Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nh4ZLeA2m9nsYcdQWjKZfT791R4.roa
File: nh4ZLeA2m9nsYcdQWjKZfT791R4.roa (raw, json)
Hash identifier: f3yml+0L1s7y5tgA+rxQviGJMvCNBk/FyEzfJp8cMJQ=
Subject key identifier: 9E:1E:19:2D:E0:36:9B:D9:EC:61:C7:50:5A:32:99:7D:3E:FD:D5:1E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B77
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nh4ZLeA2m9nsYcdQWjKZfT791R4.roa
Signing time: Wed 29 Sep 2021 02:46:38 +0000
ROA not before: Wed 29 Sep 2021 02:46:38 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.177.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7031 (0x1b77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:38 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9E1E192DE0369BD9EC61C7505A32997D3EFDD51E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:50:7c:ab:9d:17:ec:37:8b:0f:0a:ad:8c:
60:04:ac:04:46:c6:1e:4e:63:2c:31:05:f4:7f:9b:
ba:12:1f:f7:91:c0:5d:0e:9b:fa:cb:61:21:5a:7e:
43:b8:38:f5:df:6f:6a:a4:c8:79:a3:ed:37:04:86:
c1:06:a0:f8:07:aa:65:5a:af:fa:8f:83:ab:77:85:
97:28:69:60:b6:69:f8:0d:c5:9a:35:4d:46:c8:1d:
51:cc:8a:4c:97:ea:01:83:73:0a:b7:1e:74:64:0a:
90:10:05:93:d7:2c:68:a1:a2:9b:6a:99:4a:a8:68:
53:9e:69:93:bd:bf:10:a6:2b:06:98:82:e6:29:14:
c6:66:11:5b:0f:57:c3:c1:91:49:1f:05:79:a9:da:
ff:2d:27:2d:67:d3:47:b1:45:96:10:cd:6b:19:1a:
57:41:3f:b0:7c:b8:ce:ab:fa:a2:d8:59:4c:0b:d8:
a0:7a:22:9a:07:90:47:2c:a7:85:53:0b:82:b1:e3:
fc:6b:e8:4f:c9:07:35:48:a5:92:fc:d8:6a:d1:87:
e3:e6:11:c8:78:42:03:c4:44:2e:7c:49:f4:d8:4b:
a6:76:fb:73:83:94:15:b4:99:f1:64:40:41:c7:da:
c5:b7:58:6d:dc:67:1e:fb:a1:56:04:96:2d:70:21:
ba:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1E:19:2D:E0:36:9B:D9:EC:61:C7:50:5A:32:99:7D:3E:FD:D5:1E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nh4ZLeA2m9nsYcdQWjKZfT791R4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.8.0/22
Signature Algorithm: sha256WithRSAEncryption
46:7c:0a:81:4d:94:56:bf:32:6f:64:31:4b:59:a4:bb:70:0e:
13:c7:ff:f9:92:2b:cc:e5:b3:a8:21:1d:23:30:8c:84:9e:1d:
46:72:45:00:fd:06:f4:ce:f7:e9:bc:57:aa:7d:5d:61:f4:69:
cb:a5:aa:49:de:b4:51:1b:ab:dc:e2:65:3f:62:a9:a2:75:2f:
33:01:50:16:00:c9:33:dd:7c:69:d7:36:88:11:bb:db:2a:3c:
8e:1e:86:85:f8:59:35:31:df:fc:51:34:7a:37:5b:e0:9c:e9:
bf:ec:4f:5a:b4:ba:0a:11:99:d9:8b:27:72:58:3c:f7:18:43:
6a:c4:b2:fb:2f:56:9a:26:f5:f6:05:0d:66:c8:44:1b:a7:1c:
af:0f:25:c8:22:79:8b:6d:de:18:b0:c3:39:93:e1:26:2d:60:
5e:35:57:d4:40:2b:90:3d:d5:6b:36:f1:05:04:08:05:21:93:
a4:c0:30:87:5a:70:a6:96:19:e0:66:fd:50:e4:09:8d:49:ec:
20:da:a2:2c:85:54:93:08:f0:65:8f:21:61:36:66:91:bd:b6:
71:4f:ff:95:5b:61:de:28:ae:ee:cd:24:df:b6:74:f2:74:49:
79:d9:de:76:3a:55:df:fb:23:67:db:ec:02:9a:e2:2d:19:4a:
f5:97:d3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org