Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p3lc06kKtD4uLXApsq2qMkoxNe8.roa
File: p3lc06kKtD4uLXApsq2qMkoxNe8.roa (raw, json)
Hash identifier: BofZTnC4beSiOMazlvv3JDOPwdXgS5Zzl7GHdenwK1U=
Subject key identifier: A7:79:5C:D3:A9:0A:B4:3E:2E:2D:70:29:B2:AD:AA:32:4A:31:35:EF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F58
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p3lc06kKtD4uLXApsq2qMkoxNe8.roa
Signing time: Tue 29 Sep 2020 09:56:50 +0000
ROA not before: Tue 29 Sep 2020 09:56:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 211.76.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3928 (0xf58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A7795CD3A90AB43E2E2D7029B2ADAA324A3135EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:f4:a8:0d:99:7e:de:71:62:26:ee:21:a9:
1c:68:27:5c:59:72:ca:9d:d3:29:e0:4b:ee:ff:a0:
3d:fc:90:0e:3c:df:e8:98:f9:66:35:64:9c:01:47:
c3:d8:c1:bf:d6:82:4c:19:f8:0e:84:4f:c8:78:4b:
e2:ca:64:a0:08:9c:9c:3c:3a:4a:fd:b7:ca:43:e7:
ad:a3:61:67:6b:ef:81:9e:b4:49:34:13:54:d7:f4:
b8:55:6e:39:9c:3c:de:19:4d:9d:ae:a2:17:d9:3a:
c1:18:e6:18:80:15:a6:e7:98:df:73:57:5e:ea:1a:
de:4a:ae:e7:0b:f9:8d:cf:a9:7b:ea:c9:16:36:27:
58:37:0d:99:93:ee:6b:24:1a:77:37:82:35:08:5e:
ea:2c:84:fb:3a:ba:6c:2c:fc:8a:48:ee:6e:85:94:
95:80:b4:25:35:34:4e:2a:7f:5b:c1:db:b1:04:32:
88:6a:24:76:26:69:31:aa:c0:c7:7c:bf:1f:98:a5:
9c:04:25:31:30:d1:bf:c7:6b:7b:78:a9:16:0d:e3:
21:93:60:73:0f:45:06:e9:4b:17:57:1a:b7:d4:f5:
47:da:48:67:51:71:39:f7:95:2b:39:77:74:36:70:
0e:6a:53:d5:b4:e7:b0:51:7e:0c:b0:e7:04:3a:39:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:79:5C:D3:A9:0A:B4:3E:2E:2D:70:29:B2:AD:AA:32:4A:31:35:EF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p3lc06kKtD4uLXApsq2qMkoxNe8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.112.0/20
Signature Algorithm: sha256WithRSAEncryption
2c:71:25:e9:f9:f6:6d:f8:cf:42:2f:60:b5:0b:bc:36:e4:1a:
15:48:82:13:d6:6e:7d:fe:e3:24:ef:bf:c1:99:fb:69:32:72:
a4:51:f3:20:60:17:c1:c4:65:9d:6f:c8:0f:81:ab:1a:10:2f:
ab:1a:29:a3:01:9a:08:42:2f:41:a6:f0:e4:af:b2:e7:44:bf:
98:17:c5:25:35:c5:23:b6:c6:94:a6:0a:e0:1d:69:ee:f0:36:
87:3d:38:a9:be:ae:3b:88:d0:b8:a8:06:ff:e3:7b:ed:79:64:
f3:5b:3c:96:55:df:c7:6e:8f:40:81:ac:4b:7d:9e:c8:c1:03:
4e:bc:66:cb:8f:4b:3c:73:e0:ec:f7:b1:f9:9d:6d:e3:a7:43:
11:61:13:dd:59:69:96:31:3e:fe:14:57:09:89:ef:62:a8:32:
00:c8:d8:a8:f6:e8:62:27:5c:3c:72:b1:14:f8:c1:ab:bd:c0:
3c:9e:0f:d9:c2:2e:6c:5f:52:50:32:42:3e:95:18:54:d5:fa:
db:40:c7:3a:df:0f:4f:00:d4:19:19:a3:28:43:44:bc:35:49:
a1:a3:b1:34:aa:9f:b4:46:a5:a8:69:65:c8:1e:ec:d3:59:59:
dc:60:27:9d:c2:1e:68:3d:0c:7d:77:6d:8c:ad:ea:43:b3:8d:
83:e5:5a:9a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD1gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2NTBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE3Nzk1Q0QzQTkwQUI0
M0UyRTJENzAyOUIyQURBQTMyNEEzMTM1RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTz/SoDZl+3nFiJu4hqRxoJ1xZcsqd0yngS+7/oD38kA483+iY
+WY1ZJwBR8PYwb/WgkwZ+A6ET8h4S+LKZKAInJw8Okr9t8pD562jYWdr74GetEk0
E1TX9LhVbjmcPN4ZTZ2uohfZOsEY5hiAFabnmN9zV17qGt5KrucL+Y3PqXvqyRY2
J1g3DZmT7mskGnc3gjUIXuoshPs6umws/IpI7m6FlJWAtCU1NE4qf1vB27EEMohq
JHYmaTGqwMd8vx+YpZwEJTEw0b/Ha3t4qRYN4yGTYHMPRQbpSxdXGrfU9UfaSGdR
cTn3lSs5d3Q2cA5qU9W057BRfgyw5wQ6OZRRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUp3lc06kKtD4uLXApsq2qMkoxNe8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3AzbGMwNmtLdEQ0dUxYQXBz
cTJxTWtveE5lOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATT
THAwDQYJKoZIhvcNAQELBQADggEBACxxJen59m34z0IvYLULvDbkGhVIghPWbn3+
4yTvv8GZ+2kycqRR8yBgF8HEZZ1vyA+BqxoQL6saKaMBmghCL0Gm8OSvsudEv5gX
xSU1xSO2xpSmCuAdae7wNoc9OKm+rjuI0LioBv/je+15ZPNbPJZV38duj0CBrEt9
nsjBA068ZsuPSzxz4Oz3sfmdbeOnQxFhE91ZaZYxPv4UVwmJ72KoMgDI2Kj26GIn
XDxysRT4wau9wDyeD9nCLmxfUlAyQj6VGFTV+ttAxzrfD08A1BkZoyhDRLw1SaGj
sTSqn7RGpahpZcge7NNZWdxgJ53CHmg9DH13bYyt6kOzjYPlWpo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org