Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WDsf9VNtc-a4IwL7FVpp9DmpriM.roa
File: WDsf9VNtc-a4IwL7FVpp9DmpriM.roa (raw, json)
Hash identifier: qmLwWJ55mkSB+XvrgrYfRCsJcxOX98xpDSsL6qUuVE8=
Subject key identifier: 58:3B:1F:F5:53:6D:73:E6:B8:23:02:FB:15:5A:69:F4:39:A9:AE:23
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 233F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WDsf9VNtc-a4IwL7FVpp9DmpriM.roa
Signing time: Fri 25 Nov 2022 04:42:15 +0000
ROA not before: Fri 25 Nov 2022 04:42:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.112.0/20 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9023 (0x233f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=583B1FF5536D73E6B82302FB155A69F439A9AE23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:58:cb:3c:11:1b:e6:4a:46:f5:c8:91:d1:
24:2b:4a:a1:84:79:e8:53:cd:68:f9:97:16:28:52:
26:59:9c:ac:90:60:1e:d0:9b:92:3a:2d:b4:d5:6f:
b3:4e:6c:0d:1d:94:4b:a2:42:b2:6d:a9:6f:70:e4:
be:02:d1:9e:46:12:4e:77:f8:d3:ce:d1:4b:48:f5:
e3:6b:f5:f3:15:72:36:43:56:48:dd:3f:f4:cb:8a:
10:40:ad:61:6f:bb:56:0b:9a:69:1f:16:ba:d0:c4:
56:32:f9:13:86:cf:0a:cb:59:84:91:be:f3:e5:e4:
8d:ec:0d:e1:4d:87:95:17:bc:e3:8a:3c:05:83:3f:
b4:73:b6:9e:c4:0c:0e:cc:2e:ef:52:d8:a4:4b:8f:
2f:ca:bb:0d:fe:18:a5:b0:b4:af:73:12:cf:13:3d:
20:fa:eb:3a:ed:37:e8:b1:6f:ae:d9:7e:09:a7:3e:
87:48:44:fd:be:98:c8:26:93:4a:67:8e:19:c2:57:
79:b2:6f:b1:65:0c:53:2b:41:f6:a7:be:b4:c3:65:
f9:68:f7:a9:09:a6:ae:f7:ff:80:fd:e9:cf:69:c7:
d1:74:c5:7d:3c:20:bc:49:3e:10:36:a2:55:a4:32:
24:97:41:7d:98:b7:e5:cd:28:88:81:49:77:5b:f0:
47:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3B:1F:F5:53:6D:73:E6:B8:23:02:FB:15:5A:69:F4:39:A9:AE:23
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WDsf9VNtc-a4IwL7FVpp9DmpriM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.112.0/20
Signature Algorithm: sha256WithRSAEncryption
21:29:3d:80:14:cd:50:d5:01:01:fe:7b:63:a5:33:0b:92:e2:
d4:99:60:6b:c1:17:3f:95:05:21:18:7e:58:a2:88:b9:30:8b:
b1:5c:75:a1:cd:94:c4:ea:6e:10:20:3a:cc:a5:f3:18:eb:9d:
17:f4:cb:b7:3c:59:59:fa:49:3c:f6:15:a6:ae:67:85:aa:aa:
19:bd:bd:4b:a7:d2:16:1b:3c:59:ba:e7:30:f8:ec:20:69:d8:
48:28:72:ad:ce:22:a1:3a:f3:97:96:95:bf:68:77:64:f3:57:
e2:5e:bc:87:d5:94:af:30:63:94:bb:42:78:66:7f:3e:35:ac:
88:e7:ab:d4:d7:22:de:35:74:29:99:38:94:67:e4:7c:1f:e4:
1d:41:8b:b0:c1:07:0f:ba:fd:67:10:d9:5e:e2:99:ce:c8:57:
f8:03:35:26:34:12:9a:fa:95:ea:4f:63:eb:f1:da:e0:2b:52:
0a:a6:20:a9:a7:64:d6:cb:fa:17:1c:5a:b9:6f:02:c8:97:f8:
b9:11:16:86:20:07:31:96:12:38:8b:eb:71:a4:1d:b1:bb:63:
1d:e5:a0:c3:54:bf:bd:a8:72:81:8f:86:d5:5b:dd:53:76:7b:
3e:47:9a:e2:61:67:32:60:48:0e:cd:6a:b2:0c:13:5a:ca:5e:
22:06:3d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:20 2025 by rpki-client