Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pd73QsNf3RRonkPhzR4rXDFE0J4.roa
File: Pd73QsNf3RRonkPhzR4rXDFE0J4.roa (raw, json)
Hash identifier: cVU51xLklOcT3fDO8ihsEMQiyoEsyQ2A0MLH6zHqa7w=
Subject key identifier: 3D:DE:F7:42:C3:5F:DD:14:68:9E:43:E1:CD:1E:2B:5C:31:44:D0:9E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0CE8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pd73QsNf3RRonkPhzR4rXDFE0J4.roa
Signing time: Tue 29 Sep 2020 09:53:57 +0000
ROA not before: Tue 29 Sep 2020 09:53:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 211.76.115.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3304 (0xce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:53:57 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3DDEF742C35FDD14689E43E1CD1E2B5C3144D09E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:4b:eb:bf:ce:31:57:20:15:b8:29:83:2b:
65:c1:49:58:e5:6f:55:76:27:69:73:79:c4:f1:0d:
49:05:cc:a5:ac:98:b9:3c:99:95:28:1b:0b:e2:a3:
d5:c6:2d:e4:53:6d:cc:7e:75:97:54:a5:d2:cb:18:
43:66:79:0d:02:28:bb:a2:e5:e0:80:86:5b:10:e3:
90:a2:04:a9:37:f2:29:ea:2f:26:86:b6:37:e3:8c:
b5:3a:6c:15:6d:ab:ec:49:4f:b9:b3:e9:7b:cb:85:
34:b8:7c:ae:40:92:4f:07:ed:1e:2e:a9:f1:4b:9f:
0e:c8:37:76:3b:5b:18:6b:2e:58:fd:57:55:35:da:
54:61:a2:5b:22:70:d0:73:d1:40:1e:8e:7c:35:9a:
1d:c9:f8:b7:f9:8f:dd:c6:ca:14:fe:29:a0:75:82:
cf:72:2d:db:23:74:af:94:f6:19:d3:7d:ae:d8:8f:
07:20:3d:44:1f:c1:5c:4d:52:77:48:66:ca:c0:83:
2b:f5:29:b7:2c:e5:d8:59:a1:ec:9e:87:98:b8:21:
e9:b3:9e:e4:4a:bb:ba:f9:33:e7:34:a0:45:c6:68:
b9:50:33:cc:a6:e8:a5:7f:95:2b:d6:fb:00:0c:5d:
fa:4e:f6:3c:ee:82:d9:74:1b:2c:79:35:46:e2:b9:
2d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DE:F7:42:C3:5F:DD:14:68:9E:43:E1:CD:1E:2B:5C:31:44:D0:9E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pd73QsNf3RRonkPhzR4rXDFE0J4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.115.128/25
Signature Algorithm: sha256WithRSAEncryption
87:4c:ac:a9:89:23:4a:6b:ac:83:21:88:1e:78:e2:07:bd:e2:
b8:77:8c:4f:8a:f2:b2:85:24:dc:ec:24:06:cf:fe:90:27:5c:
98:67:7d:8f:c9:ce:8c:fe:aa:cc:e7:c5:b1:ff:06:d5:22:3f:
5a:7d:69:60:a3:16:34:33:77:dd:eb:65:89:92:85:d5:74:c3:
5a:93:f4:b9:11:0d:71:97:61:4b:9d:24:0e:cf:a5:fc:a4:cd:
de:f5:c4:3e:6f:94:44:48:8e:42:9e:47:23:4e:1a:d6:97:94:
15:84:ec:30:c5:d2:2f:70:ea:66:60:1d:9b:cb:e1:ce:cb:81:
60:3f:13:a7:89:ea:b2:e8:da:2f:cf:3c:71:33:66:73:31:a3:
57:57:bf:93:78:de:6b:73:0d:1a:20:e0:df:4a:3b:1c:d1:8d:
6c:98:59:ca:6a:4b:57:7c:eb:1e:6f:12:e7:40:87:74:03:a6:
f0:95:76:27:8e:98:67:8f:45:33:23:10:12:b9:07:3e:ab:e8:
fb:76:b6:89:70:78:fc:76:6e:ac:57:81:c6:96:58:cf:43:ed:
55:66:55:77:ae:fe:f6:c9:6c:5e:72:c5:7a:02:30:26:2b:44:
c6:9f:80:9f:fa:d7:ca:b4:b6:4f:89:52:e8:ea:ca:8c:da:49:
8b:5f:52:e4
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTUzNTdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNEREVGNzQyQzM1RkRE
MTQ2ODlFNDNFMUNEMUUyQjVDMzE0NEQwOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrwkvrv84xVyAVuCmDK2XBSVjlb1V2J2lzecTxDUkFzKWsmLk8
mZUoGwvio9XGLeRTbcx+dZdUpdLLGENmeQ0CKLui5eCAhlsQ45CiBKk38inqLyaG
tjfjjLU6bBVtq+xJT7mz6XvLhTS4fK5Akk8H7R4uqfFLnw7IN3Y7WxhrLlj9V1U1
2lRholsicNBz0UAejnw1mh3J+Lf5j93GyhT+KaB1gs9yLdsjdK+U9hnTfa7Yjwcg
PUQfwVxNUndIZsrAgyv1Kbcs5dhZoeyeh5i4IemznuRKu7r5M+c0oEXGaLlQM8ym
6KV/lSvW+wAMXfpO9jzugtl0Gyx5NUbiuS0xAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUPd73QsNf3RRonkPhzR4rXDFE0J4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BkNzNRc05mM1JSb25rUGh6
UjRyWERGRTBKNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT
THOAMA0GCSqGSIb3DQEBCwUAA4IBAQCHTKypiSNKa6yDIYgeeOIHveK4d4xPivKy
hSTc7CQGz/6QJ1yYZ32Pyc6M/qrM58Wx/wbVIj9afWlgoxY0M3fd62WJkoXVdMNa
k/S5EQ1xl2FLnSQOz6X8pM3e9cQ+b5RESI5CnkcjThrWl5QVhOwwxdIvcOpmYB2b
y+HOy4FgPxOnieqy6NovzzxxM2ZzMaNXV7+TeN5rcw0aIODfSjsc0Y1smFnKaktX
fOsebxLnQId0A6bwlXYnjphnj0UzIxASuQc+q+j7draJcHj8dm6sV4HGlljPQ+1V
ZlV3rv72yWxecsV6AjAmK0TGn4Cf+tfKtLZPiVLo6sqM2kmLX1Lk
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org