Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/alFjJImJkxlEWm6VMIVlQHJT7Ig.roa
File: alFjJImJkxlEWm6VMIVlQHJT7Ig.roa (raw, json)
Hash identifier: JJ3zaHGWiI3fzEsDGdYd23DsmqsFmycHpYvMniSTDYw=
Subject key identifier: 6A:51:63:24:89:89:93:19:44:5A:6E:95:30:85:65:40:72:53:EC:88
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2340
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/alFjJImJkxlEWm6VMIVlQHJT7Ig.roa
Signing time: Fri 25 Nov 2022 04:42:15 +0000
ROA not before: Fri 25 Nov 2022 04:42:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.124.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9024 (0x2340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6A51632489899319445A6E95308565407253EC88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:aa:57:21:33:e4:2b:e4:c2:e6:d6:88:1c:
c6:d4:f2:da:f1:90:a5:c6:df:c3:3f:34:b2:f7:fa:
3b:71:1c:35:90:25:98:07:b2:a3:b1:2a:59:8c:16:
aa:80:5b:47:35:1d:f2:ff:d2:74:e9:a7:88:3f:3f:
93:18:68:df:c2:cb:c2:0f:3a:a9:77:26:b4:c8:04:
47:5d:6b:62:9b:d0:41:7f:55:b4:50:41:3d:e4:2e:
7d:ad:8e:86:34:55:66:8f:29:ea:41:73:bc:d7:75:
1b:0f:e6:d7:4d:da:4c:1b:a7:e6:cf:b7:2d:6a:2c:
2c:c9:df:8b:62:b5:f9:f1:29:99:b0:2d:c8:8b:ff:
b4:43:d9:34:ac:b5:f2:25:5a:02:3d:8a:7a:2f:61:
24:c2:17:e9:44:7a:b8:6c:43:ac:90:d0:f7:f6:89:
a3:a9:1a:40:ce:5a:ed:70:b8:79:a4:de:85:4c:61:
6a:7c:3a:7e:ad:ee:17:44:2a:c7:04:27:0d:03:63:
d3:5b:9b:fe:41:0b:45:b7:73:45:49:c4:d2:d1:fd:
1f:bb:74:24:65:61:75:73:7f:d5:b4:9c:93:39:d0:
d7:b1:fb:b7:50:6a:b7:40:c2:ba:1e:fa:eb:66:9f:
8f:c9:55:8e:53:6c:68:8c:4e:c2:c6:51:d2:27:e7:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:51:63:24:89:89:93:19:44:5A:6E:95:30:85:65:40:72:53:EC:88
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/alFjJImJkxlEWm6VMIVlQHJT7Ig.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.124.128/25
Signature Algorithm: sha256WithRSAEncryption
5f:23:2b:66:55:66:21:78:b3:6d:d8:74:a8:b7:a8:8d:7f:c1:
f5:ab:74:7a:62:cc:ca:cf:a8:3e:10:70:f9:06:16:6f:84:19:
e7:0c:82:55:fc:8e:08:51:3c:f5:a4:23:60:29:52:81:a0:98:
4d:e4:89:5e:b8:81:25:43:40:f5:5e:0a:b6:82:e0:be:dc:7f:
2f:8b:71:6d:10:fd:3d:6c:bf:29:d6:b6:0b:75:93:82:5f:3d:
21:26:d6:95:fc:96:a9:a3:93:d4:5b:0a:7d:f0:0d:01:77:f0:
22:83:0d:e0:49:aa:e3:00:28:e5:a6:25:2c:06:73:7d:29:a2:
05:84:8e:52:5d:a2:47:84:99:63:e1:b0:2a:6d:0a:98:7d:03:
61:52:69:26:69:c5:59:ab:52:e9:a8:aa:3c:9b:f5:ee:5b:fb:
34:7b:fb:8a:91:41:1e:b2:88:b9:11:b7:94:43:e8:21:65:6d:
40:34:92:d3:59:d7:5f:68:1a:27:ae:cc:b1:e1:4a:66:cd:c9:
ea:e6:03:7b:3b:e3:e8:ba:2f:ee:e6:dd:74:4c:62:70:42:35:
92:93:5e:e3:0d:74:73:fe:52:16:56:53:f6:71:b4:32:55:b2:
0a:14:a2:9d:40:04:5c:05:99:00:d8:c9:6b:a8:bb:e0:2d:e3:
71:0b:a2:ab
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICI0AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQyMTVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDZBNTE2MzI0ODk4OTkz
MTk0NDVBNkU5NTMwODU2NTQwNzI1M0VDODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLxKpXITPkK+TC5taIHMbU8trxkKXG38M/NLL3+jtxHDWQJZgH
sqOxKlmMFqqAW0c1HfL/0nTpp4g/P5MYaN/Cy8IPOql3JrTIBEdda2Kb0EF/VbRQ
QT3kLn2tjoY0VWaPKepBc7zXdRsP5tdN2kwbp+bPty1qLCzJ34titfnxKZmwLciL
/7RD2TSstfIlWgI9inovYSTCF+lEerhsQ6yQ0Pf2iaOpGkDOWu1wuHmk3oVMYWp8
On6t7hdEKscEJw0DY9Nbm/5BC0W3c0VJxNLR/R+7dCRlYXVzf9W0nJM50Nex+7dQ
ardAwroe+utmn4/JVY5TbGiMTsLGUdIn58KFAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUalFjJImJkxlEWm6VMIVlQHJT7IgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FsRmpKSW1Ka3hsRVdtNlZN
SVZsUUhKVDdJZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT
THyAMA0GCSqGSIb3DQEBCwUAA4IBAQBfIytmVWYheLNt2HSot6iNf8H1q3R6YszK
z6g+EHD5BhZvhBnnDIJV/I4IUTz1pCNgKVKBoJhN5IleuIElQ0D1Xgq2guC+3H8v
i3FtEP09bL8p1rYLdZOCXz0hJtaV/Japo5PUWwp98A0Bd/Aigw3gSarjACjlpiUs
BnN9KaIFhI5SXaJHhJlj4bAqbQqYfQNhUmkmacVZq1LpqKo8m/XuW/s0e/uKkUEe
soi5EbeUQ+ghZW1ANJLTWddfaBonrsyx4Upmzcnq5gN7O+Poui/u5t10TGJwQjWS
k17jDXRz/lIWVlP2cbQyVbIKFKKdQARcBZkA2MlrqLvgLeNxC6Kr
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org