Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vk26uppd8z-UnvB4G75edSv5ttM.roa
File: vk26uppd8z-UnvB4G75edSv5ttM.roa (raw, json)
Hash identifier: +46LDApaBQDP4bssLmkGuOADlaxwP1pdRx34uPiX59c=
Subject key identifier: BE:4D:BA:BA:9A:5D:F3:3F:94:9E:F0:78:1B:BE:5E:75:2B:F9:B6:D3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vk26uppd8z-UnvB4G75edSv5ttM.roa
Signing time: Thu 15 Sep 2022 02:52:56 +0000
ROA not before: Thu 15 Sep 2022 02:52:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 180.176.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BE4DBABA9A5DF33F949EF0781BBE5E752BF9B6D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:29:ff:69:07:64:a3:65:e8:c5:b1:6d:e8:
89:73:45:bf:3a:9b:a0:f2:cc:7a:a2:41:e1:23:63:
4d:f3:8d:d1:f1:90:40:fc:80:89:61:06:1b:d5:da:
79:39:04:30:7b:7c:04:15:cc:ab:6e:43:39:be:a4:
ea:35:0c:b5:2b:b3:24:7d:94:db:3b:b7:9f:36:4f:
43:aa:73:ff:07:86:ee:d9:82:3a:37:57:c2:72:08:
5f:0d:c0:85:a5:9d:ef:08:1e:26:24:85:b3:6e:7c:
88:c9:ee:fb:c6:7b:9c:c0:ce:84:75:f4:fa:9f:2f:
48:a5:aa:d9:f2:53:a0:a8:f4:fc:f9:d6:cb:23:66:
15:6f:07:52:55:58:f1:3f:1f:8e:f4:e5:08:0d:5c:
35:61:cb:4e:e1:69:c0:4c:cd:24:4d:dc:5f:c4:f1:
05:90:68:a8:5d:6e:c6:95:bc:22:b2:58:ba:6c:9c:
d4:39:b9:3e:29:4c:6d:ca:62:ef:cd:4c:75:06:47:
50:b9:ac:ac:5e:f2:86:f3:26:4b:c7:5c:58:d2:da:
87:33:cf:66:82:76:cd:bd:25:66:ef:8d:50:c2:78:
dc:b7:17:f1:3a:af:f2:1a:75:e1:70:b4:c3:21:b6:
76:4a:4f:95:e1:fe:84:82:63:1e:7b:bf:ed:b1:f2:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4D:BA:BA:9A:5D:F3:3F:94:9E:F0:78:1B:BE:5E:75:2B:F9:B6:D3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vk26uppd8z-UnvB4G75edSv5ttM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:99:a5:52:ac:45:de:57:2a:a7:76:5f:8e:a6:af:cf:b4:a4:
c6:8a:9f:d9:92:a3:c2:c2:3a:c8:3b:e3:60:e0:41:68:7c:b4:
7f:ee:51:73:4a:65:40:10:69:91:b2:1f:dc:37:12:2c:52:74:
3d:78:a7:21:ed:5d:09:a8:a9:59:28:42:62:33:b5:47:72:52:
02:2b:98:38:3c:ca:2c:1f:56:5c:5e:4c:b2:71:a9:8d:5c:fb:
ca:46:8b:c0:d6:58:5e:a8:04:29:8c:0a:42:07:e8:6d:d6:d5:
55:e3:5c:01:38:4c:45:e7:e5:82:07:b0:2b:b9:8d:5c:2d:ce:
3d:3c:f8:48:37:db:be:6d:07:7c:5d:ce:24:45:82:8f:5e:fc:
11:72:02:5b:bd:b5:63:5a:65:9b:c6:2d:58:67:9f:c1:77:40:
be:dd:de:29:ea:0c:ee:f2:d5:43:31:c8:0c:9c:ba:ad:ba:7d:
09:ad:9a:f3:95:1f:51:37:07:1c:4c:27:df:3f:47:fb:a2:f2:
7b:5e:fd:1c:6d:27:20:14:67:35:ff:c7:bf:7a:4a:98:55:06:
3a:c1:8e:d8:a1:f7:c6:96:26:81:93:6e:da:52:79:dc:b1:87:
1f:b3:fd:5a:7b:e0:b0:03:24:11:c6:c0:f4:8f:b5:fa:bd:53:
3b:71:c0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org