Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yLFQuFUcRyPTXLq0OChSI3q3ed4.roa
File: yLFQuFUcRyPTXLq0OChSI3q3ed4.roa (raw, json)
Hash identifier: le/vBqa0/R6w6f0jpHWakHMpdgb3KN+vCpHkLH/u4Fw=
Subject key identifier: C8:B1:50:B8:55:1C:47:23:D3:5C:BA:B4:38:28:52:23:7A:B7:79:DE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15DF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yLFQuFUcRyPTXLq0OChSI3q3ed4.roa
Signing time: Sun 07 Feb 2021 12:07:00 +0000
ROA not before: Sun 07 Feb 2021 12:07:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5599 (0x15df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:07:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C8B150B8551C4723D35CBAB4382852237AB779DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:29:3b:e8:4f:86:44:81:5f:e0:aa:1b:f0:
47:98:ee:d0:d7:8e:ad:cb:71:4f:ca:b8:74:46:ae:
ab:7c:db:61:3a:ce:c9:95:a1:99:74:27:13:24:ac:
3c:c8:34:48:00:95:a4:fe:64:97:61:b3:22:75:50:
a3:65:62:bd:12:70:40:a5:9d:8f:41:2d:52:02:33:
5a:6f:77:00:b0:63:8b:19:76:87:46:51:89:4a:9f:
cb:0f:7f:8a:ca:51:d8:b8:2b:12:14:df:90:3e:cb:
a3:10:b4:7d:5f:0c:8d:02:07:2a:d8:e1:99:5e:ef:
62:84:3c:57:46:07:d2:c8:72:90:06:cc:1a:11:d8:
fa:6a:d1:0d:cf:46:72:82:33:63:f8:33:ea:e4:c1:
61:5e:07:af:68:2f:84:fb:cc:e4:23:b2:11:9b:02:
a1:45:b2:40:63:9d:f9:1e:13:c2:0d:5f:9e:69:50:
4d:59:66:2e:d5:98:fd:be:c2:ce:5b:b5:53:5a:e7:
01:78:f1:5a:da:55:85:ec:b4:ee:e0:68:60:16:c9:
90:18:ba:37:32:4b:7a:a8:ca:f2:26:a5:8e:8a:5f:
f3:6d:b9:ab:b2:9c:c3:f9:26:0c:f5:d5:ae:86:70:
3a:d5:5a:5b:11:55:fb:fd:74:40:10:e6:b9:a2:62:
70:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B1:50:B8:55:1C:47:23:D3:5C:BA:B4:38:28:52:23:7A:B7:79:DE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yLFQuFUcRyPTXLq0OChSI3q3ed4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.156.0/24
Signature Algorithm: sha256WithRSAEncryption
86:8d:e4:8c:64:f1:04:e1:85:c3:02:79:4d:6e:ed:cf:e4:b4:
69:d5:1e:a0:77:c7:cd:58:cc:a3:c3:d0:3a:91:65:42:a1:39:
ab:d8:ef:be:6d:cf:af:f6:17:58:10:8f:8a:36:10:78:7e:aa:
7a:42:53:7f:a1:16:4b:27:ec:87:7b:13:da:eb:05:25:c3:55:
e8:4a:5d:a6:28:e0:27:52:1a:e0:c0:35:3d:f2:95:21:75:d1:
8a:45:e3:d6:57:2a:7a:2b:5e:c9:f5:a9:b3:1d:c3:fe:4a:94:
80:0d:be:2b:2c:76:93:01:cd:68:67:0d:8c:9a:54:84:3d:bf:
6d:36:d6:b6:9f:0d:d5:dc:b3:83:0f:1e:e8:50:34:71:47:26:
43:91:65:28:02:72:97:88:3f:8f:32:6a:e0:18:3d:36:e3:0d:
f1:f9:f3:de:47:c6:23:a1:33:73:08:5f:5b:82:ae:fc:e2:81:
3f:99:f0:19:8f:33:75:0f:01:4e:08:9d:0c:39:4a:49:6e:ec:
5c:0f:01:2f:ab:75:d9:dd:90:d5:4e:09:75:ed:02:33:16:31:
af:64:68:58:b2:02:bf:b3:17:e1:05:2c:4d:06:05:89:d0:fd:
60:07:42:2d:1b:92:d8:61:94:6a:5f:f2:e7:77:63:1d:a1:ac:
d1:77:cd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org