Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xD66SDaRJQzF4SXOd5NvdY21nXE.roa
File: xD66SDaRJQzF4SXOd5NvdY21nXE.roa (raw, json)
Hash identifier: oVWI5Azx10T6euVU/1I5XixGWToC+3w2kobTlA1uSrQ=
Subject key identifier: C4:3E:BA:48:36:91:25:0C:C5:E1:25:CE:77:93:6F:75:8D:B5:9D:71
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1493
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xD66SDaRJQzF4SXOd5NvdY21nXE.roa
Signing time: Sun 07 Feb 2021 11:59:11 +0000
ROA not before: Sun 07 Feb 2021 11:59:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 211.76.115.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5267 (0x1493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:59:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C43EBA483691250CC5E125CE77936F758DB59D71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:37:56:42:3b:4f:a5:56:b4:de:02:7f:52:
56:e5:fc:55:fa:24:6c:7b:3a:09:19:48:99:7b:53:
7c:4f:c9:db:1b:74:d1:d5:b7:d4:d7:9b:bb:f6:d0:
52:63:54:7d:15:33:64:63:29:b0:75:eb:16:38:4a:
38:e8:c1:17:17:fe:8a:96:fb:80:f7:24:f0:4d:a1:
58:95:43:b7:fa:f5:40:cf:1f:45:f8:14:84:53:e2:
b4:ad:db:79:50:21:a2:8c:31:00:13:a7:ce:7c:84:
e2:77:46:97:e1:31:23:ee:cb:f6:82:00:cb:a5:45:
08:80:5b:e4:fa:7a:1a:3d:b1:19:05:9a:57:22:81:
bb:7a:47:a1:1f:b0:51:a3:c4:88:c6:bf:f4:4e:f1:
c7:fd:9b:a9:96:bd:69:a5:22:cd:9a:91:64:ee:d2:
2b:24:8e:fc:1c:06:09:22:1c:d7:a1:55:17:ce:96:
df:af:ac:d7:7f:6c:97:4e:ac:25:8b:22:0c:b4:5a:
60:eb:eb:ea:23:cf:87:fb:45:72:74:8c:c2:9e:8f:
3d:b4:cc:53:2d:cf:65:e7:27:f9:55:c4:21:2f:d4:
60:b2:c1:38:78:97:7e:49:1d:0b:2a:ba:0e:16:35:
df:22:1f:64:40:30:c2:da:3b:44:a9:b3:f3:b2:ac:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3E:BA:48:36:91:25:0C:C5:E1:25:CE:77:93:6F:75:8D:B5:9D:71
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xD66SDaRJQzF4SXOd5NvdY21nXE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.115.0/25
Signature Algorithm: sha256WithRSAEncryption
a3:de:c3:60:f6:44:b7:a9:53:3b:49:d5:0b:e9:6a:7c:92:4e:
2e:79:5f:d7:14:b8:33:14:17:25:ec:6a:3c:a4:fa:1c:1f:ca:
7c:55:12:96:1d:53:48:30:a6:37:0d:b8:ce:2b:65:e4:a2:41:
aa:cf:2b:5f:2d:4d:4e:e2:33:1b:50:59:dd:4f:36:46:58:92:
57:02:39:85:63:0c:14:e7:a6:76:11:02:44:c9:b9:aa:0b:1a:
3f:87:02:0a:80:be:29:d0:2a:3a:b8:0b:63:a4:03:e1:48:0b:
63:7e:15:f9:a9:a1:00:59:24:d9:55:e5:d5:37:bd:1e:6d:f6:
57:f9:b3:31:7b:8a:4e:b9:67:f3:8a:7c:f0:4b:30:59:5e:93:
eb:06:71:5d:fa:59:8a:8f:0d:0b:43:ce:8b:d9:d7:2b:c9:09:
2c:10:6c:a3:f5:60:76:7f:ea:5d:a9:a5:34:7b:ea:53:d6:bb:
3a:ed:0d:8e:51:e3:8f:c0:2c:b2:47:f8:fb:4c:65:b9:2d:7d:
7c:84:90:f0:0a:3b:94:22:3e:81:2a:1f:99:6c:ef:2f:12:cd:
49:ea:09:7e:a9:23:d6:aa:2f:e7:ee:a4:7b:56:9c:90:41:9c:
20:20:f2:13:c0:8a:bd:b3:e0:3c:fd:70:13:97:cf:60:c5:61:
3a:87:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:50 2025 by rpki-client