Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w0Dc8d44E1pDQoRLyckPLcrDJBU.roa
File: w0Dc8d44E1pDQoRLyckPLcrDJBU.roa (raw, json)
Hash identifier: 9mxGRHDnVBxM0uFkFqs3/pCDnWuySKCl5rQ2sfTcN/c=
Subject key identifier: C3:40:DC:F1:DE:38:13:5A:43:42:84:4B:C9:C9:0F:2D:CA:C3:24:15
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21AB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w0Dc8d44E1pDQoRLyckPLcrDJBU.roa
Signing time: Fri 25 Nov 2022 04:40:11 +0000
ROA not before: Fri 25 Nov 2022 04:40:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8619 (0x21ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C340DCF1DE38135A4342844BC9C90F2DCAC32415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:52:2c:65:b9:99:73:9e:f2:9c:ad:c9:f0:
46:77:e9:41:40:96:54:b6:d4:c1:7c:1f:16:17:e1:
94:74:fb:59:ea:a9:40:1b:60:92:20:a3:b6:34:f3:
1a:e3:00:d2:7d:fa:ed:ff:33:ab:95:f2:00:e8:20:
04:cf:5c:ce:bd:ef:41:35:62:9c:19:3b:6f:d2:55:
65:1f:bd:1b:04:fa:46:83:eb:06:f3:75:bb:f7:ba:
e0:13:c1:32:07:21:57:00:ba:47:f3:77:33:b6:a7:
39:c2:8a:b9:33:ed:37:91:1b:3b:25:d6:9f:e6:29:
f7:e3:10:ec:f9:0a:ca:d7:c9:df:8e:70:41:5d:ad:
67:70:5b:00:04:80:08:71:5a:04:03:93:a6:65:39:
cf:2a:97:8f:09:03:71:2c:5b:39:22:f2:28:4a:5a:
11:45:60:ee:a3:ad:75:d2:3a:d0:12:c7:b9:c2:38:
49:d7:6c:6c:14:de:a6:b7:ca:48:b6:07:a5:41:6e:
a4:0d:59:f4:10:74:f4:04:67:b5:e0:86:f7:15:9f:
48:32:21:aa:cb:4a:61:ce:b4:9b:e8:11:dc:db:5d:
b9:28:da:f6:8c:61:86:57:e6:11:42:e0:14:1c:93:
12:62:4c:e8:a1:82:39:d2:1a:06:ad:db:12:a0:a1:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:40:DC:F1:DE:38:13:5A:43:42:84:4B:C9:C9:0F:2D:CA:C3:24:15
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w0Dc8d44E1pDQoRLyckPLcrDJBU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.104.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:5a:b3:44:c6:a9:e6:e5:d9:b3:63:79:2e:36:0f:92:41:9f:
11:4f:35:25:96:8d:b3:57:0c:0c:50:6e:e5:d5:12:9a:87:c9:
3b:76:40:31:fc:c9:2c:29:87:09:2d:2d:e8:57:57:24:0d:56:
ee:58:f3:92:07:7f:8d:59:7b:0d:21:76:43:1d:0f:b2:9d:82:
d4:73:0d:8d:33:4a:d5:a9:86:be:59:6c:e8:d3:4f:77:c1:d5:
48:6f:e7:4b:6b:17:33:13:fc:6b:71:9a:24:4d:8c:ef:5e:89:
d8:e5:44:85:46:c9:11:23:d7:7c:63:ec:27:7c:13:89:6d:ca:
cd:a2:2a:45:a1:d3:32:5f:3b:b1:ae:e4:e4:ae:d1:fe:ae:fa:
36:ae:c2:6d:39:e7:5e:13:fa:b0:66:79:73:a4:e7:a3:cb:67:
e1:66:e5:38:0a:75:6e:8b:99:45:37:eb:91:e5:7c:a2:ef:c6:
6e:7d:5c:6e:06:0b:b0:21:fa:d2:cd:4f:ba:2c:2c:28:ee:e1:
f0:43:59:2e:1e:f4:54:56:b3:5c:0c:eb:73:02:e9:6b:32:12:
a7:e9:49:b7:c9:51:1d:06:79:ed:39:47:18:49:18:26:4b:6c:
90:e5:68:61:6a:e7:dd:69:31:7a:ee:ef:87:e2:7b:14:9d:23:
2f:94:82:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org