Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q9-UQQT-OFZHu5qwbzSLii8jpIs.roa
File: q9-UQQT-OFZHu5qwbzSLii8jpIs.roa (raw, json)
Hash identifier: GWlZWOM4IlHA/OxBkI2j8OAYdD7I6uFDEqZJt/fqbcU=
Subject key identifier: AB:DF:94:41:04:FE:38:56:47:BB:9A:B0:6F:34:8B:8A:2F:23:A4:8B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q9-UQQT-OFZHu5qwbzSLii8jpIs.roa
Signing time: Thu 15 Sep 2022 02:53:32 +0000
ROA not before: Thu 15 Sep 2022 02:53:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ABDF944104FE385647BB9AB06F348B8A2F23A48B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:0c:85:04:91:c9:50:bd:82:95:40:b4:e7:
48:40:a4:ed:1f:59:cd:58:a2:db:06:0b:5f:0d:ba:
2b:1e:53:1d:4a:95:72:7c:bf:74:92:33:15:bc:c7:
fe:87:5f:5e:8a:8b:79:3f:e0:4a:c6:53:ea:5d:b3:
6b:00:d1:57:42:48:32:94:1a:c9:4a:3c:5a:01:ce:
c3:3d:95:63:33:bc:f4:16:69:af:95:d6:c6:c1:b5:
98:6c:9d:38:3c:77:35:59:86:83:d4:37:12:c5:19:
71:a4:f4:86:3b:7a:23:95:f2:7a:4c:1e:29:29:17:
c7:1e:cd:37:ba:a1:45:c1:8c:a4:53:ac:78:9b:53:
35:18:b6:a4:c4:c8:b2:e1:8d:cf:39:8d:b3:8b:01:
aa:e5:48:92:78:9f:1d:18:36:8a:13:6e:07:b4:0c:
a7:76:d1:32:de:ed:aa:a6:f3:43:21:84:39:13:16:
43:15:72:f3:e8:94:a2:e8:da:05:ae:f2:52:88:de:
ac:1f:40:6d:f6:c7:90:27:0c:81:25:e1:df:8d:95:
1f:e4:1b:2a:e9:d9:b3:5f:1f:c2:fc:bc:97:82:3d:
af:22:39:bb:ad:fb:7e:b5:92:1d:66:75:62:63:77:
19:ab:13:0f:2a:03:b4:b0:54:3c:db:58:d3:c2:c0:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DF:94:41:04:FE:38:56:47:BB:9A:B0:6F:34:8B:8A:2F:23:A4:8B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q9-UQQT-OFZHu5qwbzSLii8jpIs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:a0:e9:b1:18:79:9e:24:c5:d3:3a:c7:41:cc:e0:c6:b8:6d:
c8:13:51:78:2d:55:1f:c1:ac:37:38:35:04:9f:d0:03:1e:a4:
1c:66:c1:89:3f:53:7a:ca:d5:98:78:23:78:9a:d9:0b:9e:d2:
b5:a8:18:71:88:1f:b8:3f:90:37:da:eb:fa:5e:bf:78:4f:39:
3e:af:bf:0e:cd:49:d2:c6:de:cb:5b:26:1f:f1:13:ab:1e:aa:
f9:07:26:44:c0:17:e2:3d:60:c5:14:af:08:ac:4a:97:76:51:
1f:7b:a3:87:5e:14:5d:82:c6:ef:32:70:b3:e1:f0:4d:0d:0c:
6e:c1:3a:27:f3:79:c0:e7:71:a4:02:dd:c8:21:5d:24:79:d0:
90:27:2f:8c:1c:d7:2a:6e:9a:67:0b:a2:96:07:96:b3:66:82:
35:09:4f:41:cd:63:91:0b:26:c7:ef:80:85:15:28:78:5a:e4:
ce:ca:18:4e:0e:6d:cd:6b:3f:2d:8e:a9:99:c8:6a:21:c0:26:
b5:c5:e7:3b:a4:11:0a:15:d6:82:be:ab:52:69:4a:b6:d3:da:
55:0d:4c:3d:0c:cc:97:d6:3a:e4:27:9e:be:68:96:de:c1:23:
34:21:c6:ba:5a:1d:87:49:92:b4:2a:cd:49:c5:a4:ae:5f:39:
01:84:4d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:33 2025 by rpki-client