Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eC5-iy20-bhm920wju3ArRPLU-A.roa
File: eC5-iy20-bhm920wju3ArRPLU-A.roa (raw, json)
Hash identifier: cff8fGnUDcMOE8s9OPfuGLnpjznNJqJhAiY/ogZKpaY=
Subject key identifier: 78:2E:7E:8B:2D:B4:F9:B8:66:F7:6D:30:8E:ED:C0:AD:13:CB:53:E0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eC5-iy20-bhm920wju3ArRPLU-A.roa
Signing time: Thu 15 Sep 2022 02:46:27 +0000
ROA not before: Thu 15 Sep 2022 02:46:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.124.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=782E7E8B2DB4F9B866F76D308EEDC0AD13CB53E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:56:33:0e:07:cd:09:a2:56:cc:08:6b:70:
96:f8:f9:63:ea:f6:ce:0e:8d:ec:b9:79:92:c6:da:
53:4c:73:fe:46:c0:8b:9b:4d:64:01:3a:4c:7c:c1:
d1:7f:12:26:73:41:d1:f8:4c:eb:47:f1:28:77:79:
8f:5e:0e:8e:a4:31:4a:6b:00:37:bf:c9:02:81:f7:
88:ba:db:e2:b4:55:97:9e:ce:b0:3e:73:e6:27:aa:
c8:36:d7:bc:82:6a:8e:35:69:2a:b1:85:56:1a:1a:
79:62:22:94:2e:be:d3:d8:e9:05:a9:8d:d1:14:63:
d7:9d:dc:39:a2:e9:80:b5:3d:1a:7c:b0:76:54:a4:
39:6b:cc:ff:8e:20:f4:3f:6f:05:a9:b5:62:3c:8a:
de:1b:9c:28:38:69:64:22:b8:cb:7e:e1:04:ed:55:
84:3f:d0:55:26:4c:f0:27:bf:ac:37:a3:43:c0:0d:
8d:42:58:e4:a1:e9:a7:7a:ad:28:d1:6c:aa:53:94:
f0:17:80:9d:a2:e7:ba:84:74:d3:ac:64:f4:46:f9:
67:c0:e4:b3:b2:d7:b9:77:5a:cd:69:7f:c1:2c:56:
b0:e1:11:2a:53:a9:4f:26:92:c0:ac:c1:1c:b9:17:
44:f7:70:57:2f:43:73:35:cc:2a:d0:74:d6:70:09:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2E:7E:8B:2D:B4:F9:B8:66:F7:6D:30:8E:ED:C0:AD:13:CB:53:E0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eC5-iy20-bhm920wju3ArRPLU-A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.124.0/25
Signature Algorithm: sha256WithRSAEncryption
a9:8a:b6:b2:e5:4b:67:08:5b:4c:fb:36:2f:e4:34:0a:55:a8:
6c:03:b8:d5:a7:13:bd:6d:c7:2f:69:be:89:27:e3:8c:d4:e9:
1d:ac:be:8e:65:5a:18:9f:93:fa:0d:0a:e7:7e:83:5a:d9:f9:
f7:70:75:18:f2:e9:15:d0:5f:18:a1:55:f0:26:bd:af:e0:40:
1a:10:1d:c4:d7:66:bc:e7:70:f5:d5:d8:20:e6:e9:95:5e:7f:
93:cc:3d:1d:b3:f7:de:06:ff:15:34:6a:bb:51:8d:38:dd:2e:
f7:94:ed:be:80:d2:a9:cd:06:84:6f:33:80:6a:55:57:c1:2c:
03:7d:af:b1:f7:53:ca:8f:54:92:42:a0:4a:04:07:b7:df:b0:
bd:38:85:52:3f:24:39:28:de:3e:02:fe:49:3c:e1:cb:50:65:
b2:ed:a6:bb:76:07:2e:5d:ad:f4:ff:c4:1c:ce:88:5a:a8:a2:
f1:ac:54:6a:4b:b2:9a:aa:4c:1d:a8:8c:61:15:53:90:19:84:
2d:f7:94:80:51:a0:75:34:5a:3d:a9:05:56:83:19:45:39:4d:
51:db:ac:ab:76:dc:50:83:4e:e1:43:da:72:e6:d1:e2:8d:9b:
a4:c5:9a:00:63:40:36:ba:41:fa:fc:04:40:e4:f8:bd:35:7b:
46:51:d7:a3
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MjdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc4MkU3RThCMkRCNEY5
Qjg2NkY3NkQzMDhFRURDMEFEMTNDQjUzRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3uVYzDgfNCaJWzAhrcJb4+WPq9s4Ojey5eZLG2lNMc/5GwIub
TWQBOkx8wdF/EiZzQdH4TOtH8Sh3eY9eDo6kMUprADe/yQKB94i62+K0VZeezrA+
c+Ynqsg217yCao41aSqxhVYaGnliIpQuvtPY6QWpjdEUY9ed3Dmi6YC1PRp8sHZU
pDlrzP+OIPQ/bwWptWI8it4bnCg4aWQiuMt+4QTtVYQ/0FUmTPAnv6w3o0PADY1C
WOSh6ad6rSjRbKpTlPAXgJ2i57qEdNOsZPRG+WfA5LOy17l3Ws1pf8EsVrDhESpT
qU8mksCswRy5F0T3cFcvQ3M1zCrQdNZwCTktAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUeC5+iy20+bhm920wju3ArRPLU+AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VDNS1peTIwLWJobTkyMHdq
dTNBclJQTFUtQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT
THwAMA0GCSqGSIb3DQEBCwUAA4IBAQCpiray5UtnCFtM+zYv5DQKVahsA7jVpxO9
bccvab6JJ+OM1OkdrL6OZVoYn5P6DQrnfoNa2fn3cHUY8ukV0F8YoVXwJr2v4EAa
EB3E12a853D11dgg5umVXn+TzD0ds/feBv8VNGq7UY043S73lO2+gNKpzQaEbzOA
alVXwSwDfa+x91PKj1SSQqBKBAe337C9OIVSPyQ5KN4+Av5JPOHLUGWy7aa7dgcu
Xa30/8QczohaqKLxrFRqS7KaqkwdqIxhFVOQGYQt95SAUaB1NFo9qQVWgxlFOU1R
26yrdtxQg07hQ9py5tHijZukxZoAY0A2ukH6/ARA5Pi9NXtGUdej
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org