Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w8latDuVn6OEQ89z1UvfXlStdWk.roa
File: w8latDuVn6OEQ89z1UvfXlStdWk.roa (raw, json)
Hash identifier: NNh0ve4HsGcdMUO1noYZCtS5qpB2bqG8Pb8S2ZnhVs0=
Subject key identifier: C3:C9:5A:B4:3B:95:9F:A3:84:43:CF:73:D5:4B:DF:5E:54:AD:75:69
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0ECC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w8latDuVn6OEQ89z1UvfXlStdWk.roa
Signing time: Tue 29 Sep 2020 09:56:09 +0000
ROA not before: Tue 29 Sep 2020 09:56:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 211.76.121.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3788 (0xecc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:09 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C3C95AB43B959FA38443CF73D54BDF5E54AD7569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:7d:d1:5a:35:e4:35:a0:9d:73:8d:0f:af:
e0:39:ef:15:33:fc:bc:00:37:83:c6:1f:f6:73:bd:
c1:0d:1e:d4:ac:4a:0a:11:36:af:94:65:15:79:2b:
09:07:5e:70:64:81:3a:da:8b:70:6a:02:2f:31:04:
07:50:19:ee:f0:14:ce:a1:d6:72:95:48:ff:f0:f6:
7a:2f:84:98:58:48:1f:06:54:07:0e:86:d0:cc:36:
b4:53:50:87:a1:d4:01:a4:12:b3:59:1b:c4:05:e7:
e8:42:3d:0e:71:4d:95:7b:99:a1:98:c3:6b:fb:03:
cb:02:98:59:5e:87:c9:a1:35:77:dd:d1:37:47:6d:
ef:92:2b:b3:ab:21:83:83:c2:43:45:82:a7:36:f0:
7d:ad:c3:a8:17:01:81:8e:03:f7:f4:e3:08:45:37:
40:6d:cd:5a:a6:cd:7c:8e:4a:ca:cd:09:bf:a7:98:
eb:fc:73:34:f8:91:97:8d:a4:7a:cc:23:90:25:2a:
e0:bc:5c:b2:ed:f6:f6:97:e5:5b:a3:44:1d:eb:58:
54:23:94:0a:38:65:67:ed:9a:bb:25:66:38:4f:fa:
d0:dc:df:78:bc:e3:74:29:e1:38:b5:bc:30:3b:aa:
5d:d8:ae:72:74:74:d7:99:e6:59:7d:59:63:fc:5f:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C9:5A:B4:3B:95:9F:A3:84:43:CF:73:D5:4B:DF:5E:54:AD:75:69
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w8latDuVn6OEQ89z1UvfXlStdWk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.121.0/25
Signature Algorithm: sha256WithRSAEncryption
ab:67:ab:f1:dc:a5:9f:02:5c:84:b0:96:7d:98:c0:cd:03:6c:
a9:57:a4:56:aa:2e:cf:f2:bf:d9:b6:12:1c:22:89:aa:c4:7a:
d7:34:0f:b7:15:56:f3:27:54:65:cd:10:2c:39:6d:2e:88:f7:
08:3c:7d:54:b9:a5:d5:46:42:9d:04:17:20:80:d5:1d:7a:55:
ae:4c:3b:f2:f5:93:ac:98:27:10:28:3a:96:25:a4:f5:1d:14:
d8:6a:c6:bd:18:08:2c:69:78:db:55:13:d0:fb:51:25:26:71:
df:66:1a:59:ce:64:89:e5:27:ff:ab:9f:27:dd:47:15:59:20:
aa:78:54:b1:90:2c:30:eb:b3:aa:67:c5:04:f9:55:a9:ca:89:
84:ac:30:34:4a:cc:28:3a:0a:79:3d:66:aa:7b:ea:89:73:99:
74:b3:d1:a1:e5:8c:13:f7:e3:a5:d7:d4:57:d2:e3:33:a8:f5:
c3:dd:96:01:60:97:66:0f:1e:70:b0:f9:93:7c:f2:62:20:5a:
4c:02:a7:45:08:24:24:0d:be:ab:d1:ac:75:d0:ca:6d:2d:fd:
f6:1b:db:9f:29:46:9b:ff:ab:4e:66:cf:43:78:23:a0:eb:ae:
63:f7:e0:20:8c:3d:c6:97:87:5c:05:55:de:66:ee:9f:c1:c7:
08:6a:1b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:31 2023 by rpki-client on console-ams.rpki-client.org