Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nQCOTnU7V0SUsI-3WOptE2azdp0.roa
File: nQCOTnU7V0SUsI-3WOptE2azdp0.roa (raw, json)
Hash identifier: pJ/T4L2o9u6Hplv5LUHk+xA+O6AIROG2dO6tDpapLlU=
Subject key identifier: 9D:00:8E:4E:75:3B:57:44:94:B0:8F:B7:58:EA:6D:13:66:B3:76:9D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nQCOTnU7V0SUsI-3WOptE2azdp0.roa
Signing time: Thu 15 Sep 2022 02:56:08 +0000
ROA not before: Thu 15 Sep 2022 02:56:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8100 (0x1fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:56:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9D008E4E753B574494B08FB758EA6D1366B3769D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:71:39:f3:47:cd:fa:16:61:b2:36:59:49:
65:4b:46:73:d3:fc:4f:ef:f0:0f:90:3f:f7:2d:7c:
0b:65:d7:47:ec:e4:5b:c6:ef:a9:20:4e:f2:0a:7c:
14:73:2d:b9:94:8f:73:36:4b:3a:68:6f:21:23:7f:
87:bb:e3:54:5a:50:b7:46:fd:d3:16:87:e3:5b:62:
38:6b:73:67:ea:a8:a4:69:1a:ea:d4:d2:61:72:b4:
61:7e:de:f2:15:e3:76:29:cc:7a:bb:e2:dc:33:70:
f2:0d:3c:e2:20:f8:f6:91:ea:9f:94:35:50:dc:26:
5c:48:5d:e9:3b:ce:a9:6e:3e:a9:c8:f5:8e:a4:66:
4b:a1:46:ce:11:97:87:0b:cc:78:98:2b:ea:d4:a2:
8d:a1:3c:ed:3c:de:af:26:d5:f3:ce:6e:05:ef:45:
93:2a:76:f0:5e:7f:c6:a9:cd:42:b8:49:e8:99:8b:
0b:8b:1e:f9:cb:20:1a:ff:bb:5b:2f:83:ee:ad:a5:
ee:15:76:34:a7:36:5a:69:20:dc:01:7d:f5:14:bd:
5f:95:9c:c9:9c:76:2b:b0:a3:09:e8:ec:68:c7:d3:
87:71:15:c1:45:95:f4:56:70:be:5b:88:37:87:09:
92:95:18:5f:9f:92:69:8a:ae:f9:5b:00:0f:c1:12:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:00:8E:4E:75:3B:57:44:94:B0:8F:B7:58:EA:6D:13:66:B3:76:9D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nQCOTnU7V0SUsI-3WOptE2azdp0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.216.0/21
Signature Algorithm: sha256WithRSAEncryption
50:df:59:25:c0:a7:a8:34:85:aa:b4:c0:7f:58:29:3b:8d:9c:
3c:36:fc:8a:f9:84:b5:bb:dd:54:68:16:93:1f:0b:9c:ec:92:
d1:87:65:5b:05:c3:11:52:9d:01:be:71:e8:38:b3:94:05:72:
4e:48:6a:15:41:26:ac:70:fd:86:9b:77:7b:65:8a:39:98:e0:
d6:ee:f7:81:8f:ca:43:c4:f7:09:a1:ae:c3:1a:40:e1:e5:38:
1e:a4:8a:3e:d3:70:65:1a:78:24:7c:ca:aa:86:55:d1:6a:25:
78:05:14:49:6d:cf:85:8d:e9:ca:2c:4d:8c:ca:d4:c3:e4:6c:
c0:be:a3:63:88:63:e1:97:52:ff:77:00:43:74:a7:d3:3b:c8:
c3:88:a7:ac:e5:41:33:6b:48:26:80:ec:b3:be:30:fe:1e:0c:
90:d5:5a:84:e6:15:9d:ec:21:d3:9a:db:00:93:c9:86:e2:76:
f4:c3:28:29:52:4e:35:20:a7:c4:4d:fd:11:b3:e2:5e:ea:e8:
fc:83:59:5b:45:f6:1a:9f:c7:8c:a1:4a:99:b6:fc:ce:fd:20:
cc:2d:9b:0e:b7:91:b6:af:16:89:1c:04:3a:ac:b2:7f:2c:c0:
93:55:33:8d:f2:0a:d4:be:33:72:1c:d8:ed:cc:19:aa:93:2a:
72:a2:ff:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org