Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jJxN2MEs39KMkqx0os2oLOu6B_4.roa
File: jJxN2MEs39KMkqx0os2oLOu6B_4.roa (raw, json)
Hash identifier: vITnNO9RQ4Vg1U+aTSLBdGZ3+X6kWnCFoP1YofPFadA=
Subject key identifier: 8C:9C:4D:D8:C1:2C:DF:D2:8C:92:AC:74:A2:CD:A8:2C:EB:BA:07:FE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14DF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jJxN2MEs39KMkqx0os2oLOu6B_4.roa
Signing time: Sun 07 Feb 2021 12:00:25 +0000
ROA not before: Sun 07 Feb 2021 12:00:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 211.76.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5343 (0x14df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:00:25 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8C9C4DD8C12CDFD28C92AC74A2CDA82CEBBA07FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:5b:99:91:bd:84:ab:fe:a7:22:fe:14:33:
1c:a5:19:8e:8f:ec:b7:cc:c6:01:63:f4:3a:9d:b8:
6d:24:3c:76:19:db:78:e8:87:e1:5f:db:f1:c6:18:
e6:c7:4c:4e:24:f7:bb:c0:ca:07:99:9f:74:95:3a:
b1:15:a9:5f:05:4d:c9:d6:3c:cd:b7:a2:83:05:bd:
ed:37:04:29:f6:91:79:eb:45:45:f8:92:b9:de:5b:
fe:26:5e:13:f5:c3:1b:2b:88:ce:77:ac:21:8d:d0:
7e:93:9d:38:42:ca:cb:1e:32:ba:72:28:bc:23:2d:
ba:fb:bd:00:25:2e:bf:77:ae:e1:78:9f:d4:29:aa:
81:ee:12:0e:f4:66:d6:47:52:31:1b:00:6c:e8:d6:
c9:d6:24:e3:f3:95:a2:55:4d:4e:47:ba:9b:92:1a:
52:c6:3e:be:78:f4:65:ac:75:de:aa:6e:88:45:f3:
b4:2d:0b:54:c0:b8:64:36:d0:a7:a5:b2:f2:fe:ab:
b8:7b:90:77:66:55:79:94:d2:a4:64:42:30:77:bd:
f4:23:15:f6:76:bd:b8:67:f6:b5:c0:88:8a:1a:28:
ab:6d:af:21:24:b0:db:e0:a1:d0:f7:10:69:0d:9a:
a2:33:9e:86:7d:c3:34:b3:23:72:11:23:a4:9f:79:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9C:4D:D8:C1:2C:DF:D2:8C:92:AC:74:A2:CD:A8:2C:EB:BA:07:FE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jJxN2MEs39KMkqx0os2oLOu6B_4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:94:87:4f:59:f7:0f:d0:7d:9d:0d:31:db:7d:11:12:dd:b1:
2b:3d:3a:17:ae:51:c8:c9:7d:02:bf:28:d4:18:76:6b:f9:2d:
ac:de:4b:06:fa:da:bd:5f:61:7c:a5:ab:45:70:d8:d3:cb:b0:
c2:22:26:cd:05:81:bc:d5:27:29:2e:12:09:d9:8b:0d:f3:22:
88:72:1e:c2:6b:ed:3a:f6:e7:15:03:56:2a:47:70:6f:ee:5b:
b6:67:d1:b7:47:c9:ce:90:9b:c3:e9:a0:33:98:14:e4:be:18:
12:6b:60:51:a8:2c:5f:61:7a:d4:ec:b4:e9:66:b1:b1:c0:71:
6e:6e:cf:c5:18:a4:78:33:a0:67:78:9e:b6:7e:ae:61:38:cb:
1f:b5:e7:8c:01:2d:bc:46:61:22:f9:dd:de:20:b1:ac:68:d0:
66:5c:07:46:e5:d8:bd:56:06:34:1e:54:f3:bf:99:1c:08:f9:
10:c3:18:c7:ad:db:c2:3a:0f:62:05:0f:11:8f:2a:a1:b8:15:
e1:00:ad:aa:0a:3f:4d:d2:84:39:cf:05:8e:e6:ae:76:7d:92:
9a:f0:7f:8d:c4:8d:d4:af:48:6f:35:da:3f:11:15:d0:33:7e:
b4:0c:6a:0a:c0:7f:90:02:06:99:20:5c:f3:d1:f1:a6:64:60:
dd:68:3a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org