Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3p8QUOIbJ-40hG3vQctc2LL36pg.roa
File: 3p8QUOIbJ-40hG3vQctc2LL36pg.roa (raw, json)
Hash identifier: oPNnvEA+5pEoBgv3Pg0XXayVa+u2uXO3UMKh5eLnpp4=
Subject key identifier: DE:9F:10:50:E2:1B:27:EE:34:84:6D:EF:41:CB:5C:D8:B2:F7:EA:98
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3p8QUOIbJ-40hG3vQctc2LL36pg.roa
Signing time: Thu 15 Sep 2022 02:44:53 +0000
ROA not before: Thu 15 Sep 2022 02:44:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.113.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DE9F1050E21B27EE34846DEF41CB5CD8B2F7EA98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:4c:a1:8c:82:74:27:f6:20:0f:e5:31:d5:
ef:28:c8:ba:23:65:5d:6c:4b:c8:82:57:a0:6a:b8:
77:d1:23:9d:cd:24:c8:98:38:e9:19:d3:13:c2:06:
10:c7:a0:1a:e3:07:52:2d:22:ae:7a:d3:54:73:05:
5d:fc:d5:39:43:3f:57:ab:fd:9c:08:93:16:18:6c:
b9:6d:7a:f8:08:b3:40:87:f8:ac:3f:ce:28:36:9d:
34:a7:ca:e9:36:e6:89:27:a9:19:1d:5b:c7:41:ba:
31:dd:f8:57:c0:85:d7:c3:8e:b7:63:9b:0b:c8:37:
0d:fe:cd:6c:64:a7:67:6e:46:1f:fd:5d:76:06:23:
b1:03:9d:2c:f0:6d:1c:90:9b:fc:fb:f1:97:f4:0b:
3c:9b:8d:3a:19:b1:bb:64:0d:51:7b:0e:52:8c:41:
66:1f:08:1b:43:0c:ab:2b:15:26:f9:54:49:57:b2:
f5:03:d3:29:e3:30:e2:26:6e:c6:2b:4e:13:96:af:
ae:9d:bd:93:9d:1e:94:f8:57:36:cd:51:fd:e8:ba:
40:11:30:fb:82:98:31:51:02:3b:28:a7:d6:5a:2a:
98:02:48:ab:76:af:09:48:65:77:e1:1b:9b:53:bd:
b4:10:99:36:14:7b:a1:f9:bf:b3:1d:96:78:4b:f2:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9F:10:50:E2:1B:27:EE:34:84:6D:EF:41:CB:5C:D8:B2:F7:EA:98
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3p8QUOIbJ-40hG3vQctc2LL36pg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.113.0/25
Signature Algorithm: sha256WithRSAEncryption
b3:cd:0c:0a:d0:da:90:cd:b9:6f:4c:98:7b:41:6d:31:1b:4b:
39:df:67:29:1b:d0:26:5c:3e:b1:b8:81:05:0f:f7:a0:02:4b:
96:f6:41:b1:08:96:4e:57:04:32:ed:dc:63:3d:68:86:94:fd:
a5:1f:2d:8d:5d:61:91:16:8f:72:81:db:3f:73:a7:1f:4f:67:
7b:21:9a:8f:7a:b4:a1:8c:e1:dc:01:3b:79:e1:07:30:91:1d:
35:14:42:9a:2d:4e:54:8d:1a:26:0d:6c:4b:ef:75:7a:e0:9c:
d9:49:47:fb:a7:e3:a6:b4:bd:bf:83:85:3a:87:be:bf:39:65:
d0:06:b7:83:b2:75:b7:4e:dc:5f:53:6b:b4:ba:a9:a0:ee:96:
6b:ae:50:75:d8:dd:9d:27:7b:86:ff:f7:e7:83:2d:3b:a9:d0:
e4:a6:8d:55:43:ba:dd:d9:d9:2f:6f:35:1d:df:98:8f:ae:dc:
95:d8:4f:30:5a:7f:a2:f2:b7:56:0a:3e:52:17:33:dc:39:8a:
53:aa:96:d2:bb:4c:8e:d4:8b:2b:dd:2c:2e:73:42:55:7e:b5:
5b:29:20:7e:77:bf:7c:c5:13:8d:35:c3:3c:e9:cc:bb:68:b4:
3f:c2:93:49:77:96:8b:cc:48:22:56:4d:15:a6:5f:a4:75:c1:
7a:aa:44:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org