Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sc1Fcervezcyk6C6TtjtTvo_MQs.roa
File: sc1Fcervezcyk6C6TtjtTvo_MQs.roa (raw, json)
Hash identifier: JQicR53ewQJVZejVz5QKQDgNu//FToUnp0Q8FKowTjY=
Subject key identifier: B1:CD:45:71:EA:EF:7B:37:32:93:A0:BA:4E:D8:ED:4E:FA:3F:31:0B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sc1Fcervezcyk6C6TtjtTvo_MQs.roa
Signing time: Thu 15 Sep 2022 02:45:18 +0000
ROA not before: Thu 15 Sep 2022 02:45:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B1CD4571EAEF7B373293A0BA4ED8ED4EFA3F310B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:f5:bd:fd:e1:45:ba:4f:c5:3b:6d:17:8a:
6e:c2:1e:76:fb:57:71:93:ae:2c:74:74:be:1b:d5:
25:f8:c3:c6:93:d3:1c:97:40:86:26:fb:0c:49:a3:
24:31:e4:26:79:4c:0d:b9:d3:70:ab:29:19:3a:45:
50:48:11:38:68:c4:c5:8d:32:ef:e4:3e:35:c3:cc:
ed:bb:f2:eb:bf:42:4e:d8:b8:f4:20:4a:97:93:28:
91:04:b7:09:05:75:33:e7:99:88:93:d9:68:c6:83:
c9:ca:4c:8f:f8:c2:1f:a4:f5:62:f7:06:36:bf:6a:
bc:3b:13:24:a0:3c:d9:f8:65:e0:a3:65:e1:f7:08:
f9:9a:f9:b4:e1:9c:33:19:a4:41:e9:52:b8:a7:a5:
ea:51:24:ab:b6:1d:b0:ce:c1:9b:cf:aa:63:d8:7d:
38:67:18:89:e1:3b:9a:fa:21:8d:4a:6e:b5:19:81:
d9:62:ba:b3:83:4a:52:5a:cb:a1:3b:b8:ad:b0:7d:
8e:b2:97:88:0a:57:1a:69:d7:3c:c4:91:cd:37:be:
13:0f:31:ad:ae:8d:99:99:95:5f:12:35:a6:49:9b:
1e:a8:b9:14:3f:07:3c:18:36:05:79:2f:f9:97:33:
e2:3f:d5:8b:ef:7f:06:3a:0e:4a:c6:ae:b0:5e:53:
8a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CD:45:71:EA:EF:7B:37:32:93:A0:BA:4E:D8:ED:4E:FA:3F:31:0B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sc1Fcervezcyk6C6TtjtTvo_MQs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.48.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:e9:39:24:c1:95:77:aa:6e:88:5d:05:de:97:38:c8:13:ba:
97:3a:4b:5c:c5:37:73:6a:8d:a6:f3:32:c8:50:79:f7:fe:8c:
1f:91:aa:45:18:ea:23:bb:77:18:50:71:96:9f:72:fd:03:24:
1e:ba:22:e9:91:2d:f1:5f:49:a4:db:85:06:14:3d:9e:6f:eb:
6c:a1:20:b7:25:99:d2:3c:24:bc:5b:c8:3e:2d:90:53:8c:e1:
ea:52:6c:27:90:e2:35:75:ac:77:0d:b7:db:22:84:c1:0e:9b:
d4:49:d9:a3:5f:62:e6:1f:5f:f0:65:be:89:56:47:4a:40:3a:
6b:62:a0:38:e7:98:e8:ba:50:f6:4c:02:ef:d8:3d:72:b1:bb:
19:38:9b:b0:42:3d:76:87:f7:0a:50:9e:d2:d2:6a:44:59:c8:
51:91:73:b3:4e:92:e8:2e:6a:f8:fd:4d:40:97:af:22:91:e0:
8b:37:10:66:29:56:42:5d:a7:3b:75:6f:0e:18:61:e5:a4:ea:
2e:61:a7:a6:93:03:0b:cc:b3:6e:6c:c7:f2:06:e3:31:57:f9:
db:ea:6a:13:3c:ee:1c:b5:8a:44:0d:b4:6c:0d:df:51:3e:08:
a3:e5:2a:dd:15:bf:d6:3b:eb:ca:a1:37:34:75:e2:ff:9c:e1:
06:3b:e2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org