Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xsO2xenwehpKcRDbxDSVO_eGwX0.roa
File: xsO2xenwehpKcRDbxDSVO_eGwX0.roa (raw, json)
Hash identifier: 3ttVWU613m3WNxy8TPPEHZKjdVn7DBiBIJ7tZC6Gsl8=
Subject key identifier: C6:C3:B6:C5:E9:F0:7A:1A:4A:71:10:DB:C4:34:95:3B:F7:86:C1:7D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1631
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xsO2xenwehpKcRDbxDSVO_eGwX0.roa
Signing time: Sun 07 Feb 2021 12:08:54 +0000
ROA not before: Sun 07 Feb 2021 12:08:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 211.76.120.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5681 (0x1631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:08:54 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C6C3B6C5E9F07A1A4A7110DBC434953BF786C17D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:54:07:fb:85:bd:1b:27:d9:c8:d0:74:0c:
72:fa:2f:a4:67:28:36:11:f0:59:a2:7d:0f:dd:60:
45:8b:85:be:a5:85:f0:06:fb:00:85:af:84:98:41:
84:8d:8d:ae:aa:eb:db:f1:83:65:fe:1c:6f:e4:5c:
5d:f4:47:7e:88:14:03:0c:7f:42:48:a8:7e:fc:1c:
04:13:4a:9e:3d:0f:8a:a8:da:97:b3:6c:68:4d:3f:
63:fe:56:8c:24:bc:8f:47:f3:66:2b:05:04:3e:0e:
45:8c:47:fd:b7:20:53:70:37:38:71:34:02:e0:d3:
92:e7:92:f2:ca:ab:d5:4b:e2:b2:85:32:77:e6:98:
a7:64:1e:9d:8c:80:a0:48:13:af:7c:7e:d1:80:2e:
f9:d1:8f:60:21:80:4f:53:00:be:9b:6f:e8:4b:7f:
18:ce:7b:b4:de:ce:5f:6a:4c:25:65:59:e7:42:b1:
c8:37:c6:89:df:bc:c0:23:f4:50:9c:d7:cf:f3:10:
a9:8f:02:a4:78:50:a4:b2:a3:33:fe:62:8b:4b:24:
c2:bc:50:f8:db:1b:f3:65:f6:ac:47:63:7e:43:3d:
fc:f7:af:b7:e3:5b:5b:80:3f:73:f4:ec:6b:6a:71:
19:2f:9d:8b:b8:c2:63:dc:9f:0d:bc:7b:c8:31:88:
5c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C3:B6:C5:E9:F0:7A:1A:4A:71:10:DB:C4:34:95:3B:F7:86:C1:7D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xsO2xenwehpKcRDbxDSVO_eGwX0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.120.0/25
Signature Algorithm: sha256WithRSAEncryption
b4:bb:36:c4:e7:cc:e1:a2:82:18:ba:76:c4:a9:b5:c6:c9:f0:
ff:1f:45:e3:ab:73:25:ff:9d:67:34:54:7c:b1:24:63:b0:88:
6d:6f:ac:ef:28:0d:32:40:0a:26:59:62:ee:13:d1:90:e9:44:
b2:09:28:20:ca:ca:f0:87:8d:3f:87:4e:af:62:e8:43:0b:99:
ab:0a:af:4d:bd:f0:e2:d6:d7:e7:ad:d0:b2:08:0d:c1:6d:9c:
1a:b5:65:9a:7c:26:b1:21:18:5e:b8:bd:49:9f:99:a0:3c:b5:
1a:90:da:1d:91:35:f8:24:ca:35:a8:d0:8b:4e:f9:f3:1f:d6:
3b:85:48:10:e4:fa:8c:1a:bb:b1:e0:bb:7d:b7:d0:c3:44:e7:
42:b4:9e:34:99:ea:fd:b5:c7:b2:86:27:a9:56:03:01:02:44:
77:7e:8f:cf:7e:c0:35:19:76:9a:04:e8:38:91:47:ab:99:69:
1f:e4:de:9f:ec:0b:48:22:07:81:30:fb:8f:b1:fc:b6:7a:f9:
0d:e5:3c:de:5e:9c:2f:5d:61:96:89:17:80:8b:1e:3d:f2:26:
18:28:9f:89:9e:ff:02:d5:1f:68:e0:37:ed:c4:cb:c1:d0:3b:
60:0f:49:9c:9c:66:73:34:f2:4f:91:0d:86:e6:4c:c9:ec:af:
2d:cc:d1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:31 2023 by rpki-client on console-ams.rpki-client.org