Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8LmiEfzlUXetrw2m4XjjjeJnqoY.roa
File: 8LmiEfzlUXetrw2m4XjjjeJnqoY.roa (raw, json)
Hash identifier: ICX7pdogNDbcoQKoMr3SJ9S0nHY6BSwjfImGGXnOMJc=
Subject key identifier: F0:B9:A2:11:FC:E5:51:77:AD:AF:0D:A6:E1:78:E3:8D:E2:67:AA:86
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 203E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8LmiEfzlUXetrw2m4XjjjeJnqoY.roa
Signing time: Fri 25 Nov 2022 04:38:29 +0000
ROA not before: Fri 25 Nov 2022 04:38:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.115.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8254 (0x203e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F0B9A211FCE55177ADAF0DA6E178E38DE267AA86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:24:2c:ed:9f:09:66:2f:fe:bd:ba:be:09:
b3:b7:74:2e:24:2f:d7:86:a5:50:a4:f7:10:c5:15:
f5:36:e8:67:68:9b:e6:88:07:d0:a6:45:1d:c2:48:
49:be:5c:cb:38:8b:45:29:4f:97:2f:84:d6:be:e8:
cf:93:c5:b2:66:47:5f:7f:8f:49:df:e8:53:08:f9:
29:f2:eb:af:a5:a6:e0:0b:33:b2:66:c5:87:b5:f8:
ee:34:79:66:d9:d1:be:62:ac:51:d4:97:0f:6f:7e:
cc:1b:9c:52:d1:5f:3c:0b:93:d7:2b:30:3c:27:07:
d8:4d:3c:bc:38:f5:66:fe:4c:7c:3d:42:f3:6e:eb:
4b:fc:f8:a1:ab:87:40:90:7a:cf:2d:fa:21:b7:21:
e3:95:3c:9a:03:ab:d5:bf:f6:7c:02:c3:b8:87:e9:
c3:8d:ca:bc:d1:eb:33:f1:b9:19:27:62:3e:15:75:
14:64:e9:5b:a9:6e:f7:72:66:86:8b:e8:38:8d:70:
cc:9e:8b:02:d0:02:6f:82:e5:33:28:65:dd:e2:02:
50:35:d4:a7:e0:f2:16:10:ef:34:cd:50:76:f4:04:
7b:11:e8:c8:b7:1a:4b:3f:1a:cb:7f:f4:1a:d0:5a:
dc:b2:99:ab:a9:a5:51:44:4e:6b:2c:f0:5f:cd:9a:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B9:A2:11:FC:E5:51:77:AD:AF:0D:A6:E1:78:E3:8D:E2:67:AA:86
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8LmiEfzlUXetrw2m4XjjjeJnqoY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.115.0/25
Signature Algorithm: sha256WithRSAEncryption
74:66:18:b4:65:c0:b3:58:2a:5d:21:73:1f:f1:fa:df:1a:93:
28:4a:bb:b2:45:74:2f:1a:8e:11:e2:e7:7b:e3:78:51:ad:d2:
98:bb:6f:57:eb:eb:3c:50:cc:28:14:77:8d:71:3e:bc:03:89:
ca:93:cb:b8:87:2b:6c:46:8d:6d:66:a2:e6:b5:45:4b:0c:88:
f2:46:4b:3f:67:81:56:16:9c:5b:26:2a:5c:77:9d:37:15:38:
93:c2:f6:35:1a:18:2a:27:4c:75:66:af:79:72:6d:77:79:be:
90:ca:bd:5c:67:0b:b3:52:62:7c:61:c4:5c:75:9d:01:7c:58:
02:d7:85:53:d9:c7:f6:fe:13:61:63:5e:89:99:06:4a:15:26:
ea:b8:db:e2:95:9c:a5:fd:9b:61:1f:df:02:e5:1b:e4:b5:d2:
5c:b8:ea:aa:a2:e1:1d:6c:2a:a7:c9:d0:a5:8a:80:4b:92:12:
1e:6f:2c:31:4b:a4:3c:69:6e:74:28:8e:31:4d:ba:68:0d:40:
47:8d:f8:d6:23:37:76:29:da:df:4d:f0:38:2d:ba:60:90:aa:
36:81:62:8b:c7:9a:f9:8d:55:29:68:82:f7:96:7d:b9:3e:d4:
c9:c2:d8:d1:c1:db:da:50:43:9c:91:7b:b5:77:be:8d:f7:aa:
f3:1c:fa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org