Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l2tHHGWjPGe6QD8AGsELOdjxT9U.roa
File: l2tHHGWjPGe6QD8AGsELOdjxT9U.roa (raw, json)
Hash identifier: WdiYK4ZjWFlHuZIC0PcAETcfjox5tOumWwBOLHoZxUs=
Subject key identifier: 97:6B:47:1C:65:A3:3C:67:BA:40:3F:00:1A:C1:0B:39:D8:F1:4F:D5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C96
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l2tHHGWjPGe6QD8AGsELOdjxT9U.roa
Signing time: Wed 29 Sep 2021 02:47:57 +0000
ROA not before: Wed 29 Sep 2021 02:47:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 211.76.123.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7318 (0x1c96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:57 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=976B471C65A33C67BA403F001AC10B39D8F14FD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:f6:f0:36:5b:a7:ff:57:3e:ab:cd:64:b8:
1d:67:5e:d2:e4:01:f6:73:e0:23:08:11:59:43:da:
be:6a:59:ee:89:f7:54:6b:a0:56:ed:12:57:0b:76:
85:a0:2c:2f:dc:44:cb:4c:a6:9c:3b:a7:09:d6:40:
b7:45:bf:91:58:3e:24:c8:2e:df:80:49:db:01:54:
70:b9:34:a9:62:65:2f:f4:e9:df:57:2d:d0:49:c7:
cb:ac:9c:9a:19:52:ad:6f:39:3b:c1:4c:bf:a1:62:
83:a9:c9:ce:ab:d6:db:06:3d:de:fe:5f:18:83:a4:
e2:26:d4:91:e8:0d:5d:94:1f:ed:3f:a6:48:a3:7f:
30:f6:db:64:44:89:56:c5:11:8c:da:cc:4d:26:a2:
e9:b4:df:8f:2e:ca:9b:c1:81:26:95:82:ea:4e:6c:
c6:f9:8e:dc:33:c1:36:27:11:ce:6b:a6:39:23:cc:
56:52:f8:0f:26:50:db:03:b1:2b:02:72:58:3f:0f:
e8:5b:c7:5a:df:e9:bc:89:0b:36:e3:ab:65:6b:aa:
dc:ea:69:e4:a6:ab:67:cf:ef:25:16:7e:3a:88:d9:
cb:19:c8:a3:e4:be:c2:06:8a:be:82:6c:8d:8f:5a:
69:a7:47:77:99:1c:b6:ac:57:fe:3e:69:28:10:44:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6B:47:1C:65:A3:3C:67:BA:40:3F:00:1A:C1:0B:39:D8:F1:4F:D5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l2tHHGWjPGe6QD8AGsELOdjxT9U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.123.0/25
Signature Algorithm: sha256WithRSAEncryption
a6:ab:d2:29:b1:1b:77:cb:a8:f0:4d:27:a5:87:19:2e:67:38:
34:94:a3:66:3c:e1:b8:43:e7:cd:49:0f:48:cd:ea:fa:24:c9:
32:19:72:0f:d3:93:19:cf:ba:94:e5:25:40:cf:06:5a:1d:43:
2b:d8:5f:65:c0:e9:87:4d:53:23:c0:ff:8a:e2:95:bd:aa:a7:
21:42:8d:36:d2:5e:d6:be:86:4e:eb:b6:b1:fe:05:9c:f1:c0:
b1:8c:72:ab:29:43:8e:ea:44:0c:ee:85:83:bc:f1:d5:4c:7b:
24:89:e5:5c:3d:22:24:18:ed:20:8a:f1:5d:30:aa:ea:57:f5:
5d:09:df:50:16:7a:4a:18:56:45:73:cd:1d:1b:a4:33:a1:2e:
a7:ca:08:bf:9b:e9:71:19:64:8e:0a:22:2e:35:9f:56:93:51:
1e:3c:4c:74:1b:e8:9a:96:31:aa:32:dc:cc:55:79:a5:44:22:
4d:98:a8:1f:bc:0c:94:5d:ac:da:a8:f2:80:1d:46:56:a0:17:
ea:5a:45:d3:cd:4c:a3:54:b8:6d:3c:77:16:9a:10:7b:9a:8e:
8d:e7:55:22:96:31:cb:a7:9f:d1:dd:a9:c6:e9:e7:bb:3d:27:
c2:55:a8:d9:fe:5b:4b:31:76:d7:b1:7f:b7:54:a9:70:b1:ee:
0d:b4:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:40:20 2025 by rpki-client