Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xyss3MIzB6bOhjxMt34-qQVmKO8.roa
File: xyss3MIzB6bOhjxMt34-qQVmKO8.roa (raw, json)
Hash identifier: EFW4z0Jepr3rmGt8mS2YxxNef9xUYqXJ+mW1qKXEb/Q=
Subject key identifier: C7:2B:2C:DC:C2:33:07:A6:CE:86:3C:4C:B7:7E:3E:A9:05:66:28:EF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DF8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xyss3MIzB6bOhjxMt34-qQVmKO8.roa
Signing time: Tue 29 Sep 2020 09:55:12 +0000
ROA not before: Tue 29 Sep 2020 09:55:12 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3576 (0xdf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:12 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C72B2CDCC23307A6CE863C4CB77E3EA9056628EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cd:0e:8c:a4:7f:be:30:28:ee:7d:b6:5b:a0:
38:4b:1a:ac:7b:ef:e7:57:ed:a6:3e:0c:4e:7e:06:
37:fd:49:c1:42:07:c3:fe:ee:09:21:a3:95:a2:31:
de:89:e1:ee:b1:61:2b:0c:b1:17:ce:ec:23:85:e6:
bb:b5:53:ae:ea:5c:87:29:e4:c3:6b:58:ef:85:7e:
04:0d:70:eb:0f:fc:be:f0:82:61:e1:9c:1f:38:9e:
57:64:3a:62:8f:0d:11:a5:1e:e1:51:e8:e3:f1:b1:
36:1f:a3:b3:cf:65:df:f7:5a:e1:41:7a:6e:c3:62:
2b:a0:59:fc:b9:21:e3:3b:4d:4c:48:68:5b:4b:80:
49:d1:6d:19:6f:ef:4e:b0:96:f3:0b:58:c3:b4:9f:
0b:de:f2:ea:0e:19:5c:45:70:bb:df:70:62:cd:6d:
e6:24:b6:7e:5c:96:d5:d1:22:3c:00:8e:2c:f5:f7:
30:a1:e2:d2:f9:b6:9b:8e:59:34:58:8e:03:a4:aa:
8c:62:9f:7f:c4:f2:5d:ad:2b:1e:c0:3d:8c:72:0a:
25:35:43:f0:29:87:0b:30:39:d1:6f:11:f1:77:a7:
68:a7:6c:41:9a:72:af:3c:29:49:33:cc:11:f6:6a:
d0:98:83:a4:c9:54:74:2f:d9:61:1f:ee:e8:bb:13:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2B:2C:DC:C2:33:07:A6:CE:86:3C:4C:B7:7E:3E:A9:05:66:28:EF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xyss3MIzB6bOhjxMt34-qQVmKO8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.172.0/22
Signature Algorithm: sha256WithRSAEncryption
10:86:f8:f1:17:15:da:c4:4b:f0:77:b9:01:62:d0:a2:ae:1e:
7d:dd:c1:4f:04:b2:7e:9d:cd:4d:ca:57:5d:53:ac:1a:d8:24:
25:06:86:ff:85:44:ab:4f:af:91:ef:12:0c:45:e9:33:71:4a:
5d:c3:3e:a0:f1:16:1d:7b:8d:99:ea:e0:e5:91:b0:e7:f3:50:
de:79:56:32:05:2b:43:7c:46:be:ed:82:f2:4a:28:f8:87:9b:
84:26:d5:50:58:da:a1:ad:db:fe:b5:1c:cd:e6:53:36:b6:9c:
06:4b:83:e7:28:cc:0d:e5:34:76:b2:01:c6:60:f5:00:b0:08:
2c:05:14:46:bd:0b:71:8b:79:0e:a7:90:9b:f3:41:28:6b:56:
7f:2f:b5:ae:52:1f:72:0a:4c:4a:ba:9f:2f:a2:c5:56:8f:36:
b9:a4:01:a1:c1:12:4e:a9:47:98:6e:93:90:b8:eb:26:b8:b9:
2c:50:e9:25:b5:c7:ed:7c:a4:7c:c8:f4:13:ad:c0:5b:5a:91:
be:fb:d6:21:46:0e:72:27:b6:a5:cd:1c:22:e7:59:43:04:b9:
62:e5:ed:b6:8c:93:5e:d2:3c:2d:52:3e:47:1f:35:79:e3:a1:
3b:51:9a:b9:79:8d:05:ae:e2:d1:9d:f4:87:66:cb:6d:59:9f:
45:a6:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org