Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Os4SgY62eN-FBhlnfZAE_dZeLE.roa
File: 1Os4SgY62eN-FBhlnfZAE_dZeLE.roa (raw, json)
Hash identifier: Ocd4DlGIioSGHaSnI0RsJCbiYGS3KEiH/zVmDuKDbmo=
Subject key identifier: D4:EB:38:4A:06:3A:D9:E3:7E:14:18:65:9D:F6:40:13:F7:59:78:B1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21B9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Os4SgY62eN-FBhlnfZAE_dZeLE.roa
Signing time: Fri 25 Nov 2022 04:40:20 +0000
ROA not before: Fri 25 Nov 2022 04:40:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8633 (0x21b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D4EB384A063AD9E37E1418659DF64013F75978B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:6f:aa:a9:05:a0:1e:d7:33:a6:0f:19:bf:
c2:eb:a1:82:a6:cf:9f:66:87:5d:08:8c:c5:98:c3:
d8:21:f7:10:67:75:a2:62:67:2f:7f:d1:99:f6:d5:
31:5d:61:1b:96:56:d8:8f:0d:50:55:d6:fd:07:af:
83:6e:eb:00:2d:18:a4:04:49:fb:cf:3d:8e:e8:c6:
a4:d7:ce:4c:45:c7:ec:d1:8a:ff:e8:cd:28:b4:61:
43:fe:71:ed:7a:a3:29:0b:6f:5b:b0:cd:71:0d:6d:
82:c1:ac:cf:35:7a:fa:fc:01:82:45:fe:ce:77:27:
f2:70:05:dd:ba:6c:0d:50:00:9d:6a:ea:0b:b6:43:
1e:4b:5d:a6:9b:db:63:8f:4d:5e:33:7c:00:de:1a:
74:70:4b:46:b9:f1:25:4e:8c:13:7a:f0:b8:35:85:
41:88:8c:7c:1d:55:75:2b:6d:65:54:da:73:ed:53:
75:c6:fd:1f:b5:05:69:9f:44:22:0b:46:81:3d:0b:
e8:23:28:f4:a1:11:8c:c7:fc:c3:9c:fb:49:b3:14:
7a:86:45:25:2e:a0:99:2e:83:66:d1:d0:54:52:95:
48:51:e2:25:25:dd:60:ef:a3:0a:3b:f6:48:8f:b5:
b8:32:fa:e1:ac:b7:5f:7d:2e:67:8d:ed:12:d1:9e:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EB:38:4A:06:3A:D9:E3:7E:14:18:65:9D:F6:40:13:F7:59:78:B1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Os4SgY62eN-FBhlnfZAE_dZeLE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.115.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f4:ff:65:61:db:19:9c:43:76:d9:9a:9d:4f:26:78:87:e0:
a2:0b:ac:7a:7b:84:6e:25:a9:e1:9e:9e:b5:b3:fd:45:e1:4e:
5c:06:36:63:6b:70:32:2f:4c:0a:1d:13:d4:d0:b3:27:19:4f:
ae:bb:86:d5:3f:3e:c4:e3:42:94:66:61:1c:ee:0a:08:ce:86:
7e:35:c6:1b:69:ca:c3:01:9a:e2:ed:32:67:c6:ef:74:81:cf:
22:8d:a6:b9:5f:8c:7a:b8:c6:6c:d9:16:76:27:ee:6e:23:9b:
06:5b:2c:6a:38:b4:b1:af:11:a9:40:f9:2b:c8:48:58:96:c7:
d4:38:d5:56:77:af:83:37:26:5b:20:d2:7b:b4:8b:0c:34:d5:
e3:1d:17:ba:ee:bd:c4:07:19:da:44:a8:13:fa:2b:fd:04:86:
df:41:6a:aa:63:b8:d8:72:25:ed:54:b5:ea:ad:29:c6:2f:dc:
34:d1:47:92:ae:2a:16:80:8f:53:f7:66:53:29:9c:86:73:e8:
ac:26:78:e8:00:56:3b:1e:64:66:2d:ca:bd:13:29:6c:6b:6a:
da:38:bc:9d:cc:09:f6:b9:f0:b0:89:5a:c3:9c:68:44:61:ba:
1b:cc:cd:55:4c:c3:a1:23:46:f1:e4:f1:84:14:47:d2:0e:28:
2b:c9:97:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org