Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/V2BKIDPtQDgQx4cX753LyUMO-nE.roa
File: V2BKIDPtQDgQx4cX753LyUMO-nE.roa (raw, json)
Hash identifier: qG2HnPEpIsfkTYLjQiaDnbGqD40+nbnLCn3gm/ruaRA=
Subject key identifier: 57:60:4A:20:33:ED:40:38:10:C7:87:17:EF:9D:CB:C9:43:0E:FA:71
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21D1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/V2BKIDPtQDgQx4cX753LyUMO-nE.roa
Signing time: Fri 25 Nov 2022 04:40:26 +0000
ROA not before: Fri 25 Nov 2022 04:40:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8657 (0x21d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=57604A2033ED403810C78717EF9DCBC9430EFA71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e7:58:76:48:32:af:98:cb:cc:16:a1:00:d7:
88:62:8c:a4:c6:d3:e0:0e:1e:b9:a9:b8:1d:64:02:
25:0b:9d:c9:58:45:f9:2c:33:55:89:b6:bd:63:89:
7a:51:b4:8e:76:bc:eb:eb:18:27:07:d4:7c:7a:b2:
9d:ca:a7:0d:74:43:00:02:b1:cb:1c:9b:68:21:de:
df:8f:80:f3:c1:2e:37:20:c9:1b:1d:81:87:9e:6a:
c8:71:32:4b:6b:7e:84:d2:98:1e:04:6b:00:43:73:
9d:c1:73:eb:9a:0b:df:e3:21:26:42:c6:c2:67:f5:
a3:80:b0:45:c3:21:7a:c9:8f:86:d1:a1:be:fc:d4:
3d:d7:54:82:bd:6a:7e:d5:26:64:89:c9:2f:40:c5:
46:b7:c3:87:e7:f4:fd:ac:5d:a1:87:d8:ff:83:34:
fb:d6:1e:50:5a:fb:69:87:19:c3:91:25:dc:f2:4f:
69:b3:35:6c:e6:3c:8e:c4:e4:af:97:6a:81:a0:cc:
03:71:9d:23:9e:27:02:de:5c:6a:d6:8a:e3:97:3d:
7f:f8:78:a7:92:73:ca:06:61:31:c6:c3:74:06:6a:
7f:6b:36:91:85:a5:52:65:e9:74:bd:7a:3a:22:ef:
bd:fc:5a:e7:15:c4:e1:47:1e:01:59:d3:78:9a:22:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:60:4A:20:33:ED:40:38:10:C7:87:17:EF:9D:CB:C9:43:0E:FA:71
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/V2BKIDPtQDgQx4cX753LyUMO-nE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.123.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f3:57:08:21:4d:f4:1b:46:04:8d:4b:c5:a6:0b:6a:5a:71:
64:53:bc:36:73:5e:a2:20:3b:fb:fd:d6:0e:30:13:55:fd:32:
c1:08:8d:4e:69:1a:40:8c:14:76:b7:10:a9:5b:a2:49:14:ec:
4c:75:ac:8f:ce:f6:e6:ff:90:b8:b4:72:9c:76:72:e3:d8:44:
9d:9b:44:74:f7:81:6f:4e:b9:b0:ee:90:20:b7:cd:fc:e5:51:
50:af:83:dd:7a:68:82:59:ed:ba:10:cb:b5:bf:20:73:9c:8b:
55:21:d4:de:d3:33:df:f6:eb:d3:ff:c2:35:e0:45:ac:a0:a6:
c6:e4:7c:49:a7:f4:ff:c2:d3:fb:d0:7b:8f:11:ae:24:24:be:
ec:a4:ae:96:e0:77:1b:eb:f0:80:b6:c6:ef:e2:41:21:06:aa:
9b:10:2a:c1:d4:5d:3d:1c:b7:37:22:0c:23:58:2d:08:dc:cc:
dd:9f:d0:d2:59:fb:be:f8:ef:8a:6a:73:67:95:18:f4:fd:23:
9b:5c:f6:91:dd:b6:38:be:98:00:36:2b:11:ce:9c:ca:96:21:
13:5a:72:4e:82:e2:34:64:62:93:d3:fb:55:52:d0:01:c1:a0:
5b:94:20:26:93:b4:50:ad:e8:1f:1e:71:0b:96:62:d6:4e:f2:
1d:85:e4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org