Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/-T9IL_vdnEboUetFo5K0wsIqRIE.roa
File: -T9IL_vdnEboUetFo5K0wsIqRIE.roa (raw, json)
Hash identifier: XTRHAOG9zaDBphhEFufLay4WKDTbfIT87RMdL3dd5CA=
Subject key identifier: F9:3F:48:2F:FB:DD:9C:46:E8:51:EB:45:A3:92:B4:C2:C2:2A:44:81
Certificate issuer: /CN=A61402819401D363CB1F9BFBD538875F41F211C3
Certificate serial: 0ADE
Authority key identifier: A6:14:02:81:94:01:D3:63:CB:1F:9B:FB:D5:38:87:5F:41:F2:11:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/phQCgZQB02PLH5v71TiHX0HyEcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/-T9IL_vdnEboUetFo5K0wsIqRIE.roa
Signing time: Fri 18 Aug 2023 05:09:10 +0000
ROA not before: Fri 18 Aug 2023 05:09:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 56179
IP address blocks: 211.76.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2782 (0xade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61402819401D363CB1F9BFBD538875F41F211C3
Validity
Not Before: Aug 18 05:09:10 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F93F482FFBDD9C46E851EB45A392B4C2C22A4481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:2e:e4:8b:e9:bd:55:b6:14:6e:ea:c8:e2:
3a:12:da:f2:73:ff:ff:e3:8e:92:47:76:31:fb:95:
48:e9:05:6c:83:21:89:60:c3:d9:c5:40:41:e1:96:
25:67:71:59:1a:ea:bb:7c:1a:97:3e:86:bb:3a:cd:
0c:c9:e6:69:15:f8:d4:c2:9c:98:00:21:39:5f:a3:
cd:88:e4:33:f0:03:1a:c1:bc:52:f7:a3:0a:7e:77:
d3:e4:91:0e:91:10:f3:c8:ac:6d:ce:3e:1c:fc:b0:
74:72:a5:80:f0:78:00:f8:2f:ae:bf:84:d0:0b:85:
2f:69:79:99:7e:e1:71:b3:bd:06:fd:0f:c4:18:bc:
28:40:40:0a:4d:74:5d:52:84:df:9a:18:c8:c3:a7:
35:59:3e:e1:1c:93:5a:a2:26:a6:68:9a:45:8b:78:
f9:a9:c6:05:bd:46:bd:35:0e:c7:58:7c:46:37:b6:
b6:b7:c2:cd:ab:28:a6:1e:e3:d9:98:fb:61:55:2f:
28:cc:f0:fd:1a:8b:c2:b8:67:55:2d:f7:9a:5d:6e:
7f:88:ac:25:13:b1:1d:83:0c:90:9c:40:cf:81:15:
7c:c3:bd:0f:58:62:d5:ab:be:6b:32:9d:d9:9a:5c:
42:c1:d3:c5:ea:4e:4b:75:62:11:01:d6:68:1e:16:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3F:48:2F:FB:DD:9C:46:E8:51:EB:45:A3:92:B4:C2:C2:2A:44:81
X509v3 Authority Key Identifier:
keyid:A6:14:02:81:94:01:D3:63:CB:1F:9B:FB:D5:38:87:5F:41:F2:11:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/phQCgZQB02PLH5v71TiHX0HyEcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/phQCgZQB02PLH5v71TiHX0HyEcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/-T9IL_vdnEboUetFo5K0wsIqRIE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:d7:8a:d9:5d:7b:5e:b9:a3:3d:d1:c1:e0:a2:1d:58:61:b7:
a7:1d:94:7f:26:f4:a5:dc:41:b5:42:6a:e0:02:6e:42:79:8f:
25:a3:d3:c1:17:b5:b1:e5:9d:db:87:bf:58:f7:94:9e:3c:9a:
62:a2:9e:b6:e1:c7:aa:00:fe:a4:3b:28:b4:92:41:16:28:65:
52:c0:23:78:0b:13:6d:71:20:13:fd:41:37:58:6e:6d:1b:9a:
83:a1:88:44:d6:a4:59:7b:b3:c7:5f:d2:ab:39:7d:bc:99:da:
36:8f:58:8c:8c:eb:b8:78:ca:86:f0:91:0b:79:c4:cb:5b:46:
16:fb:76:69:5e:7a:0f:0b:52:1f:70:75:f2:3b:93:dd:82:39:
38:06:33:35:29:6d:0d:88:f8:1c:81:ee:28:1f:3a:5c:f5:74:
e5:c8:89:89:77:74:d0:6e:d2:82:48:d1:e1:db:38:ac:43:00:
96:56:ab:8c:a4:e8:fc:d4:ab:1a:3a:dd:69:d7:49:12:a0:22:
46:fe:9a:1d:8a:ab:31:23:d4:26:95:6d:4c:b7:8a:4a:d7:1c:
87:d7:0e:59:a1:4d:ae:72:24:88:bc:ad:b1:de:d5:b7:5a:2f:
71:27:90:bf:22:26:dc:07:a7:4d:fc:8c:76:48:7b:06:7e:8e:
9f:98:fc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org