Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LEpjIqiA_Gj12X0ePidHj4jAwEw.roa
File: LEpjIqiA_Gj12X0ePidHj4jAwEw.roa (raw, json)
Hash identifier: L9CSmNOjmLTVNBZBKWGaA2yLJ7mIzADbj1FKoqj1ZHE=
Subject key identifier: 2C:4A:63:22:A8:80:FC:68:F5:D9:7D:1E:3E:27:47:8F:88:C0:C0:4C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17DD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LEpjIqiA_Gj12X0ePidHj4jAwEw.roa
Signing time: Sun 07 Feb 2021 12:24:14 +0000
ROA not before: Sun 07 Feb 2021 12:24:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 211.76.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6109 (0x17dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:24:14 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2C4A6322A880FC68F5D97D1E3E27478F88C0C04C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:24:00:6f:e0:15:e7:fd:56:e6:99:54:23:ea:
b0:34:1e:80:be:14:b6:f5:27:51:01:5c:a1:22:ca:
49:c3:11:19:e1:73:a9:aa:eb:1d:a2:47:b0:f4:b7:
d7:dd:d1:e4:ca:e3:c1:e7:02:db:23:ec:57:af:4a:
64:8d:76:85:3b:81:e1:67:bd:1a:a5:81:ed:32:13:
69:6e:92:ae:2c:8c:93:0b:99:31:fa:91:fd:80:5e:
7d:a4:89:41:ba:fe:48:2c:2b:1e:2f:ce:6e:f2:6b:
89:8d:3a:95:5d:d4:ae:4b:fa:7f:d0:e4:bc:4c:53:
46:55:7e:e3:76:a2:8c:3b:85:15:f2:03:a2:1e:a6:
ae:87:59:03:25:9d:8d:0f:cd:b0:9a:8b:ad:ce:86:
2b:f3:2d:67:d0:9a:b1:6f:95:ea:1a:6a:3f:e8:2c:
2d:2c:9e:a1:b0:44:e8:79:4a:e3:82:af:fc:a5:e2:
b1:e1:5e:01:91:e7:b5:35:49:b4:d3:67:41:62:61:
8e:62:39:58:bf:cc:53:0d:7f:89:54:a6:5b:e5:7c:
a2:38:b1:df:be:7a:52:4f:f6:c9:9e:e7:7a:86:eb:
da:09:07:e6:67:03:07:11:a3:e3:b5:6e:a4:c1:7f:
5a:f3:1a:c6:e1:d1:35:3a:a5:40:19:cc:eb:8a:55:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4A:63:22:A8:80:FC:68:F5:D9:7D:1E:3E:27:47:8F:88:C0:C0:4C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LEpjIqiA_Gj12X0ePidHj4jAwEw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.123.0/24
Signature Algorithm: sha256WithRSAEncryption
85:df:cd:b9:0b:88:db:3a:bd:ac:ff:37:f8:d9:f4:8f:2e:7e:
ef:45:4f:21:a7:5d:f1:96:ab:72:74:8b:e0:93:8b:3f:da:ae:
40:de:9e:78:6f:59:0e:9f:01:b9:fa:ea:c7:72:bc:db:a4:62:
59:15:da:7c:ce:b8:1e:50:05:35:ed:30:a6:a0:f9:78:7c:b6:
eb:7a:13:66:08:6d:bc:f9:5d:c5:50:30:20:c9:03:d6:fc:8e:
90:05:e9:be:d3:28:a0:aa:ec:1c:9c:f8:75:f5:54:15:49:cf:
25:eb:f8:8c:ad:83:e3:c0:59:96:68:b8:3e:ef:53:12:19:a9:
b5:6f:60:a5:7e:03:68:0b:d3:91:5f:59:ea:b0:43:96:85:55:
a1:d7:bd:11:cd:30:eb:c3:0d:52:eb:79:2c:f7:60:11:f5:c1:
f1:59:22:42:e9:a0:c0:ee:c0:da:66:ca:2e:2f:35:9d:82:90:
79:72:43:e5:2e:09:9c:77:76:4c:e7:08:0c:de:c2:66:2f:3e:
20:51:1a:b4:fc:7d:85:f9:da:43:8a:1e:ae:7b:4c:82:73:88:
b4:fd:0e:18:bd:17:8e:12:50:c6:2e:85:f8:be:90:8b:27:9e:
70:1b:3e:0e:b5:17:a5:cf:e8:40:cf:13:a5:c9:7b:75:8a:06:
72:b1:4d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org