Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pbWuhoD5Eb47TeKb97HWOLc9Spk.roa
File: pbWuhoD5Eb47TeKb97HWOLc9Spk.roa (raw, json)
Hash identifier: ASFW22KpaTUQFRM70FVMsakZbzfVNURCSJiIGDzoPSI=
Subject key identifier: A5:B5:AE:86:80:F9:11:BE:3B:4D:E2:9B:F7:B1:D6:38:B7:3D:4A:99
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20B7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pbWuhoD5Eb47TeKb97HWOLc9Spk.roa
Signing time: Fri 25 Nov 2022 04:39:01 +0000
ROA not before: Fri 25 Nov 2022 04:39:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 211.76.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8375 (0x20b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A5B5AE8680F911BE3B4DE29BF7B1D638B73D4A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:49:a2:65:62:73:15:9d:1e:0e:da:6a:0c:
2e:aa:3c:dc:5d:f2:5d:9d:1c:49:b1:b5:f9:be:cb:
dd:08:0d:3b:0e:6c:bb:0a:ca:53:ea:72:ac:ec:b0:
00:41:b1:15:1c:e9:b3:aa:c8:05:28:a1:47:c7:09:
4d:a5:3b:3a:10:83:ce:64:f1:0f:6b:69:91:15:fa:
b1:54:11:76:55:9c:7f:ff:08:06:9d:f1:6f:ed:02:
e8:83:eb:0c:e4:38:d6:a3:48:9c:76:6b:ed:3d:95:
de:54:c0:82:20:4c:21:86:77:df:84:9e:4b:bd:8c:
19:7a:07:e2:f7:ca:a9:00:b6:dc:12:fc:72:19:ae:
ed:0b:ef:9d:57:e0:d5:09:8e:b2:94:4b:a9:97:c1:
8d:12:f2:65:1d:b8:28:c9:6c:2f:13:c5:bb:10:63:
b8:2a:6a:c6:f6:f6:0d:98:12:6f:d4:c3:da:77:51:
d7:20:02:eb:89:eb:02:bf:6e:5c:56:2e:85:03:fc:
cd:6f:21:64:f4:8f:74:48:2c:9f:a8:cf:52:b3:df:
73:3d:1f:b0:34:ac:77:18:aa:18:e5:12:ff:2b:eb:
73:48:4d:fa:08:0f:d3:65:1f:f9:b1:84:c9:e3:39:
00:14:52:46:5f:15:43:7f:b3:3a:0e:d3:01:cf:4f:
b0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B5:AE:86:80:F9:11:BE:3B:4D:E2:9B:F7:B1:D6:38:B7:3D:4A:99
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pbWuhoD5Eb47TeKb97HWOLc9Spk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f8:51:12:91:97:d6:a2:45:16:a1:09:f3:72:a8:b5:a2:42:
ba:60:b2:5b:94:c0:be:d0:1d:3b:6a:eb:bc:1f:c0:77:d0:9b:
6a:61:f3:f6:76:b2:8e:fc:81:e7:29:bf:ca:7e:59:f3:ec:5b:
6c:63:c8:4c:46:52:da:15:86:b1:8d:81:9f:d9:f2:ac:62:c4:
37:b2:b6:23:a9:5e:5a:3c:49:2f:ae:4f:a1:d4:4b:a8:ac:6b:
4c:29:67:c9:86:d9:41:7c:33:61:99:c8:7c:ce:0f:6d:0f:c4:
64:6f:90:1d:c5:5e:c9:57:a0:e9:73:40:a1:a9:05:b5:30:d7:
03:bc:c5:b6:cb:5f:f7:d3:17:74:ce:f2:4a:aa:80:3e:ed:47:
5b:88:da:fe:d4:5d:cc:17:03:b7:25:58:29:ca:08:5e:76:ca:
b9:c6:4e:51:0a:d0:28:c0:f7:d3:96:3e:04:0d:db:b5:41:0d:
5f:8d:e1:0a:be:55:f3:a9:5c:93:5b:a8:31:f7:ba:8d:af:ab:
22:65:00:b3:5c:89:a2:1a:e1:40:bc:82:07:50:dc:0d:7d:e5:
8d:54:90:6b:9c:48:34:ef:24:c4:76:10:11:7d:62:5e:ed:33:
90:39:67:4d:4e:bd:d8:4d:14:a5:23:cb:c7:24:b6:6d:1a:59:
3f:28:ff:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org