Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qAzL1SIy3LgMQkhAqbYjG7Fb87c.roa
File: qAzL1SIy3LgMQkhAqbYjG7Fb87c.roa (raw, json)
Hash identifier: JMi9Az+LDB3MeWPLrULc9nXghzv5NwXABeQP3P44yPc=
Subject key identifier: A8:0C:CB:D5:22:32:DC:B8:0C:42:48:40:A9:B6:23:1B:B1:5B:F3:B7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qAzL1SIy3LgMQkhAqbYjG7Fb87c.roa
Signing time: Thu 15 Sep 2022 02:56:04 +0000
ROA not before: Thu 15 Sep 2022 02:56:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8100 (0x1fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:56:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A80CCBD52232DCB80C424840A9B6231BB15BF3B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:dc:ec:3a:cf:ea:b9:58:e2:bc:bc:1a:99:
87:cf:c7:39:82:97:ad:cd:1b:93:9c:9d:f9:e2:1b:
db:c3:a2:14:bc:48:3e:51:92:df:cf:c8:26:c4:43:
bc:63:f8:23:48:00:54:fa:d9:ac:66:98:b5:50:46:
cc:33:73:a8:75:02:d0:01:ba:62:dc:b0:bc:3c:7e:
b1:f4:2d:44:21:e6:19:45:66:91:96:1a:96:24:d8:
24:0b:f9:4a:7a:2a:bc:59:a8:6c:a2:5e:96:83:55:
86:2a:b1:c0:cf:a3:3d:aa:dd:4f:6d:f0:97:c1:21:
16:5f:b8:82:3e:09:28:70:45:44:49:58:ef:ff:f3:
ba:11:0c:0b:25:32:6b:25:a5:be:e5:40:82:47:3f:
dd:3d:f0:70:f0:db:96:02:a2:4c:97:60:f1:d0:b9:
2f:ff:9e:47:c7:2b:a6:23:b1:9b:d2:2b:25:ac:f8:
62:19:14:b6:dc:ac:6b:2b:5d:0f:f0:ac:c8:9c:3c:
fd:0e:d6:24:b6:69:dd:11:79:27:44:98:7b:d5:a6:
42:ad:03:ea:8f:b4:d1:5a:0a:e6:a2:a6:2a:2e:71:
5f:5e:2d:8a:ec:25:10:33:04:c6:17:4f:40:36:33:
b3:85:df:3f:6a:aa:4c:67:bd:bd:ce:67:b0:3c:85:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0C:CB:D5:22:32:DC:B8:0C:42:48:40:A9:B6:23:1B:B1:5B:F3:B7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qAzL1SIy3LgMQkhAqbYjG7Fb87c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.136.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:93:7b:be:07:40:cf:7a:84:c2:2b:b2:1e:15:c4:c9:aa:c7:
3f:60:d7:bd:94:cd:e0:89:11:4b:69:6b:7d:ca:3a:e3:42:b8:
0b:06:43:e9:f2:f3:8d:17:c9:d6:98:3d:18:8e:07:d9:2f:50:
ee:6d:bb:fd:1f:96:2b:b7:f1:a9:ff:c5:ab:e4:9c:0a:cf:98:
2c:e7:ac:1a:2d:e6:6d:13:c6:51:3b:08:a7:88:18:77:8e:30:
3b:79:30:c8:d4:ac:96:60:bc:00:86:61:ea:fc:42:29:4b:af:
cd:aa:f6:29:92:71:d8:47:f4:d4:b3:7c:19:54:b5:d0:66:a2:
a3:95:30:d7:16:d6:0c:98:63:64:2e:4c:37:21:ed:6e:77:ef:
68:9d:32:d5:0d:a8:a6:53:be:35:1e:30:bb:e4:5c:83:63:8c:
5f:8c:30:86:36:f9:07:0f:5b:08:51:80:82:73:2c:94:6a:23:
fe:68:e7:20:60:cc:14:18:27:92:1a:7b:8b:d9:3d:2b:ad:21:
89:dd:d0:67:00:7d:84:0a:12:9d:ef:49:a0:11:b0:7f:9e:f3:
98:36:04:63:bf:1e:1a:12:6d:df:04:71:6d:31:d0:e4:7c:4e:
5b:5f:f7:24:20:bd:22:bf:78:b4:7b:15:bb:4e:4a:8e:fc:14:
7c:c8:8e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org