Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uFnWgZ-Q_na8W4OsoBfPZcBytSc.roa
File: uFnWgZ-Q_na8W4OsoBfPZcBytSc.roa (raw, json)
Hash identifier: ZAbwPCwynjqovaQgQThHOXJbpjWRVFd+Zih0bwomoQ0=
Subject key identifier: B8:59:D6:81:9F:90:FE:76:BC:5B:83:AC:A0:17:CF:65:C0:72:B5:27
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uFnWgZ-Q_na8W4OsoBfPZcBytSc.roa
Signing time: Thu 15 Sep 2022 02:46:16 +0000
ROA not before: Thu 15 Sep 2022 02:46:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.230.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B859D6819F90FE76BC5B83ACA017CF65C072B527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:fa:e5:a9:16:79:8b:18:93:86:ec:14:4d:
13:62:c6:36:e1:a4:9f:a4:f5:e1:4f:bd:ef:9f:61:
18:18:50:8a:c4:01:46:72:f6:06:26:0d:d4:63:c5:
d9:bc:3d:1f:07:9b:3c:e6:c1:f8:e1:a0:96:c3:90:
6b:35:08:70:1d:62:47:84:5a:e4:bf:bd:a9:63:1b:
64:9c:84:e8:06:0c:c6:44:86:b9:c0:94:ea:d5:4f:
bf:98:50:4e:0b:ad:a4:e8:55:4d:75:71:d8:6c:cb:
90:27:89:3c:21:1b:ab:07:cf:9f:e5:d5:15:6b:9b:
7d:e3:7e:8b:06:bc:f2:97:17:28:ff:13:2b:07:f6:
20:5e:98:5f:07:b2:e0:58:b6:02:62:b4:84:68:35:
16:d7:15:a6:b2:98:11:46:19:95:9f:59:31:37:0e:
2a:4b:24:51:65:64:97:e6:e4:9a:f1:03:41:d6:43:
07:4e:a4:b1:11:31:c5:a6:c5:df:b7:bc:69:55:43:
16:71:26:a5:61:6e:ee:b4:76:8f:38:06:fa:8c:2c:
85:ea:63:1e:3e:96:31:70:ff:a4:44:7f:8f:91:1c:
08:0d:dc:af:e5:dd:77:4e:ef:60:d8:6d:22:67:f8:
cf:9f:94:6f:84:c0:a1:84:a7:0e:f6:ef:d7:13:a6:
a0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:59:D6:81:9F:90:FE:76:BC:5B:83:AC:A0:17:CF:65:C0:72:B5:27
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uFnWgZ-Q_na8W4OsoBfPZcBytSc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.230.0/23
Signature Algorithm: sha256WithRSAEncryption
93:9f:ba:a2:ea:88:b7:19:1b:1d:7a:82:8e:0a:a6:ed:71:66:
a7:c0:41:be:a5:1b:8a:89:d3:fd:14:49:b4:e6:6a:fd:8f:76:
51:04:e4:10:17:a6:6c:06:33:51:02:f8:e8:d1:f6:fb:1f:47:
51:ba:28:ad:b9:c6:04:61:39:72:35:ff:a3:0b:6a:4a:03:3e:
2b:a2:0a:c8:e4:3f:30:5a:81:0b:6c:3a:81:93:dd:fe:4e:6f:
11:70:62:88:45:1c:58:5e:f8:1a:4a:44:81:76:1f:5d:27:90:
b6:57:9d:b6:9d:4d:c4:bb:2a:0c:cb:2f:07:8e:7f:60:c7:a7:
c6:53:ca:03:74:59:ba:c5:20:b7:45:14:cb:59:2c:2e:61:83:
16:df:bc:a7:5d:47:d7:7f:9b:96:95:b8:60:f3:74:f2:37:a2:
6d:10:75:c1:60:d6:e3:e3:38:05:7e:92:39:da:be:f2:55:ae:
dc:70:33:ee:b8:3c:ca:80:a8:33:41:10:74:1f:0c:6a:ef:e2:
fd:51:4c:45:a8:ae:cf:b4:4f:ad:f0:32:4e:d8:1d:f1:6f:ba:
9a:44:86:7e:dc:b0:ce:48:fc:b4:6c:37:08:57:ea:0e:52:29:
c2:05:da:fa:55:7f:8d:03:7f:c9:6d:dc:c1:83:68:d3:2f:c2:
a4:c0:6d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org