Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/utV8Y6ChOXIQuhjCaR8k-NR9jqM.roa
File: utV8Y6ChOXIQuhjCaR8k-NR9jqM.roa (raw, json)
Hash identifier: tsFEaAHBkmzXxhcovzYzj+moym1R0jxpSVpDrKWXlis=
Subject key identifier: BA:D5:7C:63:A0:A1:39:72:10:BA:18:C2:69:1F:24:F8:D4:7D:8E:A3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/utV8Y6ChOXIQuhjCaR8k-NR9jqM.roa
Signing time: Thu 15 Sep 2022 02:45:05 +0000
ROA not before: Thu 15 Sep 2022 02:45:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BAD57C63A0A1397210BA18C2691F24F8D47D8EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:c5:a2:3f:1b:1b:b4:67:1e:5a:74:16:0e:
ba:2b:00:27:49:a4:9e:b3:1c:be:2e:0f:ef:48:05:
48:ea:b2:6b:3e:4f:fb:ec:0b:52:33:ce:f0:1e:5c:
81:6c:b7:0f:e1:db:45:b0:db:dd:1d:8f:47:fa:63:
21:5d:6e:df:f8:1f:8b:31:8f:22:aa:e1:14:ee:be:
90:ad:da:f4:f6:10:67:ff:5c:ea:32:f4:e1:b9:67:
1c:64:b3:1d:7e:bc:fb:dc:5c:4c:25:bb:b0:c0:4f:
9b:9a:dd:85:32:5d:96:1c:c0:41:32:df:c9:96:e3:
9e:e8:37:19:fc:53:b6:e1:2a:fd:13:4f:46:43:f8:
dc:71:e6:a7:e3:f9:6c:22:a7:29:ad:2b:2e:7d:33:
67:1e:12:25:b2:5a:23:52:a7:31:fa:fa:0f:cc:f7:
53:49:cf:73:55:f0:ad:1b:e2:ad:3e:48:6c:e5:22:
43:42:b2:66:65:98:9e:90:5e:de:22:55:62:97:62:
5a:4c:3d:7d:f6:f3:3e:6b:dc:1d:40:a2:4d:d7:57:
99:1e:60:2e:bd:5d:24:e1:41:01:ee:30:0e:5f:04:
43:51:74:7b:d5:bf:f6:6d:e2:c7:b3:e7:c7:5b:2b:
ef:5c:70:be:ea:c1:5b:2b:e4:a2:3d:58:60:04:5c:
20:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D5:7C:63:A0:A1:39:72:10:BA:18:C2:69:1F:24:F8:D4:7D:8E:A3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/utV8Y6ChOXIQuhjCaR8k-NR9jqM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.168.0/22
Signature Algorithm: sha256WithRSAEncryption
25:1a:cd:6c:02:86:55:c3:b2:a3:aa:17:4e:a8:f1:e7:9c:5f:
cb:4d:b7:56:6f:01:da:06:81:f2:c1:aa:79:74:13:bd:cf:a3:
ff:6d:69:de:7e:b7:85:6c:f5:f4:22:51:48:48:a2:27:8a:94:
0d:45:6f:29:9e:69:5c:d2:5a:e5:3f:31:8a:8e:75:25:61:62:
f7:e6:0c:e9:ba:71:d6:74:c5:cf:f2:d0:e2:b7:67:64:df:17:
53:ae:83:af:6f:08:cd:9b:14:de:e7:e5:e0:db:48:37:80:15:
62:fe:7b:b0:fb:0c:a1:0f:f9:12:ae:ce:29:b3:4a:af:d1:76:
d7:b3:49:31:5a:4f:ba:75:7c:b1:3e:97:7f:1e:28:e4:12:73:
d2:29:e6:2a:30:32:1c:75:45:e9:bc:4f:41:05:4c:be:f6:0d:
b1:c9:f0:1e:91:4f:53:5c:3c:87:51:74:42:37:11:58:b2:bb:
af:0a:0f:6b:b8:75:9e:34:66:5a:72:4f:8d:5b:be:f8:67:90:
6b:d5:b8:df:27:60:dc:5b:ce:03:b6:f8:a8:a7:7f:cf:d3:ad:
9f:28:1c:0d:19:79:39:c0:b6:89:45:f3:75:a0:96:6e:50:ac:
5c:cf:e6:0a:6f:91:45:5a:24:a6:17:46:5b:7f:7e:69:d7:0d:
39:16:7a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org