Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BrW6-bcBn2NBB-Atfq3HLwYCnnQ.roa
File: BrW6-bcBn2NBB-Atfq3HLwYCnnQ.roa (raw, json)
Hash identifier: 0ObVD8DrSETEz15rK1lpOGenFEIKfo7Y8u/7aICOj6E=
Subject key identifier: 06:B5:BA:F9:B7:01:9F:63:41:07:E0:2D:7E:AD:C7:2F:06:02:9E:74
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1E78
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BrW6-bcBn2NBB-Atfq3HLwYCnnQ.roa
Signing time: Tue 03 May 2022 06:45:02 +0000
ROA not before: Tue 03 May 2022 06:45:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 211.76.112.0/20 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7800 (0x1e78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 3 06:45:02 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=06B5BAF9B7019F634107E02D7EADC72F06029E74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:60:98:35:7a:7b:09:0e:15:9a:69:18:79:
e9:43:30:97:e1:8e:02:69:5e:15:35:25:e5:6c:9c:
f7:38:b4:97:a5:be:ab:7c:80:79:93:0f:f9:e7:56:
fe:c6:a8:4c:46:6e:bf:07:a4:42:3c:5e:38:75:6d:
ab:ec:d1:4e:f4:d9:41:8a:4c:63:36:9f:57:31:a9:
ac:99:3f:cb:9a:7f:49:a0:84:fd:cd:a5:08:0c:91:
e1:8d:27:f9:4a:c6:b6:b4:34:0d:ae:20:f5:6f:63:
39:e4:b0:1e:2b:ed:73:f2:be:99:62:ba:af:e4:9e:
41:bd:d3:04:76:84:e7:a4:c6:32:7b:5c:bc:73:bd:
4e:9b:5e:37:25:03:71:06:07:91:77:23:88:0e:a3:
fe:dd:a7:1f:1b:fc:2e:49:57:da:1e:c5:68:75:4d:
b1:1c:9e:7f:65:af:00:60:b1:ab:92:de:53:71:0e:
fa:dc:5c:6f:6f:fa:3c:0d:73:d0:02:26:73:2f:e3:
36:66:91:80:04:ac:f1:8c:79:68:9f:95:1e:5e:ef:
19:93:4c:8b:42:c3:17:52:47:6e:a6:3e:15:bc:87:
e6:10:aa:24:25:63:64:16:6e:c2:11:20:51:65:b0:
ee:c6:05:b3:f1:5c:17:b3:5b:b5:e6:78:f8:58:e8:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B5:BA:F9:B7:01:9F:63:41:07:E0:2D:7E:AD:C7:2F:06:02:9E:74
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BrW6-bcBn2NBB-Atfq3HLwYCnnQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.112.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:eb:a8:a9:64:cb:d6:eb:68:1d:df:bd:60:e7:d1:99:fb:ed:
a3:84:15:1f:a4:fd:6f:95:f5:db:b5:42:f2:b1:e2:8d:84:d9:
be:15:cf:5e:7b:02:c2:f6:7a:78:7c:a2:18:7d:20:3f:25:dc:
8f:23:bf:13:ee:60:80:f7:69:7e:cd:c2:fd:06:5d:25:d1:ed:
dc:03:cd:1d:1e:05:74:48:07:24:5b:01:3b:5a:bf:5d:ba:00:
d1:f5:17:a0:c4:ee:b1:9c:b9:71:14:50:4f:40:9d:90:c9:5d:
63:81:3e:cb:46:2f:2f:a2:5a:07:15:f4:5c:8c:3d:b7:28:85:
49:71:4f:e1:e2:1b:70:f1:28:70:f2:23:83:ca:d2:a9:76:95:
f2:64:d7:cd:00:f9:d2:3d:b8:fc:f4:55:07:55:e3:b2:06:5a:
2d:b2:b5:0e:85:57:32:f9:e1:32:f3:e6:a2:a2:c6:bd:8f:5b:
5b:26:1a:8f:72:26:b2:c1:00:5d:1f:16:6d:da:49:b9:34:0f:
28:01:a5:19:53:73:0c:61:af:d1:bf:b2:ee:78:be:1d:ee:9c:
ba:85:e3:a1:b3:16:76:de:05:f1:62:80:a6:12:30:c2:bf:1f:
24:ce:0c:20:fd:6b:0b:e7:9f:de:6b:88:15:31:17:9e:da:27:
5e:e4:b4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org