Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WvQvmm3_LC0gs2921l8zwpfsdxs.roa
File: WvQvmm3_LC0gs2921l8zwpfsdxs.roa (raw, json)
Hash identifier: st1zBrQI/kG0MN3+2NylchlJdQzzmtLfVotrN9uq51M=
Subject key identifier: 5A:F4:2F:9A:6D:FF:2C:2D:20:B3:6F:76:D6:5F:33:C2:97:EC:77:1B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WvQvmm3_LC0gs2921l8zwpfsdxs.roa
Signing time: Thu 15 Sep 2022 02:53:10 +0000
ROA not before: Thu 15 Sep 2022 02:53:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5AF42F9A6DFF2C2D20B36F76D65F33C297EC771B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:6d:0c:26:35:ea:8a:b2:ab:84:07:8b:ec:
81:73:85:81:ad:af:ca:f0:d1:76:f2:54:b7:fb:e0:
1b:5f:31:f3:1f:42:d8:d7:ad:c3:c8:0b:03:55:cc:
b7:fe:3b:be:85:e0:f7:cf:12:f9:3f:ac:46:81:8e:
36:b2:28:26:20:bc:f2:c3:d1:22:92:94:df:5d:ab:
82:b9:43:8c:f5:b1:b8:65:0e:60:09:18:a1:af:03:
b5:78:5b:15:16:97:f6:21:27:be:ed:c7:c9:ab:04:
8d:77:49:d3:ce:56:4a:cf:1c:c1:74:58:fe:e3:1e:
3e:e1:25:2e:0d:d1:bc:15:75:f1:3c:02:0b:dc:aa:
09:b7:43:02:30:60:6f:55:78:a5:e1:71:84:f3:22:
05:ca:06:3c:75:b5:b2:5a:3f:44:e7:24:4d:e4:31:
aa:51:28:79:c9:ee:98:55:72:6b:c0:53:a7:2f:8e:
71:d0:ad:a3:b1:17:96:5b:55:ad:e6:9d:c4:d5:56:
5d:ac:3f:d3:3e:64:e6:1d:24:ed:67:42:80:71:e4:
81:93:fc:7b:ea:92:8e:73:46:99:6e:1a:70:4a:ff:
ac:20:36:39:dd:87:1c:fe:8f:cd:53:e6:d3:ce:c2:
6e:ac:7b:2a:db:fe:12:cc:c6:c6:f9:f7:98:22:d9:
ca:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F4:2F:9A:6D:FF:2C:2D:20:B3:6F:76:D6:5F:33:C2:97:EC:77:1B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WvQvmm3_LC0gs2921l8zwpfsdxs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b6:7d:87:85:0d:1f:c9:56:51:45:61:65:c1:44:61:e9:bc:
db:01:17:4c:02:a1:06:d8:c6:b6:cb:ed:aa:8e:4f:69:a9:60:
fe:c7:6c:45:8f:a2:08:97:f2:2b:e6:76:e4:25:8a:f4:02:f4:
ec:e1:14:47:61:ee:b3:08:16:7e:13:f7:13:42:66:d6:cb:0a:
4f:9b:b4:7d:1e:8e:01:f9:fb:3a:1c:ef:51:21:4c:4d:26:de:
8e:80:3a:c3:db:b5:4a:f2:62:cc:b2:4f:4f:7e:07:50:4a:d2:
d0:22:d7:a6:18:eb:a6:26:56:4c:e1:04:0d:88:77:ed:eb:f8:
86:5e:97:b9:c0:21:5e:e4:c9:e3:13:0f:84:b6:94:ec:c5:6b:
92:f3:19:68:d0:8b:ee:e1:d9:5e:10:79:04:35:c6:26:b1:a9:
ff:38:74:87:94:36:e2:0b:38:0b:6d:15:7a:50:86:c3:a3:16:
02:1a:62:86:41:c5:42:3e:88:78:1a:71:13:fa:7f:5f:b6:10:
da:96:87:b1:77:07:b1:24:c6:96:d8:e7:a8:fb:83:24:11:c8:
1d:4e:33:56:78:31:09:53:c6:8a:45:2d:24:a6:98:8b:de:66:
67:88:ce:8b:1e:7c:4c:d5:65:46:22:46:6c:e5:af:4b:61:69:
74:b7:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org