Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uQjrSrYlZFnL94A_j9C5d9TjJKU.roa
File: uQjrSrYlZFnL94A_j9C5d9TjJKU.roa (raw, json)
Hash identifier: ZXP5HUkgLFnegpzdUFSD0mb5RLQ3bbC3rLvRmMIbgG8=
Subject key identifier: B9:08:EB:4A:B6:25:64:59:CB:F7:80:3F:8F:D0:B9:77:D4:E3:24:A5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E38
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uQjrSrYlZFnL94A_j9C5d9TjJKU.roa
Signing time: Tue 29 Sep 2020 09:55:29 +0000
ROA not before: Tue 29 Sep 2020 09:55:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3640 (0xe38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:29 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B908EB4AB6256459CBF7803F8FD0B977D4E324A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:d0:d0:6d:0d:6d:87:fb:08:14:d7:1a:d1:
71:ad:4b:37:e2:08:ae:3a:4e:3e:4c:5c:22:15:22:
94:ff:90:a5:e2:98:5e:55:40:c5:bd:0c:4c:2e:42:
8b:c6:b6:e1:bd:56:0a:f2:51:54:a7:4e:c9:d4:bb:
42:68:12:13:0f:6a:81:e4:fa:e7:7b:8f:4b:1a:2c:
07:fd:a4:5b:a6:d2:f0:d9:62:23:ed:2d:5c:16:33:
c1:a2:95:73:00:35:50:c0:cc:68:a3:96:07:4f:1c:
73:b6:cd:0f:76:1b:4d:c2:a7:36:26:8e:f8:86:e6:
7b:05:8f:5f:bb:cb:f3:42:12:fc:cb:5a:ca:2c:8f:
48:93:00:cc:74:41:a2:e6:39:5b:db:ce:30:15:b5:
f4:71:4e:32:80:56:5a:11:ad:dd:1e:50:2a:9b:69:
16:f4:01:ce:86:27:0e:c5:f5:be:04:ac:9f:06:77:
f9:3c:ef:80:2f:e6:ae:9a:1d:a1:02:82:e2:d2:4f:
9c:55:b8:77:f6:62:ec:41:6f:2c:07:1d:88:05:2e:
b4:ab:4e:89:85:b2:8c:e4:34:81:22:56:a9:30:72:
2e:28:9d:9a:e1:1e:d8:d5:d0:e3:09:a1:e9:d2:d3:
b1:b1:e1:b5:4a:c1:56:28:96:6c:3c:eb:f7:45:23:
3b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:08:EB:4A:B6:25:64:59:CB:F7:80:3F:8F:D0:B9:77:D4:E3:24:A5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uQjrSrYlZFnL94A_j9C5d9TjJKU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.12.0/22
Signature Algorithm: sha256WithRSAEncryption
38:67:41:28:83:ec:1a:64:76:20:ff:89:5c:a3:a9:fa:66:d1:
91:20:8d:21:01:4c:ed:6b:f8:1a:ec:0b:bd:9e:bc:89:06:60:
19:f8:7c:6a:ca:21:20:69:89:88:3b:98:96:0f:f7:c5:76:43:
10:32:9b:59:bc:a3:03:ed:1b:17:81:2b:04:a0:ff:b0:20:ff:
75:96:dc:df:0f:13:86:1e:91:1e:12:14:6d:04:63:70:c0:74:
5c:a6:1f:15:ec:c4:3b:c1:6e:2b:45:7e:2b:da:7e:6d:96:86:
e9:23:8f:8f:64:a3:2a:b5:23:2d:e0:f9:07:86:65:84:1d:10:
8a:40:54:de:d0:2a:c5:08:03:18:1d:d8:93:72:de:13:6c:bb:
9a:7b:83:3f:eb:64:7d:eb:03:95:d3:fc:27:12:49:a4:c9:c1:
69:80:ca:4e:13:e7:7d:52:d9:ee:20:97:6b:b7:96:88:5b:fa:
2c:3c:01:e4:08:e7:85:84:e6:93:3b:0d:87:31:48:76:60:6e:
bc:39:19:7d:bd:0e:1f:26:56:07:43:ba:eb:52:b9:a6:77:18:
74:b3:96:58:33:fe:e0:35:12:ac:5f:dc:19:a6:6e:b8:aa:44:
d1:e9:51:4b:4f:ec:87:e1:67:a1:a0:1b:6e:fb:4b:97:73:63:
e1:21:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org