Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hD6kVhawN7zfSDxFmI_5sliLmU0.roa
File: hD6kVhawN7zfSDxFmI_5sliLmU0.roa (raw, json)
Hash identifier: Hz1Aeml5jCzPxL8gqndeN7r9B02THOeV6W7oBHxSoWU=
Subject key identifier: 84:3E:A4:56:16:B0:37:BC:DF:48:3C:45:98:8F:F9:B2:58:8B:99:4D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1927
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hD6kVhawN7zfSDxFmI_5sliLmU0.roa
Signing time: Sun 07 Feb 2021 12:57:41 +0000
ROA not before: Sun 07 Feb 2021 12:57:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 211.76.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6439 (0x1927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:57:41 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=843EA45616B037BCDF483C45988FF9B2588B994D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:40:48:ba:dc:02:fe:eb:ed:5d:86:53:85:
d5:ca:be:0d:e5:8d:64:35:24:68:09:bb:6d:50:5d:
5c:50:5a:17:42:b5:1c:f4:26:f1:4c:5d:a8:71:ee:
ac:cd:a6:a3:29:74:d8:c6:ec:f2:49:8d:2a:0d:99:
df:39:6f:6b:f5:2a:67:42:f4:90:30:66:ae:07:d0:
ea:b8:b1:f6:75:f2:39:89:53:ac:08:e3:de:fb:b1:
3f:5a:07:12:0b:a9:34:82:79:02:23:a9:f8:0b:fe:
a9:29:ab:f0:5d:4a:56:ab:02:78:a2:fd:0b:6f:37:
21:d1:47:32:cc:f8:fe:e4:d5:08:78:f3:c4:c2:7c:
45:b4:12:fe:ab:23:94:51:0e:59:8c:ed:47:b8:65:
98:78:c9:60:d7:e4:e3:d6:5c:63:03:b7:0e:45:84:
d1:a0:e0:55:a8:5e:1a:79:ff:c9:b8:b5:88:b6:a1:
20:ac:8b:a0:b2:4e:f9:de:ae:fd:2a:3d:e8:5e:32:
ee:69:99:11:9f:97:c9:b2:cc:6d:7a:8e:97:7b:54:
71:6e:de:a8:27:66:82:8a:02:13:b6:40:2e:9e:81:
88:b2:ec:f7:98:1d:63:2c:4e:64:a9:32:88:b5:97:
d3:ce:53:59:87:a9:a0:11:7b:54:71:69:5a:43:22:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3E:A4:56:16:B0:37:BC:DF:48:3C:45:98:8F:F9:B2:58:8B:99:4D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hD6kVhawN7zfSDxFmI_5sliLmU0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.123.0/24
Signature Algorithm: sha256WithRSAEncryption
45:43:42:4e:98:2d:91:e1:ca:9c:40:47:76:c9:91:69:0b:c8:
d8:24:94:f5:c2:95:aa:25:75:7e:41:1c:e7:99:c9:65:7a:e9:
f5:c6:0f:d6:89:4a:76:03:ae:c9:29:c0:46:a5:6d:68:3e:be:
5a:08:d3:cd:ff:8e:29:ba:c8:1b:6c:d9:9e:5b:1f:ed:43:11:
c8:35:6c:e0:18:e5:da:ed:02:5a:62:9a:16:e8:c7:5d:e3:bb:
21:94:b0:25:a7:1d:fe:19:ba:7c:7f:83:9c:8c:12:c7:17:b2:
33:92:e8:c3:c0:1e:2d:9a:ed:22:7e:12:1d:55:c1:ce:4d:a3:
4c:c5:13:13:75:74:6f:32:b8:1b:d2:78:bf:1e:00:37:fa:97:
29:8e:f1:56:6f:e9:20:b8:f6:ab:06:14:5b:61:8e:85:8c:3b:
38:24:b1:0e:e4:e5:59:02:35:0d:94:69:5c:97:5b:b1:18:21:
75:4f:de:a1:a9:34:9c:6c:fe:d5:51:4e:a5:df:7e:bf:22:21:
f0:65:b4:1c:23:87:b4:df:c4:f3:95:03:65:52:46:5f:97:22:
6c:70:db:4c:93:10:f8:69:27:cb:4a:b1:c1:52:84:a7:79:6c:
72:fe:92:29:9a:21:8e:e1:b4:17:c6:69:79:ce:f1:c6:23:a0:
20:8e:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org