Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/akL-9jOljXR1rAqSUuERE813MWE.roa
File: akL-9jOljXR1rAqSUuERE813MWE.roa (raw, json)
Hash identifier: /E2s2odo288tGCnO7MZCDJPoSX+Z2jJbouBaaywUFe4=
Subject key identifier: 6A:42:FE:F6:33:A5:8D:74:75:AC:0A:92:52:E1:11:13:CD:77:31:61
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2274
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/akL-9jOljXR1rAqSUuERE813MWE.roa
Signing time: Fri 25 Nov 2022 04:41:11 +0000
ROA not before: Fri 25 Nov 2022 04:41:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8820 (0x2274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6A42FEF633A58D7475AC0A9252E11113CD773161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:61:47:3b:4f:1e:54:64:b6:17:47:a1:de:
91:35:bb:25:8c:36:c1:17:8d:c5:a1:86:f7:4f:dc:
d4:50:76:61:f5:33:ab:c0:5c:f1:bc:1c:af:74:73:
45:0d:88:d1:e1:dc:6b:5a:cb:bf:d3:c0:9e:e4:9b:
3f:55:da:f7:76:91:87:e5:ad:f6:d6:cc:90:ce:71:
b4:f7:88:be:fd:77:56:b1:f3:53:45:d5:9f:8d:50:
71:29:44:3b:22:41:51:c2:33:d3:ad:b3:bf:41:18:
0f:2c:47:bf:38:fa:ac:2d:1a:bd:8e:9b:e6:5d:8a:
99:d8:1b:2b:14:52:43:a0:36:fa:0a:58:58:db:28:
8e:06:14:60:0c:82:da:9c:c2:6c:7c:27:12:55:ac:
fe:3e:92:27:f5:8c:0d:d2:0c:98:25:cb:a1:7f:89:
9e:a7:92:52:af:2d:aa:40:ee:2b:dc:05:df:66:53:
b7:e0:45:ea:e0:7e:ad:cb:65:63:86:65:19:b2:15:
f1:54:76:bc:d1:34:af:a7:ba:53:8a:86:27:14:a2:
22:b5:12:96:02:a9:62:c1:c2:b3:17:7f:46:b3:d3:
bd:b1:b5:c9:7c:03:df:60:80:aa:16:e9:0a:7d:fa:
00:63:fa:71:03:96:95:1f:5f:b8:40:ba:08:0d:70:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:FE:F6:33:A5:8D:74:75:AC:0A:92:52:E1:11:13:CD:77:31:61
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/akL-9jOljXR1rAqSUuERE813MWE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.122.0/24
Signature Algorithm: sha256WithRSAEncryption
79:96:aa:52:c9:eb:a6:86:a8:b6:f3:3e:ed:96:c7:3a:50:67:
a9:be:85:6f:30:2b:69:00:eb:52:33:96:1a:d4:fc:d1:2f:0f:
bb:a2:c1:13:55:d0:cf:e0:f3:1e:82:5b:fa:97:d4:0a:e6:13:
09:de:de:45:47:1d:b6:4f:61:2e:0f:c3:18:73:a0:7f:63:ca:
3e:76:ae:a2:c8:e3:99:92:27:f1:e9:80:43:b5:ef:9e:09:ab:
72:87:cb:ab:6b:f5:d9:49:ef:2b:7d:1f:c5:06:3e:f1:ba:59:
6d:32:8c:8e:a1:a5:2a:09:d9:ff:c5:6a:4f:6c:80:5a:4c:b6:
43:30:b8:9d:fc:3c:5f:6f:02:0e:ca:d0:69:d3:88:e8:63:e9:
3d:58:a1:35:b3:ce:d6:eb:ed:8b:e9:4f:42:6e:4a:34:0e:46:
e4:33:f4:a9:d3:3a:0b:f1:f2:7b:95:7c:cd:ea:20:3c:3e:64:
25:7a:ae:77:45:d7:2b:0e:27:c6:1e:b8:78:63:52:99:d6:4b:
8b:ff:14:ce:dd:1d:8a:01:8f:6b:dd:10:b4:6f:1d:e3:5c:d8:
20:3c:bb:23:52:67:a7:91:de:3c:57:81:99:a1:26:2d:c3:a6:
7e:64:ac:f6:12:ad:22:85:c3:18:85:0e:35:ae:dd:8f:e5:d3:
a2:93:07:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org