Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TDqNceeU8T8PXI6iWr2JFhEn29Q.roa
File: TDqNceeU8T8PXI6iWr2JFhEn29Q.roa (raw, json)
Hash identifier: Vmgf4iIg5w3Tb/3d/WQb7PGMqUpXFIeCgaDKumtrdzo=
Subject key identifier: 4C:3A:8D:71:E7:94:F1:3F:0F:5C:8E:A2:5A:BD:89:16:11:27:DB:D4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 202D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TDqNceeU8T8PXI6iWr2JFhEn29Q.roa
Signing time: Fri 25 Nov 2022 04:38:24 +0000
ROA not before: Fri 25 Nov 2022 04:38:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 211.76.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8237 (0x202d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4C3A8D71E794F13F0F5C8EA25ABD89161127DBD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:c0:62:56:2a:4c:6d:e2:58:9b:db:b6:50:
74:4c:2b:f2:a5:f7:49:86:e1:4f:d7:a5:0d:6c:b8:
aa:f2:07:6b:e8:45:5c:ad:25:fd:39:70:f0:83:91:
ac:e0:11:75:da:5f:2d:53:06:42:0a:8e:2e:e0:9a:
48:36:1f:93:2d:49:55:86:b6:1b:68:44:87:d9:cf:
c9:32:d7:bf:9a:78:72:33:c2:d3:f9:f4:a1:2b:ff:
58:5f:23:5b:8d:63:d8:66:29:bd:d4:22:82:e0:8a:
60:6c:f9:13:28:17:c6:95:1f:6b:0b:3a:11:3e:da:
96:dd:6c:33:a5:de:f9:21:84:09:4c:60:7e:7d:0f:
5f:b8:57:45:d8:8a:16:8b:8e:4d:9e:ae:75:40:44:
19:d9:87:67:50:89:43:de:41:45:db:f0:1f:8d:e3:
28:80:a5:2a:f1:aa:b5:bd:17:c6:99:da:16:09:61:
ef:c0:9e:d6:d0:60:4a:11:11:fa:e4:cd:12:bf:8f:
47:26:93:0f:62:dc:d5:09:26:ae:7a:0a:d5:1d:fc:
67:eb:24:09:39:55:18:fc:4f:aa:c4:e3:bd:5f:e3:
79:b7:37:4a:ee:d5:33:80:67:af:9c:aa:06:5d:95:
4b:35:3c:7c:b0:58:ad:76:32:35:c2:6c:03:22:f8:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3A:8D:71:E7:94:F1:3F:0F:5C:8E:A2:5A:BD:89:16:11:27:DB:D4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TDqNceeU8T8PXI6iWr2JFhEn29Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.112.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:b3:54:63:a9:b2:10:83:9e:ed:35:1a:56:ad:66:55:f7:9e:
a4:76:c5:87:89:2b:e9:04:4a:1e:4d:95:70:02:6b:5d:5a:2e:
c6:c3:70:6f:e5:52:83:86:20:df:42:52:28:4f:49:95:9e:66:
f0:58:ad:37:66:f2:4b:3b:44:61:65:ee:2d:7b:e0:ab:3b:19:
63:4b:8f:05:8a:d5:0a:65:e3:6c:04:49:92:7c:ff:35:07:d5:
6d:71:d4:0d:c3:97:0c:3a:4e:19:21:47:4b:46:5c:9f:ac:fd:
95:75:55:70:8c:45:13:76:74:98:b7:99:43:a3:65:30:cd:84:
67:74:10:6e:e7:12:70:5d:d0:28:58:c2:67:8a:3b:a5:3e:5a:
1e:7e:2f:b3:d5:c7:b1:a5:10:bb:b7:bd:4e:e5:aa:e2:5a:4a:
90:59:73:6f:65:5f:5a:12:91:bb:49:9f:b7:a0:35:62:93:77:
b7:1f:2d:7c:24:87:d1:07:d1:e9:0a:b5:42:ad:6e:36:a1:ff:
a7:b1:de:ab:f2:10:2f:55:c2:f1:76:2b:c5:05:a0:b8:13:32:
a3:6e:03:f0:bb:15:fb:4f:13:2f:75:fc:a3:e4:15:31:46:74:
79:0b:da:4f:dd:6d:6e:ae:64:b2:65:f8:de:e5:92:d2:84:fc:
e5:e7:6c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org