Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/78Qnn2YVL2hD-z7X3VMslS-lVKU.roa
File: 78Qnn2YVL2hD-z7X3VMslS-lVKU.roa (raw, json)
Hash identifier: 0jVrvwIUlkyWc6fOhZgGs8gntjlIUJ7wBfcUxMaQE3k=
Subject key identifier: EF:C4:27:9F:66:15:2F:68:43:FB:3E:D7:DD:53:2C:95:2F:A5:54:A5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2B05
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/78Qnn2YVL2hD-z7X3VMslS-lVKU.roa
Signing time: Fri 01 Sep 2023 10:09:46 +0000
ROA not before: Fri 01 Sep 2023 10:09:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 211.76.120.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11013 (0x2b05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:09:46 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EFC4279F66152F6843FB3ED7DD532C952FA554A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:2d:bb:80:a4:10:3c:ce:b3:b6:3c:3b:e3:
13:ae:13:02:4e:04:2f:4f:77:ce:03:54:6e:52:7b:
87:ce:bd:95:69:f8:f1:2b:60:e5:1e:4a:22:62:31:
49:51:e3:8b:0a:87:d7:6a:95:b6:9b:84:30:a6:bf:
08:3a:d5:3c:f1:1d:26:ab:fd:d0:50:ea:9d:42:7d:
68:9e:43:8f:f9:07:cb:db:35:b9:20:77:30:56:ff:
03:87:c3:d8:17:11:16:5c:43:e5:a1:9e:17:f3:e9:
d3:1f:c3:30:f5:33:fa:54:94:c8:a4:fb:48:1d:99:
f1:0e:64:93:fd:de:7c:1e:9e:74:21:3f:4a:fa:c1:
65:37:bb:1c:59:9f:a5:e0:9f:36:0f:33:27:46:ca:
95:29:cd:83:35:be:48:7f:3f:24:f4:15:3a:3e:24:
a5:36:1d:0a:07:d5:07:2b:35:29:ec:ab:65:33:7c:
52:50:1f:af:5b:10:77:cf:b2:9c:33:6d:de:0a:f1:
80:e0:8c:0d:ea:8b:da:9b:c1:38:78:d1:f6:e7:f2:
76:84:0c:ed:0d:f2:6e:71:7b:14:31:65:49:b0:99:
8e:9d:98:41:e8:fb:4f:9d:a0:de:1a:38:41:d9:9f:
71:28:f4:ab:e4:04:46:db:da:ea:c0:88:97:71:fa:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C4:27:9F:66:15:2F:68:43:FB:3E:D7:DD:53:2C:95:2F:A5:54:A5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/78Qnn2YVL2hD-z7X3VMslS-lVKU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.120.0/25
Signature Algorithm: sha256WithRSAEncryption
72:fa:b0:e1:59:78:4b:f4:1a:68:3e:ee:2c:24:63:ef:93:1c:
1e:85:f6:70:92:32:15:9d:0b:f3:9a:e5:ed:a3:32:06:41:81:
b4:f2:90:01:25:e7:21:b2:ba:78:c9:c2:c0:48:80:59:ad:7b:
54:68:0b:3e:c3:ca:51:0a:19:75:61:54:8c:93:72:23:d9:92:
7a:d5:25:6c:ce:62:a5:8c:d6:b0:8b:3c:d0:3b:6b:01:c8:bc:
4b:31:21:03:f9:27:cd:ca:2e:11:b6:9c:56:21:45:29:81:5b:
c1:13:8c:9a:18:ed:fa:ad:17:8a:1e:28:81:81:16:a0:bf:67:
2a:4e:f7:14:a0:79:2b:10:5f:61:5c:18:f5:d2:5d:06:4f:14:
81:02:d5:d0:7a:ae:6d:cb:48:00:bc:f3:7f:d8:0d:66:1d:df:
3f:0f:20:0c:54:af:4d:90:c0:1f:c6:f7:fe:d7:20:9f:f3:4d:
e7:b7:c3:83:48:43:5e:03:9a:fe:e0:24:9d:0b:aa:5e:6b:ac:
2d:b4:01:db:35:6d:7b:66:30:cf:e8:fa:cd:60:c2:eb:40:57:
72:81:a9:81:26:0b:cf:76:21:bb:1e:cf:05:73:75:39:72:d5:
ff:69:7c:65:b4:f4:97:88:5f:da:e1:df:8d:67:5d:fa:09:da:
69:59:c5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:14 2025 by rpki-client