Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZqBFiUmz2C6Aqdsea0BUIuKur2U.roa
File: ZqBFiUmz2C6Aqdsea0BUIuKur2U.roa (raw, json)
Hash identifier: mjBzA/QP6polNLD4EgS5iUpQlH9MbOGuyKqYGW5nubg=
Subject key identifier: 66:A0:45:89:49:B3:D8:2E:80:A9:DB:1E:6B:40:54:22:E2:AE:AF:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZqBFiUmz2C6Aqdsea0BUIuKur2U.roa
Signing time: Thu 15 Sep 2022 02:52:24 +0000
ROA not before: Thu 15 Sep 2022 02:52:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=66A0458949B3D82E80A9DB1E6B405422E2AEAF65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:41:ff:d5:eb:41:9e:90:a3:3f:7a:6c:06:f2:
27:73:1f:e4:49:e1:46:a6:ac:5c:26:ed:70:49:64:
0e:1e:67:38:f9:37:82:01:71:1f:35:69:a1:b4:15:
eb:d0:34:37:6e:f7:8f:cb:8d:41:90:a8:10:5c:e1:
1b:c9:6d:e6:9d:2d:0c:2e:92:88:73:a6:b3:16:6e:
79:cf:61:c3:22:8a:27:5c:d2:e1:1e:86:ed:22:05:
89:52:85:8e:0f:fb:32:43:8e:b9:9a:69:8e:ad:11:
25:23:8b:8d:4c:be:cd:88:f5:98:07:d2:0d:ef:3e:
c9:73:7c:01:9c:e5:fe:ce:17:a3:36:e6:33:1f:75:
34:c3:70:96:1c:b6:3a:e0:8a:72:a0:e1:ab:60:4a:
81:41:84:50:29:0f:b7:99:82:f5:93:60:83:e6:df:
4b:28:b3:8d:b4:da:ac:80:34:0a:5f:eb:67:fe:f8:
b9:68:fb:ac:7e:83:dd:32:de:72:ce:3f:5e:27:82:
27:b0:7b:ab:7d:20:c8:76:c5:31:5a:79:4d:1a:b2:
57:48:50:79:1e:f8:ba:99:d7:97:b7:e8:e3:30:c1:
55:16:9c:7c:4a:b3:53:ac:3e:d4:f6:3d:b6:fc:ca:
f7:d3:97:bd:f5:80:3e:de:e4:c9:c7:59:70:50:67:
e2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A0:45:89:49:B3:D8:2E:80:A9:DB:1E:6B:40:54:22:E2:AE:AF:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZqBFiUmz2C6Aqdsea0BUIuKur2U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.123.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:0c:5c:40:e8:2f:56:1d:89:f6:e0:db:37:a0:a4:73:7b:e0:
e9:3a:61:bf:6d:60:50:49:3f:02:a0:63:11:e2:13:12:6c:67:
97:5c:e8:42:c3:0b:f1:73:ee:37:f7:82:aa:67:94:ab:7d:f1:
5a:b0:f1:c7:12:71:d7:e9:9f:c9:c5:f9:51:b8:20:8b:e5:e6:
36:c7:a5:08:39:fe:85:37:e3:52:5c:ac:13:76:0e:8e:dc:54:
09:c4:87:a4:55:fa:0d:14:fc:89:3e:08:da:a6:ee:8d:c7:7c:
c1:20:3c:74:80:ce:a4:83:fe:76:ee:40:66:8e:6c:33:10:c0:
19:fe:f7:74:8b:e3:37:46:00:66:99:a6:45:e0:ae:2d:b6:50:
77:e2:53:fe:76:75:3e:08:26:a2:9f:5c:26:8c:f9:48:21:65:
cc:7d:ba:0f:99:45:1b:87:75:f5:c2:96:4b:42:9a:83:03:94:
ab:43:37:c8:99:ae:22:c3:4f:d5:58:b5:d5:0e:bb:19:a6:01:
2d:27:97:a8:c8:25:a5:22:75:b6:bf:73:a4:b0:46:2a:6e:42:
5c:97:cc:50:fc:8b:55:73:ec:05:04:77:e1:7e:7c:6c:74:a3:
19:9c:38:2c:cd:78:67:c3:0c:3f:26:3d:35:63:d2:73:c9:93:
b7:a3:a4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org