Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d2nxXLNIxxRzvA2uay-XDMPflfg.roa
File: d2nxXLNIxxRzvA2uay-XDMPflfg.roa (raw, json)
Hash identifier: 2MfNApz1hn2gfJZBOzfiixyDhxwukpzxDcI7RS+USu4=
Subject key identifier: 77:69:F1:5C:B3:48:C7:14:73:BC:0D:AE:6B:2F:97:0C:C3:DF:95:F8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1431
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d2nxXLNIxxRzvA2uay-XDMPflfg.roa
Signing time: Sun 07 Feb 2021 11:57:43 +0000
ROA not before: Sun 07 Feb 2021 11:57:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 211.76.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5169 (0x1431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7769F15CB348C71473BC0DAE6B2F970CC3DF95F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:07:39:18:ff:72:88:b2:bd:63:8a:90:a8:
c9:48:f5:8e:e2:ec:60:00:76:d8:5e:fd:ca:62:fe:
3e:11:25:8e:06:be:1e:35:0a:b6:70:b2:95:8c:94:
ee:6b:fc:41:59:ab:67:45:b5:33:8a:75:ed:ba:03:
72:e8:a3:66:e1:fc:8f:c7:e1:10:e4:5c:05:23:1f:
ca:8c:e5:51:59:92:be:e0:cd:b8:43:eb:1e:62:94:
60:e9:64:f9:5d:09:67:eb:a4:d6:b4:9f:25:1b:70:
86:14:e9:44:ff:0c:fd:25:ff:61:f2:7a:cf:8f:67:
ec:30:6b:43:f2:d6:d8:70:42:39:78:7a:33:1c:45:
6f:02:8f:75:11:25:80:79:2b:7f:6b:fb:4f:54:fe:
49:48:5e:ca:6c:b4:72:91:52:d5:c1:7d:64:93:6f:
00:fc:02:10:69:d0:6c:ec:06:ae:b4:85:44:88:e2:
30:54:e9:40:5e:d2:fc:ff:46:9a:14:65:f1:70:dc:
da:df:2f:07:6c:1e:86:6c:35:7e:3f:c4:c7:44:5b:
e0:2f:46:93:11:6a:ab:d1:8a:bc:4e:23:1d:e1:71:
e2:02:1a:b3:1d:b8:02:13:e4:bb:8a:53:d4:d3:dd:
09:45:5b:51:d6:5e:cc:c7:40:58:87:20:87:50:6b:
62:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:69:F1:5C:B3:48:C7:14:73:BC:0D:AE:6B:2F:97:0C:C3:DF:95:F8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d2nxXLNIxxRzvA2uay-XDMPflfg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.114.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d4:0c:24:0c:17:a2:98:db:73:5b:f4:6b:e0:ec:c3:46:0c:
1c:db:6a:73:51:9f:3d:b8:b2:76:8e:1d:c4:f3:66:68:5d:51:
57:42:58:f3:ec:2a:cf:1f:ea:dd:e4:3e:50:ba:9f:f7:b6:e2:
49:66:94:fe:9a:4e:14:50:fb:96:9a:77:07:41:94:56:cb:9b:
43:af:19:cd:d1:10:92:bf:d3:15:51:b3:94:e9:86:ed:7d:10:
5f:fa:a6:7d:89:69:36:32:1b:dc:12:38:52:a6:69:2b:d6:75:
82:9e:21:cb:04:45:3a:17:56:3d:3b:04:1a:7b:2b:e6:74:64:
29:e2:d1:b8:ec:41:d1:a7:01:f4:af:92:e1:36:c8:13:a2:e0:
1d:10:8f:7d:77:36:c3:e2:ae:f1:86:c3:fd:85:a3:c3:42:0a:
57:50:14:4d:5e:65:ca:b3:ce:bc:57:3e:be:aa:81:79:89:f2:
53:5c:de:ac:7f:08:64:cc:85:00:42:9e:7d:c8:3b:11:dc:df:
8d:ee:78:cd:9d:2a:5b:ea:d9:e5:1a:c2:73:5c:0f:58:7e:6c:
59:c2:90:5e:46:ed:a1:99:31:f9:79:75:01:a8:5b:85:0c:f1:
2e:ac:a7:9e:9e:14:50:7f:52:1e:0b:fd:c6:f4:eb:13:a8:19:
95:8d:8f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org