Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CRhcKLq47jPWCkHzKtrHm9Shzo8.roa
File: CRhcKLq47jPWCkHzKtrHm9Shzo8.roa (raw, json)
Hash identifier: oogkahQZpn0jQ2Quvt08cY7F0H96DtfVNPZLRnFxCu8=
Subject key identifier: 09:18:5C:28:BA:B8:EE:33:D6:0A:41:F3:2A:DA:C7:9B:D4:A1:CE:8F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1491
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CRhcKLq47jPWCkHzKtrHm9Shzo8.roa
Signing time: Sun 07 Feb 2021 11:59:09 +0000
ROA not before: Sun 07 Feb 2021 11:59:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 211.76.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5265 (0x1491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:59:09 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=09185C28BAB8EE33D60A41F32ADAC79BD4A1CE8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:ab:23:d7:50:a6:cc:9b:11:19:a5:bc:aa:
e2:d9:ee:b6:a3:ba:7f:2b:96:e5:b2:2d:f7:29:8f:
a6:e7:9c:ee:b6:8b:98:5c:bb:d4:db:46:a0:67:29:
0f:70:bd:a4:75:9c:b9:cb:d8:f4:2c:97:63:7d:73:
b2:e5:63:c7:f6:c2:2d:58:c3:b3:e0:9f:0d:1e:ab:
11:32:9e:04:b9:f0:1b:86:e3:7f:8e:57:9f:b7:81:
a0:8d:ff:4b:84:bd:b0:c4:b6:22:b2:d3:fc:13:77:
e0:e7:f3:de:2c:73:69:a6:30:13:ca:47:0e:af:53:
ee:51:fd:81:1d:92:1f:fc:2d:35:67:da:e0:26:94:
32:fb:fe:19:e5:5f:ce:ba:eb:70:ca:19:2a:8e:f6:
7a:7f:ad:4c:c0:81:2e:39:77:07:65:61:27:6f:a3:
a5:3a:dc:2d:4d:07:92:04:f4:c7:2f:87:0c:ca:d0:
98:f5:93:f3:ea:71:d2:60:25:5c:41:b0:52:a5:f2:
73:aa:38:e0:a4:fa:45:39:38:0d:b8:39:9d:cc:02:
c3:1b:01:b1:13:a1:ec:e3:aa:3f:e0:f3:0f:2e:8d:
2f:4c:2f:57:3a:41:c8:ac:38:be:d8:21:5e:40:47:
a0:76:c3:52:18:e7:c5:64:8d:74:68:0c:8d:0d:36:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:18:5C:28:BA:B8:EE:33:D6:0A:41:F3:2A:DA:C7:9B:D4:A1:CE:8F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CRhcKLq47jPWCkHzKtrHm9Shzo8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.115.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c7:94:a7:50:f9:0d:26:6d:04:65:49:2b:e5:98:d0:da:ff:
2f:60:d9:d0:a3:8e:2a:42:5c:bd:2a:48:34:db:d8:e9:30:83:
8e:fb:d7:c1:27:6e:80:b9:f1:ff:9c:e2:5c:71:f9:41:90:35:
36:f8:27:27:3a:36:ef:a6:8f:50:03:67:ee:76:2b:d1:23:5a:
60:ea:a4:cf:b2:f3:18:29:77:f3:93:55:77:77:14:c4:57:ae:
3a:fd:54:f5:56:57:7f:3a:c1:b1:41:e2:29:df:0a:0e:4d:02:
d7:e6:88:ec:6c:f0:14:59:47:20:15:9e:59:0c:50:b5:aa:84:
15:fd:8a:f0:d5:f3:4e:1c:d7:b8:17:c4:ca:0a:75:04:56:bc:
23:23:f0:66:0b:ac:9f:50:0e:2e:51:e3:d9:22:bd:80:e5:2c:
5b:7b:19:1b:7a:73:aa:61:62:80:f2:02:4c:46:19:bb:3c:1f:
06:ae:e7:f2:2f:27:3c:99:1f:ec:24:c9:43:a7:18:7a:4e:a6:
1a:d9:61:42:f2:aa:81:6a:b4:3a:f2:67:6d:61:89:f3:14:e3:
57:b2:30:4c:7c:60:68:7d:69:26:ef:37:a4:e7:75:02:23:28:
8c:a2:17:0b:32:68:01:91:53:dc:4b:91:e8:c8:c9:69:cb:9f:
d4:39:0f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:58 2025 by rpki-client