Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4y3abcuzDIARuIl_i28sB2QHbaE.roa
File: 4y3abcuzDIARuIl_i28sB2QHbaE.roa (raw, json)
Hash identifier: J7Eu0HDx4813wSAQU5BEkYlY3Vt4Vkhuxku04zG02Dc=
Subject key identifier: E3:2D:DA:6D:CB:B3:0C:80:11:B8:89:7F:8B:6F:2C:07:64:07:6D:A1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D75
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4y3abcuzDIARuIl_i28sB2QHbaE.roa
Signing time: Tue 29 Sep 2020 09:54:35 +0000
ROA not before: Tue 29 Sep 2020 09:54:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 211.76.123.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3445 (0xd75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:35 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E32DDA6DCBB30C8011B8897F8B6F2C0764076DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:ab:a5:57:ea:eb:5d:86:e9:bc:af:e8:8f:
f9:6e:db:4e:02:6a:d7:81:61:dd:b5:96:27:17:5b:
e3:fe:aa:2c:ef:93:c5:6f:4a:13:4b:36:ae:ea:ae:
67:17:d0:ab:58:3c:97:49:e7:b6:37:ed:23:84:b0:
b2:25:e1:40:b5:39:20:25:a9:d2:3b:2c:0d:72:1a:
83:87:41:25:dd:77:3a:74:19:98:30:c7:1d:b8:e5:
32:d1:b7:50:78:38:6d:ab:86:1d:3b:af:94:c7:7b:
91:aa:bb:2a:25:76:6d:a4:19:f8:e3:10:be:d6:4e:
02:3f:ee:95:c9:91:b9:93:02:42:d0:b5:14:6b:f8:
e7:cc:18:b1:27:68:9e:ef:42:5f:4b:3f:18:2e:ab:
05:7a:01:ce:ec:d7:67:17:e4:da:70:1b:6f:9c:05:
33:b4:d4:9d:3e:7f:34:e6:d4:4c:92:c0:3f:b7:f6:
a4:76:6a:01:23:2a:f1:b8:b4:f1:ef:d5:79:93:ec:
4e:e6:35:f0:5c:b7:88:e8:c9:e0:74:9d:86:93:b9:
1a:02:52:76:75:5b:c5:78:8e:83:a2:d0:27:c8:36:
7d:07:33:34:98:35:4c:f3:2a:e7:f9:12:08:dd:74:
9e:9d:23:c8:af:46:27:50:84:97:71:ce:9e:b1:46:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2D:DA:6D:CB:B3:0C:80:11:B8:89:7F:8B:6F:2C:07:64:07:6D:A1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4y3abcuzDIARuIl_i28sB2QHbaE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.123.128/25
Signature Algorithm: sha256WithRSAEncryption
79:19:5c:ca:9d:da:38:0f:0f:93:ad:10:19:5d:55:17:f4:5a:
0a:48:82:84:d0:46:af:bf:b4:b9:c4:8a:a7:e4:e4:5f:40:36:
5f:2b:43:27:63:f5:36:1a:0f:7f:f3:b7:0d:e5:49:22:62:9a:
c7:61:16:2a:ab:99:46:e7:5f:38:bd:d9:0f:00:08:ac:a5:aa:
69:b2:64:91:8e:49:98:01:57:70:3a:cd:2e:dc:4c:a7:45:e1:
24:47:db:5d:e7:d5:6b:c6:83:ae:63:6c:d1:c9:96:6e:11:30:
4f:0d:66:00:15:6f:7c:48:7c:df:b9:52:32:35:d4:85:4a:ba:
ce:9a:b1:d7:69:14:e8:09:cc:78:59:e7:ed:7b:52:eb:61:75:
4a:bc:0f:c5:46:22:e7:d5:7b:e0:5d:b2:db:2a:57:66:d7:5c:
28:08:69:bf:9a:30:21:d3:d9:37:25:d8:46:11:31:2e:b0:c6:
7b:f0:81:a1:a0:eb:5d:8d:b6:82:74:84:d7:ef:24:1d:d1:fd:
16:b0:57:a9:82:e1:29:0a:1b:cc:09:a1:be:6d:dd:08:5f:21:
a5:31:05:86:24:ab:ae:06:23:94:54:93:da:3e:5e:e4:5d:59:
c7:ce:1c:f8:55:5c:6b:e7:7d:40:e7:d3:2b:6d:7c:67:09:68:
b3:54:07:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org