Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qYnOL0I8Ita1eHVu3JtGC2Dj4ss.roa
File: qYnOL0I8Ita1eHVu3JtGC2Dj4ss.roa (raw, json)
Hash identifier: qauD3+f3trR2CtB26RWwzNzV3WDmFekNS64Of8j6y9w=
Subject key identifier: A9:89:CE:2F:42:3C:22:D6:B5:78:75:6E:DC:9B:46:0B:60:E3:E2:CB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qYnOL0I8Ita1eHVu3JtGC2Dj4ss.roa
Signing time: Thu 15 Sep 2022 02:53:08 +0000
ROA not before: Thu 15 Sep 2022 02:53:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A989CE2F423C22D6B578756EDC9B460B60E3E2CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:06:eb:d7:3f:a8:94:20:f8:bb:af:1f:e6:55:
6e:57:39:eb:07:82:b6:eb:77:09:72:61:dc:ba:76:
7f:72:b4:c0:19:cb:2d:a3:5c:b1:0a:fd:cd:29:12:
5c:a3:ae:a4:6d:0d:47:c6:d7:ea:64:35:e9:f4:76:
2b:eb:c0:7e:72:1a:0c:a0:6d:0c:40:0f:0e:7b:18:
77:a4:f6:75:62:74:84:b9:0b:c9:3c:b8:e5:5d:68:
19:e8:93:d2:91:7b:da:ba:d0:32:e7:ca:19:73:79:
5d:95:e8:02:fa:ce:81:43:01:5c:11:87:40:14:f2:
23:48:fb:08:54:b3:9e:70:e5:4d:45:f4:93:78:49:
9f:05:d1:f8:e3:e4:4d:5b:5f:e4:8f:35:0c:c9:2c:
cc:ba:e6:7d:5d:35:c3:1b:60:01:2f:a3:ad:62:ff:
4d:ee:58:17:08:93:ac:29:a7:f2:01:81:c9:0d:2d:
4e:12:56:51:aa:47:2c:1e:79:ab:16:73:6f:c6:46:
ee:ee:31:f2:84:19:c8:43:12:69:da:30:e3:a7:04:
f6:99:df:a6:25:0d:de:05:b5:c6:1c:b8:45:70:de:
c6:37:48:19:ae:b8:a0:d5:d8:d0:36:1d:c9:7f:ae:
8c:6c:bd:5f:50:e0:4d:f5:96:df:92:0a:d1:8a:75:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:89:CE:2F:42:3C:22:D6:B5:78:75:6E:DC:9B:46:0B:60:E3:E2:CB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qYnOL0I8Ita1eHVu3JtGC2Dj4ss.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.36.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:b8:fb:d5:ed:84:07:d2:62:bc:e9:1b:f2:60:51:58:53:3d:
fd:e2:6e:02:e1:1f:10:a6:b1:f4:f4:3a:b5:02:24:98:b2:b0:
38:c1:05:e4:b4:98:4f:8d:6a:88:b0:19:1d:fb:4b:19:f0:ac:
bf:d4:87:1f:77:c9:27:7c:61:18:d8:a3:32:4c:70:0e:27:72:
e9:6b:d6:96:7d:00:12:92:f6:43:23:45:2f:b0:e6:25:2d:8f:
37:37:5a:3c:09:d9:af:9d:b7:53:77:fd:5f:85:bc:75:b7:b8:
8c:22:53:77:36:fa:6e:ee:48:cd:32:a0:7f:fa:12:d8:d6:18:
56:61:37:af:0e:60:4f:9c:4b:92:7e:4f:2a:d3:2d:5f:cb:21:
aa:8f:f7:33:1a:5a:65:23:98:75:22:ec:c3:a2:22:a6:a1:70:
f7:e0:0d:20:4e:a3:06:e2:ad:bc:f1:82:02:cb:39:12:b1:6a:
a2:91:75:46:b2:91:a8:fb:6f:d4:ec:9f:39:57:21:6a:d2:4f:
4a:d6:b7:08:be:c0:ca:a2:6c:ee:5c:82:a0:19:b7:71:2a:7e:
70:04:36:6e:a8:54:33:3c:ab:86:81:85:de:03:e7:0f:9c:86:
ca:b1:2d:2b:99:87:9b:6e:f3:2f:cd:32:17:fc:4d:0a:01:e2:
5a:50:d1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:40 2024 by rpki-client on console-ams.rpki-client.org