Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/siHuAQCYNbQ1W9OFT1eygisUrB4.roa
File: siHuAQCYNbQ1W9OFT1eygisUrB4.roa (raw, json)
Hash identifier: 7Aebeylzc6FhdmV+eoOC2+mEe1aWm3lPxAUJ4NKwOgU=
Subject key identifier: B2:21:EE:01:00:98:35:B4:35:5B:D3:85:4F:57:B2:82:2B:14:AC:1E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C04
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/siHuAQCYNbQ1W9OFT1eygisUrB4.roa
Signing time: Wed 29 Sep 2021 02:47:16 +0000
ROA not before: Wed 29 Sep 2021 02:47:16 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.177.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7172 (0x1c04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:16 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B221EE01009835B4355BD3854F57B2822B14AC1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:b8:b0:00:ff:20:3d:27:73:cf:3d:0e:3c:
5a:a5:c1:70:3a:90:d6:fa:c1:f6:36:44:5c:de:1a:
af:37:a7:a7:6d:46:86:84:c3:1d:ec:a1:d4:12:98:
55:6a:02:e5:99:95:bb:0b:1a:e3:58:b7:63:6e:bf:
5d:96:1a:cc:05:52:42:df:c0:79:65:6e:2c:32:f3:
02:25:15:2d:46:f1:ef:d8:b8:73:f2:9e:08:63:a1:
7a:cc:de:89:1b:ab:59:bb:1b:f9:3a:92:2d:a1:b7:
cf:65:05:6f:9b:ef:c6:16:bc:7f:ef:d8:c6:d5:0d:
51:c3:3d:aa:ff:33:3a:ae:80:36:9f:eb:ec:f9:d3:
12:26:5e:e5:e4:da:21:68:07:ee:d0:f4:66:9a:11:
f8:0c:22:af:af:f6:94:b7:a9:52:e1:3f:98:23:69:
89:55:47:f9:9e:b8:56:c5:f4:5b:87:e9:8a:04:fe:
f4:8c:86:38:13:4d:15:0b:87:7b:68:96:ef:d7:1d:
a8:69:47:10:41:91:e7:3e:1f:1b:48:39:a4:ae:87:
fc:1e:1c:97:3f:1e:e6:8a:90:d5:77:34:ec:28:40:
c5:2a:9a:64:2f:9a:8e:fc:2b:4d:a5:f0:14:b0:11:
b1:7e:e2:71:e4:aa:6e:0e:d4:2c:b7:cc:0c:60:19:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:EE:01:00:98:35:B4:35:5B:D3:85:4F:57:B2:82:2B:14:AC:1E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/siHuAQCYNbQ1W9OFT1eygisUrB4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.72.0/21
Signature Algorithm: sha256WithRSAEncryption
11:81:66:a0:b1:84:f7:0c:15:c1:52:f0:a2:af:9a:9c:13:7d:
c4:ec:03:70:55:6c:9e:7d:9c:9f:99:46:40:ba:2c:96:65:8a:
40:e1:aa:ae:07:52:b7:3b:5c:e8:50:9a:41:5c:4b:ad:94:1a:
07:29:46:0b:b5:b8:d8:8f:7d:92:e4:72:12:7d:8d:73:59:f4:
bc:b2:8e:a0:56:61:65:27:76:7d:21:07:1e:ba:71:bc:38:3a:
7a:65:08:50:7e:68:03:e6:a5:d6:45:e1:bc:4e:b9:4d:5a:d0:
05:66:95:d3:41:7d:fa:a0:96:ae:52:97:f6:38:13:a3:f6:71:
4c:64:1a:d1:5b:b8:25:4c:00:e3:d7:f5:5c:ba:21:4d:32:ec:
f1:21:77:70:a1:b5:8b:cd:a7:54:0f:1a:de:5f:73:33:5e:e2:
19:02:b6:d9:d4:fd:94:f1:d3:77:25:2c:dd:3e:67:0d:e5:8d:
45:f1:bf:91:0f:d5:fd:b8:5d:48:38:42:05:cb:4e:2a:e2:56:
a3:b3:d3:c7:3e:91:48:eb:90:48:c1:38:f6:61:a3:b1:58:50:
b7:50:e3:df:83:62:ff:2e:ab:74:bc:bd:65:df:b6:0e:12:22:
d6:08:7c:2e:a8:5f:5b:4e:b0:5a:35:f6:8a:85:5e:3f:0e:96:
36:86:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org