Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/14SU9IfJh-dj0Rcv-abHzxSrw7k.roa
File: 14SU9IfJh-dj0Rcv-abHzxSrw7k.roa (raw, json)
Hash identifier: aKCkegvz9O5/IYtJY4E6B1dKCpj6TiBuRTQ3Xqdxtik=
Subject key identifier: D7:84:94:F4:87:C9:87:E7:63:D1:17:2F:F9:A6:C7:CF:14:AB:C3:B9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EE1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/14SU9IfJh-dj0Rcv-abHzxSrw7k.roa
Signing time: Tue 29 Sep 2020 09:56:14 +0000
ROA not before: Tue 29 Sep 2020 09:56:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3809 (0xee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:14 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D78494F487C987E763D1172FF9A6C7CF14ABC3B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:ce:ff:75:68:d9:1b:99:23:76:c3:ea:85:
37:3f:80:82:ed:a4:6a:59:d6:91:40:f5:42:2f:21:
19:09:8a:e5:54:e3:91:0c:af:72:87:18:96:1e:ff:
82:ce:47:90:cb:7b:03:6f:d2:63:5f:36:2c:b2:c2:
3e:60:fa:54:14:3f:e9:f3:65:91:ca:6d:70:e4:c5:
f3:0b:c6:92:dc:86:98:58:0f:2a:7a:18:04:68:0a:
23:31:fc:0b:46:0f:c0:77:2e:34:0c:2e:d0:6f:c3:
9b:62:3f:09:34:0b:45:1c:63:a2:fe:18:1e:bb:3e:
4f:2e:b2:d8:19:40:c5:29:1c:25:d4:fc:6f:6e:b3:
49:19:58:10:fd:d2:fc:d4:bc:55:ae:dc:db:c0:eb:
e5:fd:31:04:0d:5d:fc:48:f2:70:e2:ea:82:9d:37:
10:7b:c6:76:88:e9:83:a4:e9:59:61:10:dd:db:fd:
83:d9:88:ad:9b:ce:72:2f:43:37:7c:f3:a1:57:2f:
8a:8d:cc:b0:01:24:11:74:79:00:f3:0a:70:1d:09:
b7:42:15:cb:b6:82:2f:9a:96:ec:37:23:91:d7:ae:
9f:25:3e:62:b5:dc:b0:83:a7:1d:74:ea:76:40:f1:
24:af:ba:5a:39:c4:f9:8b:ed:1f:67:3c:ff:39:66:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:84:94:F4:87:C9:87:E7:63:D1:17:2F:F9:A6:C7:CF:14:AB:C3:B9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/14SU9IfJh-dj0Rcv-abHzxSrw7k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:24:6f:a5:f4:6f:7d:16:c6:f0:bd:f5:ec:c2:f6:e4:aa:65:
e2:c6:6e:c6:c7:3e:e8:02:a6:69:2e:af:9e:03:82:9a:6c:94:
70:c2:10:65:78:69:16:c2:36:2c:d3:ab:8a:54:3b:8c:70:8f:
92:ee:0f:67:e1:fc:be:44:bb:53:67:8f:9b:2a:6b:23:ac:f1:
4e:c0:b6:ca:e4:26:30:03:8e:d7:be:3d:35:40:df:3e:38:85:
34:75:22:d9:55:0d:63:45:f0:a9:f8:8c:88:99:21:cf:c9:dc:
3a:05:18:ea:d2:62:39:cf:f1:e8:a0:92:d8:8a:18:b1:88:45:
e2:85:77:e0:b6:36:ff:4a:f4:8b:2e:81:cc:5a:f8:da:f7:71:
f3:f9:e9:73:b8:10:3f:a2:bc:82:e6:cf:99:1b:3d:b8:9d:23:
cc:97:61:e9:fc:20:fe:93:48:63:13:b6:13:09:2a:f0:b5:c4:
0c:a7:67:8c:1f:d3:64:0c:c2:87:4b:b2:bc:b2:7c:c1:45:bf:
59:ae:e4:72:c4:fa:d6:dd:84:f3:2a:60:14:9b:39:d2:55:0d:
a2:70:f5:05:90:45:ab:e2:b7:c0:d6:d1:60:66:c1:db:06:95:
bf:1c:da:b1:35:c6:a2:83:f7:ed:93:00:60:92:c4:57:e6:02:
f5:0c:58:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org