Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nuIGhBBIDfSpH-eANjHNZPTW7t0.roa
File: nuIGhBBIDfSpH-eANjHNZPTW7t0.roa (raw, json)
Hash identifier: EWmyG7PZV4/ArT9YUMwY0upO7f191fRGLBBCzZ2eZxk=
Subject key identifier: 9E:E2:06:84:10:48:0D:F4:A9:1F:E7:80:36:31:CD:64:F4:D6:EE:DD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2359
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nuIGhBBIDfSpH-eANjHNZPTW7t0.roa
Signing time: Fri 25 Nov 2022 04:43:28 +0000
ROA not before: Fri 25 Nov 2022 04:43:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.123.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9049 (0x2359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:43:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9EE2068410480DF4A91FE7803631CD64F4D6EEDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:cd:6e:5b:5b:42:9d:21:0a:4e:e9:88:3d:
e1:4a:d4:54:4c:72:7a:36:0f:20:74:08:f0:11:3d:
3e:7f:30:0a:49:45:b7:22:e3:5d:78:65:06:a8:71:
6b:7e:40:f8:63:7b:b0:ec:09:98:c9:61:a7:c7:de:
4b:8b:b1:bb:89:7d:ca:e5:7b:0b:e7:46:5a:b7:77:
7a:f9:0c:2f:1f:12:c8:32:d8:b4:91:a1:17:a4:cf:
47:42:7e:bf:c7:f7:27:b0:1b:d2:c5:fb:43:e8:49:
63:d2:01:fb:30:1c:b8:b8:94:c0:d4:6f:21:12:04:
3c:b2:76:e4:45:69:7e:47:05:27:28:8e:92:ab:0d:
7d:02:c1:ef:bd:d4:f6:55:e7:99:49:e4:78:36:27:
b6:cb:40:2a:9e:44:b8:dd:19:09:04:dc:06:29:eb:
1d:09:ef:c7:7c:ab:f8:03:d4:71:4c:f9:ed:ef:72:
d9:28:61:8f:e4:62:75:f4:55:cb:5a:cd:ee:9d:c8:
80:b4:7f:b3:5f:93:77:be:32:14:8d:e5:3b:47:a6:
82:30:ef:2e:0d:b9:9f:c8:bd:56:2c:b1:33:bf:1e:
e1:22:c1:52:c0:18:e6:33:0d:3a:c1:e6:53:df:14:
65:39:62:39:97:88:10:2d:21:e1:ac:f5:ff:b5:37:
f4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E2:06:84:10:48:0D:F4:A9:1F:E7:80:36:31:CD:64:F4:D6:EE:DD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nuIGhBBIDfSpH-eANjHNZPTW7t0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.123.0/25
Signature Algorithm: sha256WithRSAEncryption
1f:03:28:18:56:61:a9:3c:f0:64:02:b9:29:ce:cf:b9:dc:e4:
6a:8a:36:68:71:84:07:2e:9a:5d:af:36:0d:00:ad:f7:f3:da:
22:c6:e1:74:50:5e:f3:a4:81:a7:d6:db:6b:cb:43:fd:f3:59:
9d:cc:4c:85:3b:53:d4:c6:1e:36:45:35:cb:fd:79:60:b1:a1:
10:52:25:0f:02:a0:9f:22:51:e2:fc:47:51:81:fd:5e:9e:5e:
f5:42:44:0e:0f:05:a4:60:90:e9:b9:7b:5b:cd:c8:39:09:a0:
f0:ca:f0:55:e9:65:61:4a:74:47:bb:67:27:d3:b7:3a:22:74:
95:fb:ee:3e:fa:9b:68:bc:54:cc:3f:13:1d:bb:95:5f:7a:51:
11:08:13:2f:f6:ab:f6:9c:ad:bd:68:73:1a:de:e1:9d:27:30:
cc:3d:9a:9f:b1:cf:b2:d1:00:8e:24:5c:57:bb:32:02:69:d1:
96:3c:f9:4a:ab:18:fb:55:ad:20:da:bd:37:ca:d4:b5:f5:8c:
d2:c9:96:d8:ca:fd:c1:7a:b4:62:6c:a2:e6:0b:06:b4:0a:a8:
5f:fb:2b:e3:78:ce:79:18:6c:88:0b:63:3e:92:82:a4:8d:ae:
27:15:57:f4:53:3d:2f:7b:67:ca:a7:aa:f2:1e:30:0d:14:a0:
a1:00:14:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:59 2025 by rpki-client