Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HmtyVuyOQhqpNGrveDYEya9WKYw.roa
File: HmtyVuyOQhqpNGrveDYEya9WKYw.roa (raw, json)
Hash identifier: XBBTsqrxBV2fjC+njWkX26HrBQlp9sUKejDA5dhlZqw=
Subject key identifier: 1E:6B:72:56:EC:8E:42:1A:A9:34:6A:EF:78:36:04:C9:AF:56:29:8C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B16
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HmtyVuyOQhqpNGrveDYEya9WKYw.roa
Signing time: Wed 29 Sep 2021 02:46:07 +0000
ROA not before: Wed 29 Sep 2021 02:46:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 211.76.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6934 (0x1b16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1E6B7256EC8E421AA9346AEF783604C9AF56298C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:7a:70:f9:cb:a7:26:24:27:35:1d:61:04:
1c:48:c2:08:e2:33:1e:8b:13:ae:b4:8c:c9:cb:88:
2b:03:05:40:29:3d:ec:cf:48:ac:d4:d9:10:88:d9:
a2:2e:f2:eb:f5:bd:5b:77:36:3f:0d:7a:54:31:fb:
2e:2b:0d:dd:1a:e0:cf:d9:73:de:7a:f3:a1:cd:45:
4c:3d:c3:a1:41:7c:2c:66:a3:63:2f:8e:ed:94:40:
5d:94:a3:3e:f2:c6:72:d4:b5:7c:f5:ec:ec:52:87:
a1:5e:25:49:75:85:a4:d8:66:93:8c:35:c7:4e:f4:
2a:a8:2a:e7:3a:f7:c5:41:3c:64:59:7d:35:d3:1f:
dd:60:f7:d0:27:36:df:b0:d1:6d:6e:7d:1a:c3:34:
8a:cb:59:4a:04:d7:0a:90:16:2c:8a:25:74:36:da:
77:0d:91:92:8d:09:a2:4a:b3:3a:37:ca:da:aa:52:
a8:3a:d4:f5:8b:df:df:29:4a:18:80:0d:85:68:cc:
0d:90:4b:a9:bf:fe:84:af:16:0f:82:c5:8e:23:ef:
5b:51:31:e3:b0:bd:fa:e1:cd:6e:33:bf:eb:82:a1:
a9:f9:a6:47:53:cc:a7:22:35:52:f0:3f:2b:d5:63:
fd:94:01:c6:c4:b7:9b:d2:b1:be:dd:73:5f:bb:f1:
53:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6B:72:56:EC:8E:42:1A:A9:34:6A:EF:78:36:04:C9:AF:56:29:8C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HmtyVuyOQhqpNGrveDYEya9WKYw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.125.0/24
Signature Algorithm: sha256WithRSAEncryption
20:da:cb:27:e6:fd:63:3d:1a:d7:a9:82:85:8f:59:af:e9:4d:
02:73:fd:c2:be:a7:ff:02:d6:2f:07:dc:73:57:97:96:44:17:
54:ae:77:20:d9:24:eb:39:2f:6b:8d:c1:8d:1b:4f:a4:30:09:
88:9b:b5:15:6e:b1:41:10:fa:a4:55:75:03:5d:2f:6d:98:31:
5f:ac:9b:2e:94:f6:1c:1b:0a:f3:94:02:bc:ca:33:0c:23:07:
d1:75:da:23:80:68:d9:18:e0:99:33:09:d3:96:3c:04:89:47:
cf:1b:80:7f:c2:a8:84:8b:9b:5f:1b:cd:40:27:7f:ee:14:81:
cd:d3:a6:af:18:3f:d2:de:6a:57:d3:64:99:60:02:04:27:38:
12:69:a9:98:be:2b:8d:29:b4:2d:78:a5:d1:1c:cf:8e:a1:54:
50:84:d7:28:0f:fa:51:2b:9e:33:40:0c:ba:17:72:63:cc:96:
f6:dc:63:1a:ff:86:68:4a:c8:c7:43:95:39:9d:27:98:36:31:
e8:54:c1:fd:5b:48:ae:39:6e:09:f4:70:37:bd:76:5c:ac:91:
d1:6d:48:3e:f8:50:cc:44:ca:28:a1:c2:25:7e:82:ff:7e:d8:
45:4f:2d:1e:cc:ed:a5:37:4e:46:15:26:ba:aa:09:56:82:76:
78:1b:33:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-fra.rpki-client.org