Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UYMZEsnlfgk3f_FH40hWmN-jJEs.roa
File: UYMZEsnlfgk3f_FH40hWmN-jJEs.roa (raw, json)
Hash identifier: pg24QmRfogO+7nJ6wF3n6qeaCjZVT9xriS6STfkxKdk=
Subject key identifier: 51:83:19:12:C9:E5:7E:09:37:7F:F1:47:E3:48:56:98:DF:A3:24:4B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2099
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UYMZEsnlfgk3f_FH40hWmN-jJEs.roa
Signing time: Fri 25 Nov 2022 04:38:54 +0000
ROA not before: Fri 25 Nov 2022 04:38:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.120.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8345 (0x2099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=51831912C9E57E09377FF147E3485698DFA3244B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:e1:b8:21:a9:8c:a0:a5:bb:9b:8d:b4:7d:
6c:30:0f:e5:25:54:06:e4:92:85:69:5f:08:6f:55:
7e:70:51:cf:de:9d:61:e0:02:87:cb:c4:28:c8:3c:
a7:bb:22:e0:cb:6c:fb:cc:75:bc:b0:94:dd:fc:92:
c9:77:d0:de:97:af:ff:6a:87:4a:3a:d0:ab:d4:9c:
bd:cd:34:2d:e0:82:06:5a:44:98:cf:7b:37:26:1e:
f8:36:cf:1b:1f:86:b2:4a:72:c6:81:54:b7:aa:e4:
71:55:a4:19:4e:22:ea:31:81:a2:49:89:c6:5e:81:
6a:d8:ef:29:27:8c:fc:e5:d5:af:86:f1:c5:5d:3c:
53:1b:75:30:44:ae:8f:18:66:66:47:9f:7f:40:28:
10:e6:ad:f2:e5:c7:3f:10:45:64:30:bc:ff:0a:2b:
4b:13:26:61:df:72:bc:49:a2:5a:11:ca:eb:8f:4e:
af:72:8a:f6:b0:3b:82:a5:3c:8e:d6:48:81:d2:9c:
9a:5b:0b:59:1a:99:79:a2:52:11:50:22:1f:59:cb:
f3:f6:df:d7:17:f1:c0:1f:fc:77:43:bc:bf:ed:75:
46:30:17:2b:0b:08:50:42:1a:36:a4:09:6e:81:26:
fa:92:c9:c8:b2:a0:80:eb:b1:91:3b:97:cb:11:62:
9b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:83:19:12:C9:E5:7E:09:37:7F:F1:47:E3:48:56:98:DF:A3:24:4B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UYMZEsnlfgk3f_FH40hWmN-jJEs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.120.128/25
Signature Algorithm: sha256WithRSAEncryption
38:96:e0:a5:3a:86:7d:e0:8a:fa:16:4c:24:6a:1e:3b:11:70:
b4:4d:7a:ef:4c:0b:68:a9:9c:b5:fd:d3:39:e3:98:2d:ac:68:
e5:14:e4:f1:14:85:5b:e5:84:ec:2a:9e:fe:ad:f3:04:bf:9d:
92:7d:ad:2e:70:69:2a:ba:4e:88:43:f3:80:9e:53:52:87:34:
13:ab:30:fe:b9:c0:0d:e4:44:d5:17:73:7e:83:9d:d2:16:73:
6e:17:a5:6a:da:bd:b6:88:05:39:d5:d9:c6:ae:d6:c0:ae:e8:
47:b5:54:e4:79:48:6e:b9:93:94:13:69:47:9c:9f:a7:01:55:
0b:68:5c:d8:69:ee:fa:aa:32:d1:1d:73:a6:dd:8a:01:9b:df:
f7:2c:84:c8:79:64:b1:58:ef:2c:f1:6d:e9:0d:c4:be:bf:d7:
f1:5a:de:65:4f:dd:93:12:80:81:9a:09:a8:c8:13:f9:c5:7a:
a6:c6:0a:8e:51:27:08:54:cb:c8:76:f4:c0:b2:b1:9b:56:56:
9b:f6:bb:75:a0:ae:ca:71:0c:c3:5f:10:05:6d:4d:2f:1b:d6:
ba:33:dd:b8:e1:e2:34:43:d4:3d:54:e3:51:ed:0a:71:7a:90:
a1:6b:ef:fd:1e:3d:01:78:6f:ce:bc:1f:74:20:7c:fa:ed:f9:
6f:ce:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org