Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pMnOKNd05fIz2iHvmk8FT70C2Tg.roa
File: pMnOKNd05fIz2iHvmk8FT70C2Tg.roa (raw, json)
Hash identifier: TthHRml67AMijPW/H27hDLIQtGPn+LBr8DGoDBZMT/I=
Subject key identifier: A4:C9:CE:28:D7:74:E5:F2:33:DA:21:EF:9A:4F:05:4F:BD:02:D9:38
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pMnOKNd05fIz2iHvmk8FT70C2Tg.roa
Signing time: Thu 15 Sep 2022 02:44:54 +0000
ROA not before: Thu 15 Sep 2022 02:44:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 211.76.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A4C9CE28D774E5F233DA21EF9A4F054FBD02D938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:59:a3:50:2c:8a:c4:c9:ea:bc:ff:5c:1b:51:
6e:00:d7:83:0c:eb:8f:36:05:61:0c:79:8f:6b:88:
c9:cd:c6:96:a9:3c:55:64:d9:da:20:9a:fc:55:18:
85:a3:0c:0d:72:d8:8b:e0:e6:36:42:ff:05:23:2d:
dc:82:dc:49:f3:7d:d1:0f:0c:51:19:ea:35:62:d1:
fe:d4:fb:41:94:cc:fa:5e:8a:74:42:e4:0f:04:3b:
0b:50:bb:0b:eb:a9:56:3c:5d:bb:1e:66:6c:1e:f2:
69:98:9f:76:c5:f0:c8:8a:38:c1:f0:47:28:39:1e:
fb:15:b7:91:1f:c8:ef:c9:13:9c:e0:d0:fc:0a:9d:
0f:4e:db:d6:3f:0c:be:21:ca:c2:7e:08:cb:d5:b7:
ca:2f:5e:bb:9d:58:86:87:33:14:cc:26:98:31:96:
47:c6:1e:ea:81:3d:ac:ff:65:9e:47:90:40:e3:03:
df:d4:4a:8c:04:16:a7:aa:3f:9d:12:fd:7f:7a:70:
3b:00:c1:ad:e0:19:ab:e5:94:2f:36:60:9d:da:3d:
f4:cd:86:8e:7a:fa:d6:4c:ae:89:51:57:b7:a1:92:
91:db:8c:42:b9:70:8f:f4:f3:5b:0b:96:f2:76:bf:
46:4e:d6:4f:ef:2d:6a:08:48:59:45:f2:d3:70:13:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C9:CE:28:D7:74:E5:F2:33:DA:21:EF:9A:4F:05:4F:BD:02:D9:38
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pMnOKNd05fIz2iHvmk8FT70C2Tg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.123.0/24
Signature Algorithm: sha256WithRSAEncryption
34:98:27:f5:7d:e2:72:6a:18:b5:8d:65:5f:d1:ee:c2:ae:11:
4d:73:1e:50:69:aa:79:cd:92:5e:31:95:86:21:42:8d:a7:d3:
5a:92:ae:52:d9:f6:f0:4d:95:4c:6d:3c:7a:fe:4d:dc:ed:cd:
a9:09:4e:ab:83:66:e4:c1:19:a2:75:8d:fe:d4:88:72:17:8b:
b2:4a:20:c2:6a:1c:82:5a:cf:ed:41:ce:5e:0a:7f:fd:ce:20:
43:dc:38:f4:df:e6:4a:4c:73:48:5c:9e:30:af:f8:8e:79:07:
45:04:26:b7:4d:93:86:01:1d:ea:52:a4:73:4e:b8:a3:f4:a9:
ef:14:b9:11:af:02:a2:76:49:c6:bd:be:b5:81:d8:69:fa:a8:
af:cb:55:14:e4:2c:4e:9f:6d:c4:02:74:ce:55:68:a5:c6:59:
4b:36:eb:96:61:25:be:63:17:cb:1c:1a:20:db:eb:e1:64:13:
e7:69:4f:c7:da:41:71:b0:d7:74:51:7f:e7:62:68:2f:9d:a6:
f2:45:01:2b:91:5c:42:24:a7:38:ea:2b:07:06:96:dd:31:13:
1d:a9:00:e4:3f:30:20:72:b0:31:01:5e:ee:65:db:e7:59:46:
61:95:45:d2:02:14:c7:d2:5b:a9:24:07:29:90:af:b3:3e:26:
88:99:28:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org