Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LHBLNnqnyN76X4M77RMtW-bf0JQ.roa
File: LHBLNnqnyN76X4M77RMtW-bf0JQ.roa (raw, json)
Hash identifier: NCEqq2dyr7k3Bcgp6dg8P09rLsbDeVLH/EFg0a6bPjc=
Subject key identifier: 2C:70:4B:36:7A:A7:C8:DE:FA:5F:83:3B:ED:13:2D:5B:E6:DF:D0:94
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B0D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LHBLNnqnyN76X4M77RMtW-bf0JQ.roa
Signing time: Wed 29 Sep 2021 02:46:04 +0000
ROA not before: Wed 29 Sep 2021 02:46:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 211.76.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6925 (0x1b0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2C704B367AA7C8DEFA5F833BED132D5BE6DFD094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:9d:f1:29:54:03:6b:75:d5:0f:28:ae:eb:
23:c3:fb:e7:cf:92:e1:99:de:0d:db:25:37:5a:e5:
8e:60:52:c9:54:25:ef:2c:04:94:cc:c4:8f:65:ae:
d4:57:2a:53:79:dc:bf:d1:11:7c:47:96:8e:c8:0c:
1c:d8:3e:9e:3c:28:f4:16:95:70:d1:66:b0:d5:79:
ce:28:3c:cc:69:cf:7d:ff:ec:7e:a2:f5:a2:55:b9:
90:f6:80:7c:de:70:b9:53:1f:3a:a3:0d:07:27:c1:
17:93:c9:fa:cc:35:ca:f2:c3:25:7e:99:94:e7:c6:
48:24:68:5d:12:61:8a:c5:bb:4e:b0:20:30:3d:b9:
0c:ba:13:91:65:a6:23:e7:8e:cf:8d:f3:2e:ee:3c:
ad:ef:41:d2:e1:8e:41:bc:95:67:85:79:f2:e3:f8:
13:66:7c:47:6f:77:b9:c1:69:8c:d5:9f:77:41:45:
53:97:7a:4b:fa:fd:c0:65:32:c0:24:b4:d1:41:8a:
90:0d:89:83:c3:83:d8:af:5e:c0:7c:f4:2b:ff:a1:
94:46:73:cb:cd:0a:25:b3:2e:b7:f5:6e:41:d5:66:
5a:6a:7e:92:5d:83:e9:bd:57:5a:cb:dc:de:50:98:
5c:fe:d6:20:c1:a2:b4:b5:bf:14:a5:4e:8c:02:69:
36:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:70:4B:36:7A:A7:C8:DE:FA:5F:83:3B:ED:13:2D:5B:E6:DF:D0:94
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LHBLNnqnyN76X4M77RMtW-bf0JQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.116.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:47:59:48:c4:de:9c:36:0c:81:9c:3a:9a:72:21:90:9e:c3:
c8:44:fb:09:5f:6c:a8:fa:8e:48:66:30:ae:6f:b6:88:e6:ab:
e4:a8:2b:5e:31:79:8e:fa:9b:5f:a5:9d:24:53:1b:30:7a:49:
a7:55:9f:7e:98:74:30:03:35:3e:2b:f9:ae:0d:c5:d5:b5:7f:
d9:26:e6:af:34:be:19:ac:cd:e8:cc:62:1b:02:e2:cb:07:00:
8d:28:32:d5:d0:93:21:5d:74:1e:6d:6d:da:20:20:90:c1:e4:
b2:9c:b8:19:31:1e:53:41:44:31:5b:76:01:32:8d:9a:ec:dd:
a5:ce:9b:7f:aa:cd:59:0a:f5:fb:3b:75:ff:fa:fe:87:f9:c0:
fb:58:e8:a5:43:76:83:63:03:26:60:86:60:7d:79:4b:3e:58:
ff:f7:dc:92:9b:e0:f2:7b:4c:ec:cd:87:98:9b:2a:58:98:6f:
31:55:1c:cf:fb:d1:20:f5:d7:03:45:94:52:74:da:9c:96:51:
fc:ec:07:1a:be:57:5f:d0:5a:41:78:a4:9c:2d:b7:f2:63:1d:
e4:23:2d:59:a3:29:27:ba:23:8c:85:1d:dd:40:69:5c:05:2a:
cf:a5:67:be:cf:24:d7:11:bf:d9:8c:77:0c:5f:0e:c1:62:bb:
de:df:65:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org