Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/EoWffEBTODm-9egUs1MGOb4QirA.roa
File: EoWffEBTODm-9egUs1MGOb4QirA.roa (raw, json)
Hash identifier: aO2WVmLKyC6zCPx4EIElOMdGYns72ZHEv2xBkXfXxlA=
Subject key identifier: 12:85:9F:7C:40:53:38:39:BE:F5:E8:14:B3:53:06:39:BE:10:8A:B0
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0A6B
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/EoWffEBTODm-9egUs1MGOb4QirA.roa
Signing time: Thu 15 Sep 2022 02:42:05 +0000
ROA not before: Thu 15 Sep 2022 02:42:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 101.3.106.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2667 (0xa6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Sep 15 02:42:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=12859F7C40533839BEF5E814B3530639BE108AB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:c2:f7:c4:7e:1b:7d:b2:70:0f:b0:79:23:
44:77:04:4b:1a:a2:2a:28:3e:be:58:1b:54:8f:46:
af:db:4c:4f:93:76:88:66:4b:dd:34:4e:9f:f2:23:
24:f9:31:54:8c:10:2c:4b:57:e1:e4:29:74:5a:ca:
16:ff:6e:23:75:17:45:86:00:40:13:8b:16:2e:62:
ee:fd:b0:75:ee:d9:46:83:5f:00:24:7c:84:ee:29:
f2:1e:29:96:fa:00:d0:aa:b0:97:75:2d:2b:bb:8a:
ce:99:38:e4:5e:f0:d6:d1:4b:33:b3:d9:4f:d0:c2:
cc:53:37:25:88:68:4c:56:ec:09:13:75:40:fe:73:
8d:ac:c5:c7:ee:c8:f9:f1:dc:5d:14:d6:d3:ac:e4:
9e:4b:46:64:4c:00:10:9b:73:5f:7c:88:1f:e7:2e:
e3:e4:7c:b3:df:78:eb:c3:85:6c:ac:93:7e:a4:27:
dc:81:ed:7d:1f:8a:ef:1e:82:e3:6c:50:4d:b1:c2:
dd:09:28:4a:70:f1:ec:c1:99:67:b8:e9:09:87:c1:
ae:b9:cf:29:c4:8e:ff:fc:ac:91:73:72:ed:dd:05:
86:0b:0d:79:d4:f7:76:d8:a9:7f:78:e3:04:1e:89:
2f:1f:a9:76:b2:e3:af:c5:86:0b:75:50:ec:56:db:
e6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:85:9F:7C:40:53:38:39:BE:F5:E8:14:B3:53:06:39:BE:10:8A:B0
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/EoWffEBTODm-9egUs1MGOb4QirA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.3.106.0/23
Signature Algorithm: sha256WithRSAEncryption
59:83:6c:59:9b:d2:d9:d5:dd:38:da:59:d6:24:13:20:23:3b:
9f:ae:f3:13:a5:b5:47:32:8e:fe:7f:34:b8:b5:f9:c5:23:1c:
80:0a:4b:4f:85:4a:85:de:78:19:99:48:42:c4:e0:88:93:a3:
21:5f:c9:91:c2:96:b2:f3:09:fc:89:34:d2:eb:20:db:e5:2b:
96:3d:2d:9c:1c:d7:17:4c:3d:01:7a:1a:0d:ca:a9:6e:e2:9b:
a6:40:50:70:5f:dd:37:73:19:ca:d5:04:81:ce:3b:85:d2:c8:
30:05:80:ef:65:e5:13:ca:9b:24:2f:43:4d:81:bf:58:3e:4f:
31:fe:10:3a:7d:5a:9f:e8:10:7f:6c:74:3b:f2:d0:c7:70:84:
8d:d3:ad:2d:d4:c3:a3:5f:b1:2a:5d:d4:eb:9c:48:2e:f5:e4:
20:17:95:60:82:1a:70:25:5f:e5:22:9a:b2:c6:7c:4c:a4:8f:
d9:e3:75:13:43:f5:08:fa:4e:1b:cb:9b:64:ca:cf:e1:71:b6:
d3:cf:70:48:e9:dc:0a:f7:1e:1f:d0:79:46:d1:1a:48:77:5e:
15:dd:75:e3:7b:53:79:b7:54:fe:9c:1a:02:99:cb:f0:6c:86:
e4:75:86:96:38:81:e9:69:3d:cb:79:4d:ee:33:40:b5:83:ac:
5d:ac:78:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org