Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u535sYivBIka0XjRCybmXmIdy2Y.roa
File: u535sYivBIka0XjRCybmXmIdy2Y.roa (raw, json)
Hash identifier: FcKUbAHtumlk8AeSIx/eNIc22r6GIdwc7E70w9CZVZo=
Subject key identifier: BB:9D:F9:B1:88:AF:04:89:1A:D1:78:D1:0B:26:E6:5E:62:1D:CB:66
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21AE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u535sYivBIka0XjRCybmXmIdy2Y.roa
Signing time: Fri 25 Nov 2022 04:40:11 +0000
ROA not before: Fri 25 Nov 2022 04:40:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8622 (0x21ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BB9DF9B188AF04891AD178D10B26E65E621DCB66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:8d:29:dc:fa:5b:60:3e:66:4a:13:14:94:
f8:8e:65:e0:0e:82:c6:d4:d7:71:12:59:56:9a:b1:
7d:29:a1:7a:a4:ab:cb:ac:90:4c:d7:5b:92:01:ce:
55:92:81:0e:bf:9b:89:ad:cb:23:2e:96:81:06:65:
3a:d2:96:cf:c6:f6:6c:3e:01:4d:c7:1a:70:c1:89:
2a:3e:51:04:d7:d2:1e:0f:bd:39:00:9a:8d:78:78:
ae:18:2d:af:f4:90:f1:0a:13:0d:90:7b:2e:08:ec:
ec:b2:dd:31:26:71:17:9a:c9:fb:d3:fe:80:33:1f:
85:01:e7:83:ce:6a:bb:27:55:5b:17:f2:87:af:a1:
55:41:a2:ca:ca:d4:1a:00:45:d0:fb:38:81:75:d4:
bb:19:2c:2a:ed:f1:49:70:ec:a6:00:76:17:d8:5b:
42:d5:f1:fb:6f:2d:e2:a3:4b:7b:7c:1d:71:0f:20:
41:2c:ae:2d:f6:74:48:de:58:2b:52:98:12:32:c5:
a2:00:3d:06:08:8c:e1:0e:96:c1:6b:55:fb:53:f7:
0b:00:da:b4:2a:48:54:88:6c:b6:d6:bd:fa:fd:28:
a0:bd:d1:a6:06:a3:ce:3d:d7:76:87:f1:bf:a6:be:
f0:e6:ab:d1:8b:4f:bd:fd:28:9c:ec:f6:9f:15:e9:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9D:F9:B1:88:AF:04:89:1A:D1:78:D1:0B:26:E6:5E:62:1D:CB:66
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u535sYivBIka0XjRCybmXmIdy2Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:fe:e1:6d:3d:3d:fc:dc:2b:b4:e5:e5:f2:c1:9a:e9:11:43:
d5:4c:ba:5b:46:15:2f:d5:90:8f:72:48:a7:e1:f7:e4:87:5e:
77:11:90:bc:75:a4:2e:0c:87:2a:cd:2b:33:c9:67:75:81:a5:
12:1d:cf:30:a0:47:3c:18:a8:d9:58:df:10:33:55:80:6f:d7:
11:ac:86:a0:5d:76:d4:48:3d:82:eb:54:27:77:8d:0f:2c:db:
d5:b5:ad:ba:b8:6d:63:ad:a1:e2:f9:11:79:63:24:f2:15:8d:
0e:1b:df:c3:47:7a:9c:d4:ed:b2:0d:bb:5b:08:99:c7:d0:c1:
49:7b:ea:d8:62:68:4d:b3:3b:5d:d2:fb:e0:65:0d:26:34:6a:
0c:0e:62:34:a0:ae:ca:4a:bc:7c:79:46:64:ba:d9:b8:d1:c3:
5a:ce:cc:70:34:56:01:de:ec:ad:e1:88:00:b8:16:57:b7:36:
eb:1c:81:06:1e:9b:44:6b:a3:26:13:e8:16:20:46:a8:23:43:
7c:ea:91:ef:d9:f9:19:a1:3f:48:2f:44:2e:2b:a2:d8:0c:3a:
64:69:9f:73:b1:c6:8f:6e:ca:a6:b4:66:ed:29:c2:5d:9a:1d:
2b:6f:9a:42:ad:15:b8:ae:2d:8b:fe:70:d8:82:3e:ea:df:2a:
48:df:6e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org