58:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org