Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oZWP665jUp9PAJGq8-fy1dWdt80.roa
File: oZWP665jUp9PAJGq8-fy1dWdt80.roa (raw, json)
Hash identifier: G7D82eBydGPLg0f5WbRdDMpG7buB+Nh62J7bVZdEaI4=
Subject key identifier: A1:95:8F:EB:AE:63:52:9F:4F:00:91:AA:F3:E7:F2:D5:D5:9D:B7:CD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 142B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oZWP665jUp9PAJGq8-fy1dWdt80.roa
Signing time: Sun 07 Feb 2021 11:57:38 +0000
ROA not before: Sun 07 Feb 2021 11:57:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5163 (0x142b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A1958FEBAE63529F4F0091AAF3E7F2D5D59DB7CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:4c:da:a0:90:c8:0c:15:91:2e:1d:cb:d0:
8f:a8:40:44:b2:14:99:12:07:ca:2c:26:17:c8:cb:
37:2e:d9:bf:58:8b:7c:64:07:bb:b5:6b:93:aa:38:
ce:56:ca:b3:0f:70:09:d2:17:4c:bc:76:a6:60:3e:
1c:a2:20:50:5c:c6:2e:20:60:49:99:e9:1f:6c:4f:
24:0d:4f:cc:b0:a0:a8:81:d3:e4:d3:3f:50:a0:1a:
43:79:a0:9d:43:21:22:f1:74:11:6f:5b:d4:d5:03:
73:fd:5b:a7:63:0c:5d:53:9c:fb:a0:ec:6e:c6:db:
bb:bb:54:16:1d:3b:cf:04:c8:6f:d9:9b:f4:ba:0f:
9e:19:63:8b:b9:61:14:e1:29:46:94:b4:9d:4d:1d:
6b:49:96:6a:91:3f:4c:31:42:81:f4:da:53:cb:ad:
d1:4e:e1:9a:20:45:2d:08:60:86:72:ba:ee:7c:f4:
a8:40:34:3a:49:4c:d2:48:d7:c0:db:b9:70:e0:3c:
66:68:ee:30:fd:1d:c2:c2:e3:c6:bd:35:9d:f9:31:
e9:d4:8e:62:97:ba:4e:19:99:62:2b:55:61:f1:a0:
e0:ab:30:3d:8a:9a:74:25:06:23:6b:b7:8f:3e:3a:
28:1d:17:db:17:91:64:50:d9:a9:46:0a:f2:38:04:
d2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:95:8F:EB:AE:63:52:9F:4F:00:91:AA:F3:E7:F2:D5:D5:9D:B7:CD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oZWP665jUp9PAJGq8-fy1dWdt80.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.40.0/21
Signature Algorithm: sha256WithRSAEncryption
99:09:0a:d2:e0:23:1b:da:04:48:4d:33:25:3a:da:c3:47:9a:
c9:a0:bf:62:34:7f:2d:cd:51:46:a3:60:d7:6f:b9:c8:bb:e2:
47:f5:89:5e:a5:d7:3d:fd:75:dc:58:13:7b:aa:a3:9c:ed:47:
e7:f1:a4:3a:16:a3:84:67:ee:a5:19:81:94:22:57:b8:33:08:
4a:a1:ab:c1:e1:6f:63:50:a6:8c:c7:4f:06:26:5a:1e:f8:24:
8f:e5:24:8f:57:57:64:8d:95:fc:31:bc:21:5b:bf:a1:09:46:
b1:22:c6:6a:c4:f3:40:4c:f2:d8:93:e6:df:3e:3d:4e:b2:8d:
cd:c1:74:d4:6b:b9:cd:be:3a:bb:94:91:1e:35:70:e5:db:ae:
2b:30:15:9d:7b:bc:3d:c3:fb:83:c9:11:66:ee:f7:66:91:a3:
b8:7e:a3:da:c8:73:87:db:4e:c4:bf:d1:58:38:f5:20:c9:6c:
30:74:db:be:7b:53:ca:f1:77:dd:18:90:33:c1:33:92:fd:22:
71:9e:0f:a1:50:90:d0:5d:3e:10:b2:26:1c:40:48:ff:66:3d:
c1:1f:0b:63:eb:93:78:d5:00:0b:8e:4a:75:39:05:ed:f7:bf:
3c:66:b1:96:17:7e:ec:89:9f:5e:9a:48:d0:10:3e:4b:a8:9d:
a8:69:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org