Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tN7yWtZDY7XxoJNesK0B6nXwOyc.roa
File: tN7yWtZDY7XxoJNesK0B6nXwOyc.roa (raw, json)
Hash identifier: uMiZWbtz9hx4/+i1SPxHtMIiai+BMGqT93FMAd9fe2k=
Subject key identifier: B4:DE:F2:5A:D6:43:63:B5:F1:A0:93:5E:B0:AD:01:EA:75:F0:3B:27
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B93
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tN7yWtZDY7XxoJNesK0B6nXwOyc.roa
Signing time: Wed 29 Sep 2021 02:46:45 +0000
ROA not before: Wed 29 Sep 2021 02:46:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.176.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7059 (0x1b93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B4DEF25AD64363B5F1A0935EB0AD01EA75F03B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2d:a9:25:ae:39:dc:85:40:be:f1:eb:55:4b:
ab:cb:9f:c6:d3:fa:60:33:4c:d9:9d:b4:dd:65:62:
0e:f1:9e:c9:c9:c8:ed:0c:bd:37:ea:28:09:32:e5:
48:56:5c:73:f7:69:60:ab:ea:70:66:44:23:68:87:
f0:dd:f1:2b:4d:f2:e3:23:d7:cd:e4:e8:e0:62:00:
18:93:ef:90:43:7f:01:45:1a:fa:d8:2e:bb:ce:ae:
b9:31:ce:c2:42:01:73:7b:c8:8e:67:61:78:bb:46:
98:30:a0:2a:f6:24:ad:95:d6:09:ea:fc:e5:a5:ce:
6d:b6:58:40:bc:9e:1f:e0:44:d5:d7:4c:88:f5:db:
47:fb:87:d0:23:83:6d:2f:a0:39:74:52:87:d9:2d:
c1:3d:7f:d8:3a:2e:7c:85:9c:e9:b5:52:21:4e:d5:
a1:44:02:21:e9:60:85:be:d4:b2:3f:dc:f5:1e:54:
a3:a9:cc:cf:31:e5:97:30:35:de:be:b6:80:49:a4:
f9:75:85:a4:bb:7c:4f:7e:3c:25:ac:7b:43:36:58:
ae:bd:1c:c6:52:9a:dc:ec:c7:de:5e:b4:0d:f8:ee:
16:45:9d:93:b0:cb:cf:57:cc:24:2d:41:99:ad:0f:
8b:16:cb:f9:db:af:35:34:86:77:23:a9:ee:fa:30:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DE:F2:5A:D6:43:63:B5:F1:A0:93:5E:B0:AD:01:EA:75:F0:3B:27
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tN7yWtZDY7XxoJNesK0B6nXwOyc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.140.0/22
Signature Algorithm: sha256WithRSAEncryption
64:b3:20:9c:ab:5c:4a:32:47:9b:fe:1b:ca:11:3e:34:54:89:
25:9d:d8:05:29:b6:8e:68:94:2c:8d:91:49:fa:ab:50:e6:dc:
62:d4:50:0a:5b:db:24:11:96:77:e5:79:1d:81:81:20:42:b9:
84:a2:b4:3c:e7:9f:df:a1:2a:01:86:e3:a0:a9:28:66:84:ed:
06:ab:6f:c3:5c:b6:dd:0b:e6:e3:c9:d3:a8:83:b2:b0:1f:fb:
a4:be:0c:e5:aa:b4:a8:ff:2f:00:8b:8b:18:2d:6e:2c:07:63:
72:08:37:1f:6c:46:8c:d5:84:48:37:2f:ee:07:80:2d:fd:d2:
8b:25:36:d9:c5:31:74:2e:10:c6:e5:e2:97:54:7b:22:32:d3:
e2:7b:b1:eb:03:c7:f1:87:77:30:e2:d9:96:08:9a:49:1d:6e:
85:12:9b:e7:2c:1f:21:ab:05:30:73:4a:59:85:6f:21:a5:76:
f0:e0:1f:2d:40:36:df:47:8d:89:3b:55:ec:ee:c8:3a:0d:f2:
ad:cb:fd:0d:67:82:35:cb:6b:14:6d:d9:27:c4:5f:14:74:8d:
76:06:33:11:e4:de:8b:e0:1c:79:02:d9:60:7d:d1:93:d4:93:
7f:e9:15:ad:71:21:67:65:d6:3c:f8:cb:18:b7:f8:71:54:de:
1a:b9:04:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org