Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tfXeWjUZsSzq7Q5J_x2okP40R34.roa
File: tfXeWjUZsSzq7Q5J_x2okP40R34.roa (raw, json)
Hash identifier: YoqfeMmVV+MecE2BOAbyHAzte8nUZz7C49GAgHVr2yY=
Subject key identifier: B5:F5:DE:5A:35:19:B1:2C:EA:ED:0E:49:FF:1D:A8:90:FE:34:47:7E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D3C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tfXeWjUZsSzq7Q5J_x2okP40R34.roa
Signing time: Tue 29 Sep 2020 09:54:21 +0000
ROA not before: Tue 29 Sep 2020 09:54:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3388 (0xd3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:21 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B5F5DE5A3519B12CEAED0E49FF1DA890FE34477E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:83:f2:67:66:e9:9b:70:b8:78:4b:d6:4b:
25:ab:7f:f0:6f:93:b7:c9:8f:46:d9:aa:f9:2e:c3:
67:5a:86:1e:06:0b:b3:44:9d:ab:e6:39:18:24:51:
71:d5:ed:a3:89:6c:94:87:27:5c:4b:4a:95:00:08:
b1:4e:81:db:c5:ab:b1:c1:97:e9:e2:4a:20:07:98:
27:88:2f:66:96:12:67:02:28:a3:a4:a0:44:23:4a:
ce:4d:c0:18:0b:fd:53:ef:c1:17:2a:aa:c3:b5:ed:
00:7a:7a:53:d5:54:14:3a:60:da:fa:57:ee:ae:d3:
ee:29:aa:69:cb:b2:a4:e1:af:82:06:77:7d:84:96:
18:7a:1d:10:16:0d:b2:93:a4:7c:af:da:2a:d2:b2:
d6:c0:69:8f:57:f0:5b:b8:8c:f7:5b:c8:43:b5:80:
a0:d2:0a:89:51:23:63:76:47:71:48:d0:84:3d:99:
40:f5:60:a6:c7:e5:bd:c4:7c:f4:e3:70:68:d2:f7:
55:e8:a2:7b:41:aa:b4:82:fc:e4:1a:34:cf:7e:1f:
0b:dd:56:52:7a:f1:96:23:41:53:37:8d:f1:c0:d0:
10:77:28:cc:00:65:62:e1:c4:af:19:0f:b0:11:ac:
e3:34:f6:a6:17:cc:04:cb:a2:47:f5:e7:8f:df:72:
09:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F5:DE:5A:35:19:B1:2C:EA:ED:0E:49:FF:1D:A8:90:FE:34:47:7E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tfXeWjUZsSzq7Q5J_x2okP40R34.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.24.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:42:b8:31:8c:25:7f:d4:ae:57:ed:97:2b:24:87:01:3a:b9:
42:a6:63:58:7b:8e:ec:a1:c1:b6:81:b2:44:47:4a:e0:88:3c:
60:88:0f:a9:b1:9f:d5:3e:b6:a5:a1:a1:d3:8d:e8:aa:04:4c:
71:ed:89:34:a1:be:83:a9:25:ef:89:ca:91:72:cc:30:fa:01:
e0:76:25:8b:0f:43:da:9f:9d:2a:1c:d3:28:11:7b:c0:09:9c:
70:2d:41:5a:cc:b0:c6:11:3f:c8:22:cc:4e:87:e0:00:02:dc:
a9:4d:00:d7:d7:fb:53:0d:06:38:a2:5d:55:7b:55:25:3a:95:
49:c1:cb:b8:ce:e5:23:74:21:a4:b2:49:02:9f:04:69:fd:f0:
4f:e7:d8:f7:47:66:34:e0:7d:0c:ac:77:75:49:57:35:e7:5c:
a8:0f:66:a3:57:02:4b:f8:99:8b:c4:7f:13:87:99:5e:40:80:
f6:23:1e:f0:f1:70:31:f5:53:03:ce:2b:d7:97:62:d3:25:dd:
aa:a4:cf:70:9d:ac:94:2d:05:56:d4:bc:44:e9:38:b5:f6:e7:
ee:d3:a5:b6:29:16:e7:b2:dd:f9:f6:a4:a3:a3:ea:74:5a:71:
4a:42:95:ee:6a:34:00:95:be:af:6b:c8:90:0e:0c:83:4d:da:
7c:dc:b2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org