Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KDWNIRbjSJvHupNpAFvVfMixTFc.roa
File: KDWNIRbjSJvHupNpAFvVfMixTFc.roa (raw, json)
Hash identifier: myImuHupWphBHrkMLrUjfPJyA13ijEbERzg5FST+hg8=
Subject key identifier: 28:35:8D:21:16:E3:48:9B:C7:BA:93:69:00:5B:D5:7C:C8:B1:4C:57
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 208E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KDWNIRbjSJvHupNpAFvVfMixTFc.roa
Signing time: Fri 25 Nov 2022 04:38:52 +0000
ROA not before: Fri 25 Nov 2022 04:38:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 211.76.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8334 (0x208e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=28358D2116E3489BC7BA9369005BD57CC8B14C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:23:06:1a:98:67:32:0f:2e:d9:df:7d:3b:
71:00:e7:5c:aa:8f:c4:71:54:e6:73:bf:6e:0c:f4:
c2:01:ce:e2:38:34:63:c0:5f:fe:87:f9:4a:44:4b:
3a:49:a6:04:f2:87:b0:f3:a4:5d:03:d6:d2:86:ee:
32:b8:14:51:2d:3c:01:21:0f:04:b5:77:74:52:d3:
73:aa:48:a3:87:f1:2e:83:2e:d6:1b:45:5a:8a:de:
49:8d:18:ac:05:a4:9c:cc:47:b9:e2:8a:49:93:1f:
cc:70:0a:11:81:03:fb:04:ee:e5:eb:bc:3d:b8:69:
59:f1:e7:6b:d2:2e:61:fc:b7:77:3d:8c:92:50:f5:
70:ed:a0:55:80:72:1b:11:0d:15:74:13:eb:4f:d4:
d8:fb:e1:b1:52:dd:bc:ee:80:0b:fb:35:50:cb:a3:
04:a3:c1:42:94:78:c9:09:8d:b3:a0:36:41:25:99:
40:5e:dd:91:bc:a9:41:b5:65:ad:ed:7b:e3:43:84:
e7:ae:27:d4:07:bf:52:bd:ad:c7:0a:35:61:16:52:
50:d9:dc:66:5c:29:64:ec:7e:7c:f1:24:44:f2:73:
80:72:a8:85:98:f1:13:50:93:5d:61:f1:f2:5c:5d:
8f:29:0b:96:42:f8:42:58:c4:a2:84:ca:1e:59:88:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:35:8D:21:16:E3:48:9B:C7:BA:93:69:00:5B:D5:7C:C8:B1:4C:57
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KDWNIRbjSJvHupNpAFvVfMixTFc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.120.0/24
Signature Algorithm: sha256WithRSAEncryption
90:67:67:48:57:72:95:85:5d:79:87:64:54:24:71:fb:28:0e:
f4:67:71:90:5c:bd:d7:e1:8c:08:5c:ae:55:79:8b:a1:b3:45:
fd:d6:8b:56:1e:55:93:b0:33:a1:ed:cc:29:ed:3f:83:cd:46:
0c:07:b6:8a:88:7e:79:16:db:3e:3e:be:ec:8f:b3:a5:1d:c4:
80:62:3f:b0:07:55:02:28:4a:84:78:74:9c:d8:67:50:f0:0c:
36:b6:78:57:9d:fd:08:9c:c3:08:92:16:47:de:93:8c:d9:e0:
7e:fb:6e:29:e1:a8:ac:4e:0c:66:dd:b4:a9:9f:84:cf:29:ed:
3f:ab:b1:ea:f5:1f:ff:2f:fd:ae:f8:16:4c:fc:00:4a:75:60:
d0:3b:49:f7:3b:6a:c7:e0:f9:af:f9:10:85:b6:06:dc:58:fa:
4c:23:72:df:ba:9f:08:b9:79:e2:a8:6f:6c:bf:99:4e:9c:fe:
a3:73:90:57:f7:be:f7:55:e8:0c:d1:66:d9:fb:99:cb:d2:7e:
69:f5:98:18:2d:52:0f:9e:71:80:a3:d9:01:93:82:3a:a1:3f:
bf:23:01:63:8b:5f:c2:36:38:aa:c3:9f:23:7b:05:3a:87:b1:
67:7c:1a:e9:e6:d3:9e:15:e6:77:e7:11:15:41:6d:b8:5a:b9:
a9:d3:9f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org