Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oAqFbenuCxAy6xu2hkiQ5rViDyI.roa
File: oAqFbenuCxAy6xu2hkiQ5rViDyI.roa (raw, json)
Hash identifier: UzKBhkBlhay66LAIKQ96Hjhv+7I37onHgh3gHb8O53M=
Subject key identifier: A0:0A:85:6D:E9:EE:0B:10:32:EB:1B:B6:86:48:90:E6:B5:62:0F:22
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oAqFbenuCxAy6xu2hkiQ5rViDyI.roa
Signing time: Thu 15 Sep 2022 02:53:22 +0000
ROA not before: Thu 15 Sep 2022 02:53:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A00A856DE9EE0B1032EB1BB6864890E6B5620F22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:3d:46:52:75:f7:51:28:b2:ab:0a:dd:3c:
0c:82:2e:31:ac:cd:0c:25:25:f1:d7:0f:6b:cd:bd:
0d:3e:40:e2:7c:31:a4:0b:37:6a:da:9f:45:dd:04:
47:a9:38:6d:1e:10:18:c2:81:28:d1:81:0e:98:dd:
33:22:f4:df:b6:95:a4:00:fd:cc:3c:6c:09:1c:2b:
c7:14:77:32:8b:ae:3f:dd:55:4d:76:09:03:70:42:
95:35:57:be:71:3d:b5:a1:c3:ab:37:b7:7a:a6:a4:
b8:3c:72:17:20:cb:8d:5d:97:5a:78:56:be:f0:43:
b7:04:d5:7e:29:91:1a:f4:99:d8:57:d7:02:22:9f:
8e:72:e1:96:8e:30:3b:a2:ca:a9:d2:a6:15:6b:1e:
2c:18:fb:e5:56:31:5d:1e:bb:90:96:c9:cc:bf:0d:
da:db:59:89:2c:d5:89:23:45:65:d7:6c:8e:c4:41:
c2:b8:94:6c:c3:6c:e1:8d:0a:eb:32:6e:a9:06:37:
52:98:26:08:79:06:48:c0:a7:9e:9a:b9:7e:61:72:
f0:29:99:a0:29:60:3d:e0:5c:a2:b9:0c:81:23:1b:
ed:e3:f5:07:44:b1:77:22:71:d2:8e:06:a6:10:9b:
c1:9d:e6:db:cd:f4:f5:a8:47:19:ae:57:e3:54:a0:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0A:85:6D:E9:EE:0B:10:32:EB:1B:B6:86:48:90:E6:B5:62:0F:22
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oAqFbenuCxAy6xu2hkiQ5rViDyI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.112.0/21
Signature Algorithm: sha256WithRSAEncryption
05:d4:02:56:29:ef:ec:9d:05:4a:e5:f6:24:1f:8f:6b:fc:be:
1c:1e:4d:e2:45:29:17:a2:ee:0c:9a:15:86:f5:32:42:55:4a:
22:27:11:45:94:f2:d5:97:e0:97:49:07:53:a7:9b:95:d8:b8:
48:23:62:3a:3d:41:e8:91:af:d3:09:ba:26:ac:93:b2:76:68:
25:87:e7:1a:f6:7b:7b:43:0a:56:80:d9:50:2e:11:b8:4a:c6:
5c:66:c7:38:b6:0e:ca:64:ad:30:45:78:bf:c9:2e:63:0c:96:
45:9f:ce:cc:a2:29:b9:88:ba:97:06:2b:d2:10:a8:8f:f8:ee:
03:a3:4f:6e:02:ed:7f:ce:9d:5e:6a:b2:c4:ff:d7:67:ae:a5:
3b:1d:ad:be:86:b2:44:a7:a1:f9:e5:a7:d4:9e:bc:0c:c8:5f:
fe:05:4b:98:47:2d:86:24:e9:00:41:9a:17:99:a5:0d:64:18:
7f:f7:d2:7b:c7:5c:2a:88:07:c0:df:1f:42:5e:96:ec:21:f8:
59:be:40:1e:a2:76:6d:79:8d:8a:09:16:89:8b:46:06:38:e5:
e1:a9:e1:82:33:ad:1e:5e:8d:90:44:cd:76:bb:52:6c:fb:83:
dd:96:30:03:fa:0b:2d:05:c1:ff:47:65:c0:e7:ff:e4:4e:2b:
6c:82:29:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:04 2025 by rpki-client