Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v7K9ahy5gNknleIl-U6neHA-ACM.roa
File: v7K9ahy5gNknleIl-U6neHA-ACM.roa (raw, json)
Hash identifier: QP6oIm3KJBY/lps8xr9oP5oEI4uigyzHtoGW7uLnqsc=
Subject key identifier: BF:B2:BD:6A:1C:B9:80:D9:27:95:E2:25:F9:4E:A7:78:70:3E:00:23
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28B5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v7K9ahy5gNknleIl-U6neHA-ACM.roa
Signing time: Fri 01 Sep 2023 10:05:41 +0000
ROA not before: Fri 01 Sep 2023 10:05:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10421 (0x28b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BFB2BD6A1CB980D92795E225F94EA778703E0023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:81:cc:4e:7d:16:42:54:1d:e7:6b:0a:ea:
a2:f7:c1:aa:fd:55:74:9e:91:c2:49:32:e1:32:07:
70:f9:7c:b6:c5:0e:a2:f5:42:b2:72:66:d7:3d:66:
0a:fa:fa:d1:fb:90:01:a3:12:77:16:b4:27:46:2b:
7c:e2:d3:bf:72:19:a5:f4:a6:06:13:2b:51:3c:bb:
77:d0:94:85:ac:ce:11:4a:4a:24:19:44:36:96:d5:
d0:72:0a:bb:7a:a5:82:65:e7:e2:66:c8:31:00:3e:
13:a1:56:c3:7c:25:d1:b6:c8:5b:b0:5b:a0:a9:3b:
ba:47:98:2e:1b:1f:c5:10:a9:d9:6c:da:98:3e:76:
46:46:34:bb:d8:22:c9:a6:03:46:64:bd:07:82:5b:
9a:22:01:bb:49:76:73:e6:ea:07:17:ac:e0:f5:75:
b2:8b:b5:d1:a7:19:7e:03:f1:ea:2b:4e:e2:cc:af:
ad:73:02:66:58:58:6f:35:63:c9:81:2f:11:08:9b:
2a:31:a8:84:74:16:44:11:27:53:05:9d:07:06:75:
c7:ca:88:c0:a1:c0:72:81:3a:46:bd:84:fa:19:ea:
90:9e:78:a0:ca:27:a0:a3:8f:90:49:cc:95:17:69:
b0:59:be:2d:2a:ce:aa:2c:95:f2:ea:82:99:d2:a2:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B2:BD:6A:1C:B9:80:D9:27:95:E2:25:F9:4E:A7:78:70:3E:00:23
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v7K9ahy5gNknleIl-U6neHA-ACM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.144.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:70:74:94:9a:b7:0a:d3:90:f2:da:53:a1:1d:e6:b4:49:32:
c1:ae:f1:5e:34:a0:4f:49:15:da:09:a4:50:4c:49:b0:39:1c:
f9:45:5a:4a:4b:dd:e1:8b:56:98:6c:1b:f6:b0:41:bd:81:94:
b4:2b:54:5e:fb:f4:e9:d5:e3:32:3b:87:36:78:f6:f1:b3:63:
a4:fb:67:b0:42:48:4e:5f:f9:f6:39:3f:37:30:20:95:59:81:
7d:4b:4e:1b:39:ed:3f:2d:31:aa:11:f3:c1:35:59:f4:c3:80:
69:68:60:20:ec:0f:b3:95:50:62:c9:cc:36:9b:cd:86:17:e7:
b3:45:65:ff:20:0a:19:a6:af:4b:12:cb:de:ca:01:c1:41:f5:
d0:3f:bd:17:dd:15:8b:6f:cf:4a:52:b7:87:37:8a:4c:97:cc:
9b:02:0f:4c:2e:5a:15:1a:f9:13:95:a0:5c:b6:87:ec:01:4a:
9d:a7:0c:ed:a9:d3:be:33:ea:99:23:86:e7:d2:cb:96:ba:d2:
7a:86:ba:2a:c0:85:47:8e:e5:da:36:f4:c0:a1:0a:50:ab:ae:
0f:ee:ad:25:d3:76:93:33:d5:39:d0:c2:70:5a:44:f6:0d:7d:
de:5b:d3:72:d6:1b:87:3c:a2:20:68:fb:57:34:f4:79:5a:d2:
3c:2e:c5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:47 2025 by rpki-client