Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v53U1Ivc50aQ5c1rh5ltEO6d_ac.roa
File: v53U1Ivc50aQ5c1rh5ltEO6d_ac.roa (raw, json)
Hash identifier: Q0nJP54XLljlzHpqufkhNfIt4u4F5dPLuec8uMovN08=
Subject key identifier: BF:9D:D4:D4:8B:DC:E7:46:90:E5:CD:6B:87:99:6D:10:EE:9D:FD:A7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 218B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v53U1Ivc50aQ5c1rh5ltEO6d_ac.roa
Signing time: Fri 25 Nov 2022 04:40:02 +0000
ROA not before: Fri 25 Nov 2022 04:40:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8587 (0x218b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BF9DD4D48BDCE74690E5CD6B87996D10EE9DFDA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:6b:10:b2:cb:db:8a:91:5b:69:00:0d:b3:
c8:96:a5:da:b0:27:b5:14:61:71:a5:2d:bd:99:38:
41:fe:f7:20:3d:56:06:c6:d4:bd:35:b1:49:94:70:
b3:e2:8f:38:4e:70:8a:75:41:9f:41:96:87:9a:0a:
63:d7:ae:a9:6c:fd:fe:83:40:c1:48:dc:82:fb:4c:
f8:99:bb:dd:0e:ad:08:00:89:d6:53:59:67:5c:09:
89:90:8d:68:98:8d:2d:77:87:79:89:85:e0:4f:d2:
f7:30:05:7e:7e:9f:91:78:82:cd:bd:3e:82:c7:94:
94:dd:dd:60:56:a5:58:da:04:c0:75:1f:dc:a5:ac:
f0:48:3e:50:88:e8:2c:27:73:f3:3c:4b:30:d1:86:
22:ce:ff:98:c7:2b:39:1c:86:47:e7:f1:92:9c:4c:
3c:4d:b1:2f:3e:7f:be:d8:bf:b4:ad:12:23:21:d9:
d7:bb:1a:da:f4:79:f7:66:aa:15:3a:3b:b3:4f:3e:
00:f6:11:cc:08:d9:d7:42:61:5b:f9:64:65:89:65:
c7:94:12:d4:f9:55:28:33:00:37:1a:f1:fe:7d:db:
19:b3:ad:d9:21:d4:93:9d:51:ae:3a:bc:43:cc:f1:
9e:55:f0:32:2e:e2:30:2a:7a:3f:fe:38:31:17:28:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9D:D4:D4:8B:DC:E7:46:90:E5:CD:6B:87:99:6D:10:EE:9D:FD:A7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v53U1Ivc50aQ5c1rh5ltEO6d_ac.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.240.0/22
Signature Algorithm: sha256WithRSAEncryption
80:f1:90:55:d3:aa:e3:9a:2c:69:2d:c4:08:4a:ef:30:ca:21:
8a:d5:1d:0f:05:c9:b9:3f:08:84:d6:8e:b1:ac:53:86:a4:dc:
1d:7c:4d:59:ad:d1:af:31:a5:b9:06:08:0b:b8:25:f0:da:61:
13:09:6f:fa:53:36:3c:8f:ab:5b:14:de:ca:8f:31:75:5e:84:
6b:24:95:51:19:c7:8c:e3:eb:da:da:40:d3:0a:47:70:9e:1d:
73:f9:10:bd:49:79:03:45:af:d3:52:7d:99:eb:77:48:6f:3f:
1a:05:99:23:ef:3c:3a:97:08:83:7c:f3:b1:83:30:72:99:74:
d8:3d:0e:e3:fc:68:dc:86:6f:c8:89:3c:68:09:36:ec:66:55:
9e:69:72:12:86:e5:8f:b0:dc:22:56:76:9b:47:f6:43:06:cb:
6f:4f:99:ab:68:db:3a:eb:76:ed:2d:e3:61:c4:fe:a5:b5:ac:
1e:b8:83:21:9d:f7:10:86:c0:91:c5:ae:de:1c:9c:46:9a:0a:
ec:ec:be:98:a7:d0:8e:5e:49:5f:06:c5:9b:5d:5c:6e:7c:21:
b5:0b:c5:7d:c8:ff:0b:81:b5:45:e4:de:4e:2c:2e:a3:81:73:
9e:a2:33:4d:3e:94:16:da:a2:18:8e:b9:28:c3:1c:e7:0e:71:
75:01:b8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org