Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K463My8HJkGro4k3YjiGoBXPjYI.roa
File: K463My8HJkGro4k3YjiGoBXPjYI.roa (raw, json)
Hash identifier: GcrmW0kA5/vP9VqC2pUisuakFAP3w2tVpZIaAizJd84=
Subject key identifier: 2B:8E:B7:33:2F:07:26:41:AB:A3:89:37:62:38:86:A0:15:CF:8D:82
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22E4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K463My8HJkGro4k3YjiGoBXPjYI.roa
Signing time: Fri 25 Nov 2022 04:41:46 +0000
ROA not before: Fri 25 Nov 2022 04:41:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8932 (0x22e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2B8EB7332F072641ABA38937623886A015CF8D82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:1e:8c:1d:33:d4:76:7f:3f:e3:3f:a0:d2:
c3:50:a1:77:28:ab:53:91:08:f7:32:ec:ef:b8:eb:
23:c9:40:f3:ca:c0:8a:98:56:03:a5:b5:6f:7f:08:
1a:3a:d9:3e:4e:a9:86:9f:a0:71:af:a5:07:77:aa:
86:b9:34:4b:0c:41:cc:1e:e2:ff:be:f3:7b:94:5e:
a5:99:ff:fa:55:ac:b5:ec:d5:44:bd:9b:a6:cf:04:
ee:90:d2:d8:d7:87:9f:ca:b9:cb:41:c1:03:7e:7e:
19:cf:3e:86:82:dc:a4:3f:2d:6f:53:06:42:c0:96:
e5:60:19:61:af:63:3e:fe:4c:b1:49:e8:08:2c:be:
3a:84:b4:8a:da:fc:9d:98:d5:df:26:c2:e4:eb:76:
95:eb:a2:46:bb:9a:b8:96:26:7d:30:92:9e:87:ae:
b5:4d:87:f3:29:94:df:34:50:a8:3d:6d:a4:74:e6:
2a:54:c0:51:6f:d6:aa:ae:b7:9c:78:6f:14:ab:12:
b5:04:e1:7b:64:5f:35:e3:83:74:1a:68:bd:e7:06:
2f:36:6b:96:e3:03:54:7c:ac:f8:26:78:e3:ac:6c:
33:4e:59:01:ab:72:86:e7:36:a9:94:04:14:7e:8d:
48:f6:7c:07:fb:0d:8e:64:03:a8:38:54:56:72:5e:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8E:B7:33:2F:07:26:41:AB:A3:89:37:62:38:86:A0:15:CF:8D:82
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K463My8HJkGro4k3YjiGoBXPjYI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:16:cb:1e:60:99:ac:36:fa:6b:3f:d5:5a:66:bf:b9:04:49:
16:68:c8:43:b3:72:00:d5:21:9b:2d:2b:52:6c:ec:5f:3b:b3:
d2:94:c0:e9:17:63:e8:9c:3b:64:ac:25:3e:8e:95:2c:7c:64:
c2:80:fd:27:7a:6b:bb:3c:d5:91:be:de:53:6c:42:57:21:dc:
e9:7a:a2:a7:e4:32:73:8e:28:f5:73:4a:b5:0f:cc:55:e7:3a:
87:9a:93:50:d2:41:1d:3f:84:f5:fe:46:29:fe:78:27:e0:77:
1f:3b:71:64:6b:f7:4f:bf:b3:1f:e4:ae:a1:a4:9b:6e:ac:82:
9a:a0:db:2a:0b:fb:ac:c4:c5:34:71:28:22:b7:e7:4e:1f:ae:
ce:79:39:27:03:1a:c3:4f:6e:29:6d:c4:50:10:36:d3:44:7c:
87:cf:7a:6b:8a:e2:15:49:e5:b2:17:10:37:71:04:eb:08:c0:
95:ee:c7:ea:16:51:8c:3c:f5:b1:1e:98:dd:f9:e5:b5:b7:5d:
3a:14:37:c0:21:e7:eb:62:76:f2:1c:a8:11:a8:5c:0d:27:90:
ae:52:8a:63:26:21:53:c3:9b:da:27:16:45:7a:4e:27:53:88:
bb:a5:e6:60:8b:50:33:2d:61:35:28:46:05:21:29:65:f2:67:
48:4a:42:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org