Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lw1xnJySnigtNUjv9rF_a0kZHiU.roa
File: Lw1xnJySnigtNUjv9rF_a0kZHiU.roa (raw, json)
Hash identifier: fiCqxYsNhu1Jagw5F8kpygQ9fBfyaMgcz+KekLNrXi8=
Subject key identifier: 2F:0D:71:9C:9C:92:9E:28:2D:35:48:EF:F6:B1:7F:6B:49:19:1E:25
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lw1xnJySnigtNUjv9rF_a0kZHiU.roa
Signing time: Thu 15 Sep 2022 02:46:01 +0000
ROA not before: Thu 15 Sep 2022 02:46:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 211.76.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2F0D719C9C929E282D3548EFF6B17F6B49191E25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3c:b0:f5:9f:d0:20:bf:61:63:f2:a5:a2:0c:
15:e8:cd:1c:5f:f4:c7:d8:6a:e3:19:76:0b:44:cf:
82:18:c3:67:4a:89:e0:22:eb:b4:47:3d:ab:c6:45:
e4:81:24:97:0c:5d:79:8c:59:80:cf:a7:9e:c0:3a:
85:a8:0d:89:0c:f8:5f:c3:6c:43:58:62:ab:3d:c2:
b9:fc:f7:1c:5b:8d:03:ca:cb:c9:13:d0:99:68:b0:
08:c3:fb:7e:71:44:75:7e:14:a3:69:29:dc:b1:a4:
c2:8e:24:1f:eb:1f:cb:10:75:f5:7b:34:2b:bf:bc:
a9:3b:3c:58:96:03:2d:1f:e8:99:4b:80:02:f2:e3:
37:6b:02:08:87:73:5c:f1:46:d1:33:23:74:d7:70:
ee:26:e3:f3:5d:c2:71:95:9e:f5:c4:2d:26:57:e2:
e2:1f:19:57:ec:e9:dd:05:02:3a:89:77:5d:60:ed:
0a:8f:8c:e1:60:98:b6:75:70:81:e9:66:60:39:64:
dd:11:3f:f0:af:ad:0e:3c:97:cc:fa:c6:40:de:f3:
36:dd:2c:1f:fb:90:f6:5a:2e:db:bd:02:98:e6:a5:
22:39:5e:b2:c3:4e:1f:01:f4:45:ca:14:81:3a:c7:
e4:64:5b:cb:6a:d7:29:a1:1c:b6:ab:18:61:bf:a5:
1b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0D:71:9C:9C:92:9E:28:2D:35:48:EF:F6:B1:7F:6B:49:19:1E:25
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lw1xnJySnigtNUjv9rF_a0kZHiU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.119.0/24
Signature Algorithm: sha256WithRSAEncryption
20:78:d3:60:1e:98:58:43:8f:0a:5b:93:6f:eb:de:67:d1:29:
c6:8b:e1:3f:9d:d4:07:03:5d:75:97:45:b6:2d:9a:fa:af:56:
29:59:76:d7:23:21:b5:f2:b0:b4:f5:03:fe:92:74:d3:67:9d:
c9:05:c6:92:bc:cd:2a:cf:be:ba:65:9b:45:de:6e:5a:56:b1:
0d:33:11:9d:49:a2:04:88:bf:53:85:fe:2b:62:5c:3b:df:8e:
0a:78:f2:09:99:30:cb:03:fe:96:4b:e9:dc:ec:fc:c7:f0:92:
d1:c8:ba:9e:97:77:fb:0c:d6:5e:2a:07:d6:8d:23:c4:c1:15:
8e:8f:9c:a7:14:31:f5:1a:d0:1e:d9:21:99:05:10:bb:f5:b5:
58:b9:dd:b7:05:ad:9b:b5:0e:08:12:5d:da:2e:00:4c:01:6a:
6e:88:2a:4d:a9:ed:8f:d6:49:23:65:10:ce:bc:c9:76:a1:ba:
34:34:64:66:af:c6:dc:2c:7b:56:69:f9:07:35:fd:7c:1f:1b:
6b:bc:8d:91:70:c3:5e:e2:d9:0a:5b:54:88:c7:d3:28:c6:3c:
aa:8f:10:f3:03:45:97:26:35:36:a1:c7:f5:a7:84:4a:fa:64:
31:6e:81:46:16:28:75:0d:43:1a:7a:26:24:36:d0:8d:86:ac:
f7:b8:14:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org