Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kgB3p4Cc4WRMHJfKsrdzluKus14.roa
File: kgB3p4Cc4WRMHJfKsrdzluKus14.roa (raw, json)
Hash identifier: aAzj24iI0Im7MkGDebgAz/881vWqESvY6+bUHpr/1vU=
Subject key identifier: 92:00:77:A7:80:9C:E1:64:4C:1C:97:CA:B2:B7:73:96:E2:AE:B3:5E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kgB3p4Cc4WRMHJfKsrdzluKus14.roa
Signing time: Thu 15 Sep 2022 02:52:48 +0000
ROA not before: Thu 15 Sep 2022 02:52:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=920077A7809CE1644C1C97CAB2B77396E2AEB35E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:64:63:e5:d0:55:21:80:98:47:cd:54:ff:
52:fb:46:f1:2e:d4:d5:ab:5f:1f:fe:0c:f7:4c:76:
bf:e6:d6:6b:71:dd:32:8c:4e:0b:93:e6:7f:97:95:
62:ce:60:02:a1:55:4f:85:8b:55:99:24:12:65:48:
fd:b2:c2:d5:0f:14:49:18:f5:6e:34:ff:d0:a6:e7:
e6:c6:41:79:37:a2:84:ab:ac:00:1a:0c:62:d6:dc:
8f:32:b9:6b:b3:90:df:30:e5:87:8d:fa:03:7f:a5:
f6:cf:fa:79:e9:bb:59:60:ab:36:71:1f:f3:41:93:
9e:ae:92:7e:75:e9:57:d3:e8:2d:d6:1a:cb:34:0e:
f1:e4:32:2e:1e:83:a1:57:dc:c3:f6:55:54:18:8d:
12:28:48:5b:89:a2:c0:ac:9c:4e:23:a4:30:83:73:
99:0d:c0:39:57:b9:4c:99:a6:79:89:62:f9:fb:88:
e5:44:97:c9:40:4f:13:d8:10:3a:db:17:10:a6:ba:
9f:04:03:2d:90:71:bf:01:59:70:f3:9b:a2:15:0b:
e6:6b:03:52:14:2b:6d:40:7b:56:a4:36:de:0c:18:
05:a8:be:a9:13:b6:e0:9f:86:c7:bd:74:8b:85:d5:
30:83:33:a2:b7:47:85:66:91:bf:25:73:c3:78:98:
05:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:00:77:A7:80:9C:E1:64:4C:1C:97:CA:B2:B7:73:96:E2:AE:B3:5E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kgB3p4Cc4WRMHJfKsrdzluKus14.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:0b:67:0d:85:07:58:fa:0a:be:58:17:74:6d:1e:53:6b:33:
08:55:b0:a9:03:87:73:b5:c3:31:5a:a1:42:14:9d:7b:09:d0:
b3:fd:ec:1c:d2:09:af:f3:a1:93:76:3b:f2:4c:9e:49:f0:8a:
9d:c0:69:a3:0a:87:d8:42:f3:f0:a6:2c:9a:f0:6e:74:a0:49:
09:c4:02:86:b2:75:38:5c:cf:92:71:2a:7c:9f:fb:7a:b1:bd:
3d:58:54:9b:57:ff:42:38:19:e7:61:23:43:fb:ff:d8:ff:c0:
2c:47:95:b9:1e:d5:fd:a4:f0:80:72:e0:b8:c5:17:27:20:3b:
8f:51:44:e7:a0:8e:ab:a8:61:30:68:6c:50:26:9e:df:62:7f:
b1:67:64:62:05:39:19:56:34:f9:f4:72:1e:d7:29:d4:fe:e7:
89:1d:14:db:f8:55:7f:b9:fc:7e:7e:8b:e0:01:0a:21:b6:da:
92:9d:94:7f:34:e9:9d:64:0d:d3:f4:ec:5d:e5:dd:cb:85:5b:
9f:ab:52:c9:e7:32:85:75:b3:77:bc:c2:98:62:8d:9c:18:ed:
cb:0e:27:ac:5b:be:5e:29:02:60:96:61:04:30:0b:e8:e3:22:
4b:c0:7c:98:a8:e0:48:45:fd:41:96:0d:87:b9:ba:40:c8:a2:
02:ee:ea:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org