Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RfC3I9oPEIhmmoCfDGILqy5hZjQ.roa
File: RfC3I9oPEIhmmoCfDGILqy5hZjQ.roa (raw, json)
Hash identifier: VaLoHb1wAQUFMANsgLVkbh5StOQH4P03dYpsogWXYCM=
Subject key identifier: 45:F0:B7:23:DA:0F:10:88:66:9A:80:9F:0C:62:0B:AB:2E:61:66:34
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B78
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RfC3I9oPEIhmmoCfDGILqy5hZjQ.roa
Signing time: Wed 29 Sep 2021 02:46:38 +0000
ROA not before: Wed 29 Sep 2021 02:46:38 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 211.76.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7032 (0x1b78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:38 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=45F0B723DA0F1088669A809F0C620BAB2E616634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:d6:4d:37:5d:7d:aa:20:df:a0:8f:40:4e:
fa:33:54:99:2d:16:e6:d2:11:de:b3:f4:95:05:67:
7a:06:72:c3:56:f4:e8:a3:30:64:20:a6:cd:9b:cc:
89:0f:0f:e4:69:9b:73:c4:56:95:92:70:d7:39:bf:
2e:99:8c:8e:46:0c:18:1a:6a:15:c0:80:36:c7:fb:
99:09:1a:b1:46:15:08:b1:20:9e:95:dc:fa:ab:02:
00:d8:78:6f:35:fc:b7:fb:0b:d2:91:2f:33:15:09:
25:4c:e8:f2:16:22:8e:a6:77:8e:89:37:c5:c7:3c:
7f:05:04:9d:c2:89:d5:a3:7e:06:61:9e:d2:8e:69:
c9:fb:4a:ae:13:70:33:87:16:33:e7:16:88:31:6d:
7c:e8:5a:f8:89:d5:52:1a:16:82:fc:c6:55:58:e9:
c7:7c:7f:c2:33:99:3d:64:3b:45:35:e0:09:4a:f0:
12:9b:06:d6:6b:aa:f3:ed:b4:71:81:1f:ab:0f:6b:
28:91:fc:e7:f8:65:59:dd:f7:07:6b:4a:f2:cc:85:
31:89:5c:7f:c3:f1:6e:52:52:84:82:4f:11:4b:28:
89:e5:c4:50:9e:e1:a4:67:dd:96:db:0c:2c:59:00:
46:d6:be:5b:2c:4c:0d:15:4d:79:d2:3a:a0:9c:c8:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F0:B7:23:DA:0F:10:88:66:9A:80:9F:0C:62:0B:AB:2E:61:66:34
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RfC3I9oPEIhmmoCfDGILqy5hZjQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:cc:81:c3:16:24:98:70:21:b2:72:33:60:2a:cf:c1:9c:ea:
da:00:7d:6f:e6:27:f3:00:5d:64:27:1d:41:33:80:cc:cb:fd:
36:b4:46:c3:1b:35:8a:c2:92:d9:92:ed:f2:ac:cd:34:1d:52:
51:c1:97:f6:1a:cf:a2:87:c6:ae:9e:b6:cf:d4:40:c6:c8:3e:
f8:c0:03:f1:d5:50:03:a3:84:83:3d:b0:10:f8:2f:be:54:d4:
51:12:71:fc:9a:d9:ff:3a:3e:a5:89:88:55:6d:9c:a8:9b:93:
56:2a:ff:65:d3:8e:fd:d2:2a:fb:5e:aa:10:6d:74:09:9f:78:
e9:14:fe:8a:52:a7:71:eb:f7:9a:35:a8:bf:65:9d:05:7a:68:
63:25:1c:0d:f9:e5:2a:95:3e:5f:e9:b1:3c:cd:13:c4:e2:35:
2d:2b:80:18:e9:cf:76:7f:87:96:c2:de:51:fb:09:90:5d:41:
54:6f:2f:7d:c0:90:d9:c9:55:65:92:e5:62:ce:ee:f9:72:f9:
33:8e:e3:cf:9b:71:ce:4e:b2:8c:ec:15:37:36:90:f6:e1:eb:
d1:1f:ef:4b:99:92:47:a6:4f:4a:3d:2f:05:f3:6a:b6:b6:5e:
63:fd:34:1f:f7:a3:81:81:0c:cb:f7:b2:67:6a:1e:4a:f3:ac:
ff:6a:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org