Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lQpq-hnuYHkB3753lLPPicF1LE8.roa
File: lQpq-hnuYHkB3753lLPPicF1LE8.roa (raw, json)
Hash identifier: 59/79JR3fgRttZdpmSMH2deeawUNMKU7dlA+gj0llC0=
Subject key identifier: 95:0A:6A:FA:19:EE:60:79:01:DF:BE:77:94:B3:CF:89:C1:75:2C:4F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lQpq-hnuYHkB3753lLPPicF1LE8.roa
Signing time: Thu 15 Sep 2022 02:44:55 +0000
ROA not before: Thu 15 Sep 2022 02:44:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=950A6AFA19EE607901DFBE7794B3CF89C1752C4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:a0:91:0f:55:f9:df:89:b1:07:ce:35:a8:
30:78:19:15:70:30:e9:8c:85:13:65:d7:29:90:0c:
f5:e7:77:fc:1e:46:0d:b1:9a:ba:d0:f1:79:20:7c:
2a:99:8a:61:cf:44:9b:dd:81:25:30:de:13:a8:9b:
cc:04:2b:82:70:0b:1e:27:7a:48:5c:3c:d5:dc:10:
4d:29:1c:74:7d:ae:9f:24:f4:6d:80:4c:67:d7:e0:
28:f7:c0:0f:b8:2d:29:82:71:54:95:6d:83:8d:73:
f1:53:82:8e:0c:97:db:71:13:f5:f4:42:89:b0:4a:
26:96:8f:b2:c2:ed:a5:b1:95:a4:60:7a:d0:49:3f:
98:88:e4:f0:e0:1b:22:c8:a6:92:a2:d4:48:fb:fb:
5c:fe:41:b6:bb:83:36:72:1c:42:d7:a6:af:6c:61:
c2:10:85:26:5d:de:da:c3:f7:75:a1:b7:63:a4:7f:
6c:dd:34:3d:b1:88:1d:43:2c:62:bc:0a:8f:3a:8b:
1b:32:38:c4:7c:a1:76:d9:11:10:b1:4f:bb:16:65:
4e:5f:8d:52:c9:99:1a:16:33:1d:f8:92:fd:cb:ab:
73:f0:cc:a6:7e:de:2b:b3:0c:e8:b8:ef:cb:f3:64:
f8:15:75:1d:49:6e:50:0b:32:98:83:e9:f9:06:47:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0A:6A:FA:19:EE:60:79:01:DF:BE:77:94:B3:CF:89:C1:75:2C:4F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lQpq-hnuYHkB3753lLPPicF1LE8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.0.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:47:9e:29:95:7f:5b:c3:23:d9:f2:96:e8:89:5b:56:c5:b6:
7f:7b:af:81:21:af:6b:db:c7:23:f9:8a:5d:65:3c:d0:ca:f7:
d9:89:3f:6e:04:2c:db:66:7f:d8:49:f8:d3:b2:ae:bc:fd:70:
90:4d:1e:56:62:3b:8c:dc:cf:10:44:d4:4f:ca:4b:71:e0:d0:
16:78:6a:7b:3f:95:28:b9:87:f0:12:98:ad:ee:11:01:5b:d9:
bf:b6:0c:79:c5:6e:91:8a:c7:1c:9a:e5:34:9a:ea:ae:94:28:
4a:95:87:2e:62:f4:d8:23:3b:e7:d3:32:95:73:a3:64:b1:09:
a0:35:eb:e9:14:c6:4d:a6:d5:a4:02:cc:03:dd:0a:fd:06:92:
64:0f:d8:8b:59:97:ba:96:e8:a6:6e:1c:8a:8a:ff:9a:b4:9f:
07:9f:7c:6e:3d:05:80:9b:b1:5b:8b:89:bb:0c:9b:4e:b5:ca:
41:2d:0a:f9:ca:05:aa:3b:63:9e:3f:04:97:9f:7b:43:cd:8a:
ba:27:4c:d6:46:dc:a8:71:79:da:cc:2f:ef:2d:ef:76:93:c9:
17:08:e7:96:fb:d6:47:e5:2a:fe:05:a2:64:9b:98:a7:a7:ef:
26:e7:43:97:89:db:ab:14:a2:50:4c:9e:ec:01:f3:02:10:de:
36:8a:86:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org