Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tpvVv8yiRivLNHGscT8fXKcRu2o.roa
File: tpvVv8yiRivLNHGscT8fXKcRu2o.roa (raw, json)
Hash identifier: 6NeGB5bIVzvaC+4UchKothPqTeutx5E1YkBnpF09/Z8=
Subject key identifier: B6:9B:D5:BF:CC:A2:46:2B:CB:34:71:AC:71:3F:1F:5C:A7:11:BB:6A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tpvVv8yiRivLNHGscT8fXKcRu2o.roa
Signing time: Thu 15 Sep 2022 02:52:49 +0000
ROA not before: Thu 15 Sep 2022 02:52:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B69BD5BFCCA2462BCB3471AC713F1F5CA711BB6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:f3:e3:f7:81:36:4f:62:b6:d0:d9:dd:ea:
56:4a:8c:8a:57:a6:a3:93:e7:f6:3a:ab:41:b7:58:
3d:a6:63:72:56:b5:4e:3e:57:a4:6a:b8:34:cb:c0:
10:e2:79:a8:62:75:4c:3c:75:18:f5:6f:12:9d:fd:
09:dd:26:ca:4d:5d:ab:4c:2f:01:5a:75:1f:2e:1a:
6a:56:8c:d9:c7:ba:a0:4f:48:d9:03:cd:29:e0:bc:
70:fd:86:d8:ce:b2:e0:11:9f:14:d6:ee:70:45:e7:
7e:81:db:38:f9:89:cf:40:e0:02:bf:91:0f:23:97:
41:26:fd:49:e2:19:26:1b:cc:a1:be:13:e1:84:e2:
72:5d:fc:82:71:b7:3b:a5:30:ff:fd:53:62:58:f1:
b6:13:7e:f7:1c:e3:d9:fd:48:4c:b3:98:3b:24:cf:
ed:7c:85:fe:18:ab:28:66:57:65:47:ea:0f:09:88:
e4:f4:a4:fc:c3:b4:20:a0:91:6e:77:2f:bb:15:c1:
c9:0c:dc:3c:b8:cc:8b:5c:4d:97:55:0d:6b:23:b5:
ee:cb:aa:b6:93:a8:2a:dc:b1:35:74:49:64:73:c3:
50:1e:77:f0:73:2a:4c:e8:34:1a:bf:04:1b:8f:e2:
84:04:b0:62:2e:99:4d:45:e3:02:6e:8b:71:af:2a:
94:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9B:D5:BF:CC:A2:46:2B:CB:34:71:AC:71:3F:1F:5C:A7:11:BB:6A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tpvVv8yiRivLNHGscT8fXKcRu2o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.24.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:3a:62:17:e0:64:18:73:fc:98:51:72:e2:3a:28:ee:af:00:
00:47:9e:06:cc:0f:14:dc:5d:ba:1c:be:ed:b8:c1:b2:09:dd:
4e:5c:81:2a:c3:9f:de:0c:39:ac:45:09:88:5a:35:f1:48:43:
52:45:13:8c:05:dc:e8:a0:71:a3:f3:33:8a:d1:41:72:d4:5d:
45:e9:64:67:67:66:dc:f8:ab:72:5f:37:c0:71:3d:68:f7:f7:
ff:d2:05:1d:b8:55:97:ef:0d:80:b1:f2:0a:a6:30:61:3e:32:
e6:c0:42:29:59:19:56:97:7f:3d:91:e9:5f:ed:28:e9:4d:4b:
2b:63:92:53:4a:dc:66:19:46:d6:c6:13:c2:7c:1d:38:ff:4f:
b0:16:85:50:82:95:59:b6:b9:b2:f7:93:b5:aa:84:7e:53:8d:
35:94:28:50:bd:55:d9:76:02:5a:89:d1:89:d4:2c:c7:4b:d3:
63:a5:79:1c:87:d3:be:82:de:c9:30:7b:da:9e:0b:10:99:be:
ea:a9:b3:4e:36:bf:bb:ce:cd:59:ad:5f:dd:b2:96:70:ab:23:
62:42:f6:f1:d7:df:a1:2a:4c:db:e0:64:66:df:0e:6f:0d:46:
2c:48:88:ca:a4:1c:96:94:ca:c6:7b:02:ed:02:68:4c:01:d4:
9e:04:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org