Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_oXp97QmhXEHKAyC74NbXMl_A3I.roa
File: _oXp97QmhXEHKAyC74NbXMl_A3I.roa (raw, json)
Hash identifier: ya4Z3JQfXeZ3KX7vXspDTt747+ZXjRg2DYIH45Ack7U=
Subject key identifier: FE:85:E9:F7:B4:26:85:71:07:28:0C:82:EF:83:5B:5C:C9:7F:03:72
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_oXp97QmhXEHKAyC74NbXMl_A3I.roa
Signing time: Thu 15 Sep 2022 02:44:50 +0000
ROA not before: Thu 15 Sep 2022 02:44:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 211.76.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FE85E9F7B426857107280C82EF835B5CC97F0372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:1c:fe:d5:da:ee:1e:9a:1a:b0:23:4b:ea:
ad:e4:6f:da:79:12:85:a4:a9:77:de:19:bc:43:20:
a5:45:cf:95:61:40:e2:23:1c:18:d9:23:3e:e1:e4:
3d:50:a9:92:77:ec:15:9a:c0:f1:b9:87:a9:a1:39:
b3:7e:b1:01:d2:8e:b6:46:ec:68:85:6f:b5:05:80:
5e:76:c0:11:32:f3:4f:e4:5b:fc:32:a8:72:f3:3a:
9a:b0:9b:5f:b8:07:2d:92:5d:e6:b3:1d:52:79:20:
ab:70:9c:d1:d2:79:27:c9:20:9c:f3:45:e1:13:31:
13:79:2d:62:e5:a8:5d:0d:16:ee:6f:f1:51:5b:96:
67:48:64:dd:c3:04:03:f3:4b:cc:74:a4:fb:60:e9:
ec:cd:ea:ff:6c:95:a8:18:a8:9d:6f:82:b9:39:20:
cd:ce:9b:53:29:b9:80:b1:b4:f3:55:7c:83:28:c3:
16:9b:d7:12:80:7a:ed:e6:49:b2:06:a2:d8:5d:e8:
67:41:29:e5:cf:fe:12:29:f2:20:9f:36:a9:37:c2:
89:8c:0a:4b:c8:73:dc:87:7a:74:30:96:44:1c:7e:
ab:5a:6b:8a:a4:4f:ab:7d:0e:e2:a0:63:ed:11:8b:
c0:9a:d7:8c:78:9e:e7:b3:59:1c:2a:b6:01:44:36:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:85:E9:F7:B4:26:85:71:07:28:0C:82:EF:83:5B:5C:C9:7F:03:72
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_oXp97QmhXEHKAyC74NbXMl_A3I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.112.0/20
Signature Algorithm: sha256WithRSAEncryption
54:dc:21:47:73:b4:c5:97:f5:30:58:f3:d8:26:6b:44:7d:ff:
83:46:0c:d0:4b:91:7d:e5:68:5b:7e:d0:08:e0:37:a9:e4:51:
af:c1:f5:f4:f1:2c:bc:de:40:b3:2b:0e:cc:fe:25:ac:57:eb:
3b:85:cb:d1:45:7f:9b:11:db:7e:08:29:62:41:0b:b8:0c:87:
60:43:cc:ae:c3:fb:eb:e8:79:27:8c:0e:16:e9:4b:f4:c8:69:
55:9d:ef:40:fe:31:f7:15:a9:7c:83:c1:fd:b4:6c:17:34:84:
6e:07:2e:72:5e:4b:71:dc:56:2f:e1:cf:f7:53:fc:59:9c:7c:
62:9a:49:21:10:67:0d:c7:9c:9c:e8:d5:e3:aa:36:76:c7:3d:
2d:99:37:2d:80:16:2d:9f:9d:cb:d1:c6:fb:bd:11:3e:30:be:
b4:2a:bc:0f:44:12:4d:16:ec:d5:4f:c2:65:08:0c:00:6e:92:
dc:39:e2:ed:0c:a1:7e:d5:f7:01:99:9a:65:23:4a:47:5b:85:
e8:49:92:0a:9f:1c:ac:6a:83:64:4a:77:fb:4d:fc:16:9e:82:
f1:0d:95:dd:3f:12:bd:f6:d5:a1:d9:56:52:58:85:9a:57:37:
1c:de:24:dd:2c:1a:a6:d0:94:75:bd:14:b9:9a:41:c2:40:b5:
78:95:df:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org