Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5XgqgbjIuyDvqXUjr0qWnz_ulLg.roa
File: 5XgqgbjIuyDvqXUjr0qWnz_ulLg.roa (raw, json)
Hash identifier: pkSBeVUKa+EP7E8OeZQqnJZBolHuus6JGEJFkHAMaeo=
Subject key identifier: E5:78:2A:81:B8:C8:BB:20:EF:A9:75:23:AF:4A:96:9F:3F:EE:94:B8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D57
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5XgqgbjIuyDvqXUjr0qWnz_ulLg.roa
Signing time: Tue 29 Sep 2020 09:54:27 +0000
ROA not before: Tue 29 Sep 2020 09:54:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 211.76.113.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3415 (0xd57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:27 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E5782A81B8C8BB20EFA97523AF4A969F3FEE94B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:30:71:44:a5:73:86:e5:0f:62:86:60:a0:
2d:4b:b6:05:d9:12:dd:e8:8e:a8:71:bd:fd:12:2b:
f9:c7:29:20:db:08:14:41:f0:ce:3b:0b:0d:f0:50:
ad:c1:87:19:3f:25:36:a5:2b:ed:8a:9d:bd:12:0d:
cb:f6:d8:f5:b0:09:a3:eb:fe:4b:ed:5e:8e:4d:4e:
da:fc:6e:b4:3b:9d:a3:8a:3c:fe:21:31:91:ba:92:
77:c5:a5:31:fa:51:78:52:7c:a3:0f:cc:d2:58:be:
1a:44:7b:ee:eb:2a:92:0d:65:6f:5d:b7:dd:8b:37:
ad:82:e6:3e:20:e2:e4:cc:50:72:7e:a9:b6:33:13:
a0:78:2f:55:05:d9:34:16:ed:71:0d:11:09:ac:08:
4f:4c:2a:65:d7:ad:de:14:22:14:c1:04:5e:2b:86:
8a:8a:d0:7c:cb:7b:94:30:b6:b8:22:fb:b1:a4:22:
f4:54:69:26:ad:2a:2c:3b:c9:32:1e:1a:d1:f3:f8:
12:09:95:e3:1e:ff:eb:50:c5:f1:a7:8e:17:4d:8a:
f0:e9:36:87:32:d1:06:9b:12:d5:3f:93:75:8c:50:
68:50:d1:23:5b:66:9c:ff:26:68:95:c0:92:7e:f9:
a7:8c:94:22:64:17:cf:e5:0d:5a:eb:1e:c6:62:bb:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:78:2A:81:B8:C8:BB:20:EF:A9:75:23:AF:4A:96:9F:3F:EE:94:B8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5XgqgbjIuyDvqXUjr0qWnz_ulLg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.113.128/25
Signature Algorithm: sha256WithRSAEncryption
b5:63:f3:5d:9d:05:4a:c2:52:e5:7c:37:96:49:b3:bb:a2:52:
b7:4e:1a:e4:32:26:75:d7:03:13:b4:90:bd:ad:a5:c3:f4:d2:
41:3f:82:cc:aa:cd:14:18:dd:c2:94:3e:18:87:9d:45:f4:81:
e8:85:95:9a:28:55:11:77:34:8f:82:34:d7:1c:e7:92:cb:54:
07:c6:44:5e:7f:c8:98:99:36:97:c7:31:63:9b:8f:22:ab:3e:
4c:aa:17:7f:e5:13:86:38:8d:dd:3f:44:73:53:60:c1:d7:fa:
bb:45:36:b8:01:1a:0c:bc:b4:53:08:24:09:67:90:7d:6d:b7:
40:65:74:29:d9:87:52:55:fc:61:40:e4:88:a6:06:d8:f5:5e:
a2:19:ab:05:57:f8:01:71:4c:f8:82:41:12:5e:02:dc:48:c0:
a9:70:02:84:ef:75:0f:93:60:b9:93:49:48:bf:81:3b:13:08:
27:ab:dd:6e:ee:1c:03:1a:47:69:a8:f5:88:7d:a8:82:0e:22:
82:07:13:c7:33:99:0d:1a:57:33:77:af:7a:ec:51:d2:9b:37:
28:3c:cc:f4:1e:7f:9d:bc:5e:50:b1:ed:23:b5:b9:ee:f3:a5:
fb:7c:df:f4:2c:7c:07:0f:1c:2d:87:f7:b6:02:1e:bd:c7:f0:
fe:62:11:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org