Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T4KHULpql40l-w3Q3lYOGsnFtLM.roa
File: T4KHULpql40l-w3Q3lYOGsnFtLM.roa (raw, json)
Hash identifier: uXsVy8UrMdxZWS9fWxaiW3VjjNcB2PsZqvY30fma1O0=
Subject key identifier: 4F:82:87:50:BA:6A:97:8D:25:FB:0D:D0:DE:56:0E:1A:C9:C5:B4:B3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15EB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T4KHULpql40l-w3Q3lYOGsnFtLM.roa
Signing time: Sun 07 Feb 2021 12:07:15 +0000
ROA not before: Sun 07 Feb 2021 12:07:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 211.76.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5611 (0x15eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:07:15 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4F828750BA6A978D25FB0DD0DE560E1AC9C5B4B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:5c:4b:c6:01:30:ce:66:13:2a:f8:4e:64:
ae:b7:2e:74:f7:53:37:42:be:38:c1:66:66:88:49:
71:0a:bb:a5:ed:d0:dc:b5:2d:50:e2:08:33:e7:62:
b6:54:f6:aa:6c:f3:59:d9:13:db:6b:41:51:ae:53:
77:93:c8:bb:ed:fb:f7:e4:c7:9c:91:3e:cd:59:e4:
2e:08:48:8d:b9:49:8a:96:4b:fc:11:1a:bc:eb:1a:
9d:3f:a3:46:c5:04:b5:d6:1e:6e:36:61:0d:52:58:
64:af:f0:b3:ed:79:b5:29:61:b4:ce:7a:fa:cc:f3:
80:9b:2e:84:06:80:e8:ea:d3:8c:55:82:28:b0:05:
52:bf:d3:4e:36:57:64:be:20:28:f0:af:2b:4a:f0:
ca:b9:15:b0:a6:18:80:f5:af:76:22:81:7c:74:11:
c0:69:40:19:bf:84:83:a8:56:3a:72:5b:3c:2b:12:
2a:ce:0e:e0:9d:2d:d6:bd:6c:5a:e8:b6:cb:05:54:
bf:68:0a:1f:39:1d:24:bd:f8:e7:51:ea:2c:50:b2:
23:41:09:ca:25:a2:c6:dd:38:fc:1a:83:b0:4c:71:
cb:44:e0:93:16:d6:c1:a4:e4:17:89:a5:38:18:5c:
85:c9:1c:bf:b9:db:cb:2a:fe:d9:59:08:31:24:dd:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:82:87:50:BA:6A:97:8D:25:FB:0D:D0:DE:56:0E:1A:C9:C5:B4:B3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T4KHULpql40l-w3Q3lYOGsnFtLM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.117.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:37:41:77:8b:6a:64:32:da:7e:06:3b:c1:13:e7:a1:46:63:
f9:6f:16:45:57:60:bd:c4:c8:4a:1a:43:07:aa:1d:e0:f4:8c:
52:40:3b:af:99:45:44:f1:c9:97:1a:d3:c6:9a:8b:b0:1c:86:
02:c2:43:70:9e:dd:0e:a5:86:e7:fd:98:65:c5:45:02:84:0f:
90:e7:4f:58:6b:21:2b:bf:d4:c9:05:e0:7b:af:fd:07:a1:5c:
27:bf:0f:19:02:47:46:5f:7e:51:a7:0d:d9:dc:bc:31:ee:f9:
e9:cd:38:62:8c:0f:59:5b:c4:07:d4:77:4a:c0:fc:0e:fc:43:
54:5c:fe:0b:67:6f:11:6f:15:1f:c9:9b:c9:f8:41:f8:5e:d6:
4c:33:1f:42:5c:31:8f:18:8c:8d:b4:cc:b8:92:d6:0e:67:c2:
16:fa:8b:05:8d:26:f9:9f:54:90:41:33:e3:e3:3c:75:30:16:
d3:28:c7:7a:3d:14:c8:68:93:b5:42:e5:04:0b:d4:1c:70:cf:
b1:a0:1b:22:21:b1:c9:6a:a7:7f:f1:70:a7:7e:e3:31:e0:d1:
8b:80:a6:51:ad:d5:e3:ae:5a:7f:78:b6:c8:ea:fc:2d:df:df:
79:77:3d:a3:fc:e6:b6:fa:ad:ac:81:f6:bb:d8:66:59:b2:97:
35:32:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:29 2023 by rpki-client on console-fra.rpki-client.org