Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vXAK-L9obetNO5-qFbAm_BPTnYQ.roa
File: vXAK-L9obetNO5-qFbAm_BPTnYQ.roa (raw, json)
Hash identifier: +K7iKUsdnl+3f8SG9OhOi8UaCi89a3SKjs8x+uMgols=
Subject key identifier: BD:70:0A:F8:BF:68:6D:EB:4D:3B:9F:AA:15:B0:26:FC:13:D3:9D:84
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E06
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vXAK-L9obetNO5-qFbAm_BPTnYQ.roa
Signing time: Tue 29 Sep 2020 09:55:15 +0000
ROA not before: Tue 29 Sep 2020 09:55:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3590 (0xe06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:15 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BD700AF8BF686DEB4D3B9FAA15B026FC13D39D84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:6e:f3:ab:5f:00:4d:bc:03:f0:f5:81:aa:
03:a8:3f:97:9e:81:5b:e4:7e:07:d5:20:31:52:9d:
a8:b7:e8:96:ca:99:95:43:46:cd:19:ff:a3:4c:93:
8e:a0:42:b7:14:1a:ce:23:b7:c3:30:b7:48:bd:4e:
55:a0:41:c4:53:d3:8f:8c:f1:6c:e9:e5:b5:f6:28:
db:c3:c8:8b:ef:f5:ae:50:1d:22:58:91:eb:e4:02:
9f:9d:e2:9d:bc:6a:b8:fa:79:c3:a0:b0:a0:fd:8a:
85:4d:b0:1a:80:bc:c8:8e:3a:bf:b8:b9:de:76:25:
35:63:e1:24:79:aa:12:fb:92:c6:48:7f:b8:96:ed:
27:89:91:ba:37:57:21:bc:8b:f3:1d:80:a2:d0:fa:
ff:09:c0:8b:55:d4:3f:cd:37:3e:1f:77:d9:db:fa:
3b:2c:df:d6:5b:83:ac:79:c9:b3:9f:1a:eb:98:4a:
cc:01:af:78:b3:e7:b5:90:ea:4c:1f:86:24:b9:73:
10:7c:fc:b7:50:2c:f8:45:56:6c:85:6a:b0:69:cd:
5d:87:97:f4:fc:c6:87:43:00:50:0d:b6:de:d5:0f:
b7:f7:94:73:45:a0:d6:ed:4a:d0:ff:6b:08:52:61:
b4:d1:e4:c4:40:c1:7b:5f:a2:3e:6d:a0:b1:78:bd:
fb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:70:0A:F8:BF:68:6D:EB:4D:3B:9F:AA:15:B0:26:FC:13:D3:9D:84
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vXAK-L9obetNO5-qFbAm_BPTnYQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.184.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:af:f4:39:ec:92:e1:72:0b:76:c4:c1:69:c8:cd:53:2d:be:
4a:37:df:bb:02:71:bc:15:34:a4:03:e0:e6:43:03:38:3c:4d:
87:80:0d:86:ae:d7:64:e3:db:d4:9f:6e:50:2a:0c:49:80:96:
17:b4:18:6d:37:fc:40:86:7a:04:ea:d9:55:de:38:83:1f:8d:
a4:17:cf:8d:f0:bf:40:26:94:15:22:5d:9e:33:19:23:bb:45:
71:91:96:a4:44:51:19:c6:b3:03:f5:25:b0:a0:4d:8c:71:82:
ea:3c:ff:1a:ff:60:1c:f1:28:de:6d:2b:77:31:ec:af:62:29:
ec:6d:c4:ce:41:a2:0f:68:c3:84:99:9b:ac:68:b2:18:17:28:
9a:2f:55:fd:30:66:75:2c:e7:e5:db:b0:38:dc:9c:7a:5c:79:
0d:59:bb:26:9e:ee:30:04:13:fa:6f:1e:9f:3a:d8:73:a0:58:
02:a2:16:81:5f:76:0c:db:93:30:11:1e:56:64:57:27:c6:26:
84:6c:d4:4b:ed:cd:14:b6:79:5e:3a:9f:32:88:93:a8:3d:cf:
b8:66:61:de:fa:db:ac:26:ac:c7:d8:49:38:48:1c:86:3c:c2:
a5:78:70:5a:e9:cb:0f:4e:47:81:18:0a:40:ef:e5:e7:b0:cf:
c6:42:46:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org