Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zKcsiNvY1eUyPWN5jlFLU-dHYhg.roa
File: zKcsiNvY1eUyPWN5jlFLU-dHYhg.roa (raw, json)
Hash identifier: EmjZPGeMs4SiVJQVpNMNbYrV3RxUSLOSkXcwKPmiyUY=
Subject key identifier: CC:A7:2C:88:DB:D8:D5:E5:32:3D:63:79:8E:51:4B:53:E7:47:62:18
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zKcsiNvY1eUyPWN5jlFLU-dHYhg.roa
Signing time: Thu 15 Sep 2022 02:53:36 +0000
ROA not before: Thu 15 Sep 2022 02:53:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CCA72C88DBD8D5E5323D63798E514B53E7476218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:1a:1e:59:fa:c5:d7:ca:ac:a3:96:f9:e6:
d5:48:04:5a:06:40:72:b6:5d:ba:46:c3:09:93:71:
e0:82:d7:90:35:28:94:32:ab:32:20:59:ba:a6:fc:
03:e6:79:a5:84:10:8b:7f:28:e5:72:74:d1:b5:44:
c9:f1:8b:36:b8:1e:79:8b:a3:ab:59:82:93:99:68:
80:07:6c:33:64:27:aa:73:89:f3:7d:af:fa:b1:4a:
65:28:55:6a:68:21:7a:9d:d1:d8:81:f5:07:91:a8:
99:71:09:6c:59:39:ac:17:db:57:e0:8b:11:5c:cc:
cd:ef:bd:6b:f6:89:9e:09:af:3e:c6:e7:a6:09:32:
b9:53:66:ad:3c:d6:72:e8:5c:f0:7c:e3:27:73:5b:
f4:69:38:5d:b3:ce:5b:60:8b:54:a7:17:a6:1c:4a:
0a:51:98:91:6f:df:9a:d1:cc:d5:d4:56:2f:fc:62:
02:3e:92:eb:b0:af:0f:cb:c8:5c:8a:7f:ec:09:d2:
ba:e4:62:83:13:1f:10:95:b3:30:64:85:e1:b1:26:
33:84:85:0e:27:96:af:74:e7:8d:84:c0:51:eb:6d:
8e:22:97:22:1a:9a:73:d2:ee:92:65:73:72:24:8a:
01:d5:16:ed:ac:b9:23:ce:f7:d3:8b:78:ff:b2:07:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A7:2C:88:DB:D8:D5:E5:32:3D:63:79:8E:51:4B:53:E7:47:62:18
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zKcsiNvY1eUyPWN5jlFLU-dHYhg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.96.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:97:f1:b3:2b:e7:d8:be:64:08:49:a5:43:7a:04:07:50:d6:
37:c2:ab:cb:14:46:e4:94:c5:ef:d2:8e:24:38:26:96:70:a5:
17:17:92:73:e4:a4:30:60:21:bd:e7:ef:00:db:c0:cc:a4:53:
81:fd:88:6d:80:02:95:0d:3d:89:2b:df:6f:5c:8d:1a:1a:dd:
d5:73:12:bf:10:58:22:8e:f2:cf:ec:1c:50:9b:17:94:71:cb:
55:77:90:71:1e:c8:67:f7:d3:fd:b4:23:14:61:15:36:2d:16:
49:8f:4d:03:be:e7:cb:98:7c:d6:94:a2:c0:78:00:93:9b:6b:
4f:42:34:b2:e0:7c:f2:d6:1a:59:50:9a:c7:64:06:f3:af:47:
c5:a1:dc:54:fc:ed:28:af:4f:3b:50:d5:ad:bd:55:15:c0:d7:
bd:02:d9:3a:bd:5a:64:9d:60:97:da:d8:c1:15:ad:0a:5c:55:
4d:f4:94:23:ff:44:c5:da:9c:e0:4e:cc:db:9e:00:a0:e7:6e:
03:73:13:a1:70:b2:a7:41:24:12:c2:72:80:0c:a4:f4:4f:ce:
5a:fe:11:53:60:86:97:08:ed:80:18:a9:f6:ce:30:0e:96:8c:
0d:e0:b2:c5:81:4f:c5:9a:04:37:85:32:20:3a:7c:8e:25:dd:
c6:39:bc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org