Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3DB-r1XJTeeD9_KWvMEHXDTQRHw.roa
File: 3DB-r1XJTeeD9_KWvMEHXDTQRHw.roa (raw, json)
Hash identifier: ct8CkKNsphU+86mGKzBxoa4veRiueaDHkJn/5661wmA=
Subject key identifier: DC:30:7E:AF:55:C9:4D:E7:83:F7:F2:96:BC:C1:07:5C:34:D0:44:7C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D57
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3DB-r1XJTeeD9_KWvMEHXDTQRHw.roa
Signing time: Wed 29 Sep 2021 02:48:53 +0000
ROA not before: Wed 29 Sep 2021 02:48:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 211.76.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7511 (0x1d57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:53 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DC307EAF55C94DE783F7F296BCC1075C34D0447C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:cd:47:a0:82:93:a6:19:98:23:e9:60:d2:
ab:87:1e:79:eb:5f:8a:c7:83:99:fe:4a:07:f5:4c:
41:48:30:8c:76:51:ae:1c:f1:75:ca:54:ae:fe:90:
b5:fa:7d:10:7a:3a:06:9d:42:6e:6f:fc:d3:26:0a:
7e:f7:f8:15:0f:99:a4:c2:a8:39:a0:d2:2d:ea:21:
b0:84:d3:fe:a5:c1:eb:00:6e:6f:ec:9e:e5:8d:4d:
c4:fd:fc:4c:2b:2a:07:50:55:75:ea:a7:bd:5a:cf:
68:a2:82:0c:9c:b6:a3:f5:42:9d:6e:0c:38:53:13:
b2:4f:99:18:bb:aa:19:65:aa:af:59:89:92:77:5a:
22:6f:48:70:3d:72:cd:35:ef:b7:e0:3f:e1:ee:ee:
50:af:71:46:98:70:d4:48:57:f8:6c:d7:c4:ba:14:
0e:0e:79:04:45:d7:d5:7d:89:e2:4c:1c:d2:4c:33:
74:b0:8d:03:81:d5:cb:4c:9f:a0:0e:93:85:17:ad:
b6:f7:8f:31:6f:71:42:02:fb:7d:eb:83:99:94:b7:
1e:73:ce:78:37:3a:b6:22:e5:9c:2d:b3:62:b8:fc:
e9:55:9f:d8:80:23:95:f3:17:ec:1b:89:f5:ff:52:
8a:7e:f1:44:58:bb:06:72:04:5f:c0:b2:5c:09:f3:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:30:7E:AF:55:C9:4D:E7:83:F7:F2:96:BC:C1:07:5C:34:D0:44:7C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3DB-r1XJTeeD9_KWvMEHXDTQRHw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.112.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:39:db:46:56:77:f9:fb:3c:2e:86:1c:a8:21:a4:b0:fb:b8:
28:eb:9b:51:20:a5:17:65:74:b6:26:6d:45:2a:f1:e1:30:e2:
68:d1:93:e3:1d:4c:ab:e0:7b:06:c7:b0:9b:51:aa:98:c5:35:
ae:de:f9:15:55:50:b9:48:60:fe:39:5f:86:38:95:c9:77:89:
49:24:82:f9:43:45:86:8d:72:55:b9:eb:f3:aa:d2:6f:46:34:
2f:75:0b:17:05:8c:a1:26:d2:a7:09:36:a6:c7:86:4e:89:20:
41:97:58:b1:64:b2:61:ed:8f:d1:69:aa:f3:72:b3:d1:bd:0a:
0a:c1:cf:7a:4e:ea:87:25:52:5d:da:b1:15:80:6a:47:43:2d:
2b:92:f8:b2:b6:a2:be:02:64:b0:56:35:94:33:93:e4:21:a6:
e1:03:ef:cc:96:a1:33:6e:fd:34:de:e9:32:b5:56:b8:eb:f6:
e3:a3:d3:ca:5b:32:46:69:ed:c1:ee:0e:a5:37:59:09:cd:d9:
7d:64:c3:e6:44:bd:38:14:dc:6f:42:73:b2:f1:a7:13:6b:ef:
2e:73:f7:a6:66:95:8b:07:cd:f7:4f:3a:97:1d:fb:f8:d8:e1:
91:ab:7e:a7:43:ce:c3:da:f0:d1:0e:a3:cc:6d:45:5e:ce:ef:
bd:d9:56:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org