Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Anod8YYRPiDfM_y9xNE82-Mls8.roa
File: 1Anod8YYRPiDfM_y9xNE82-Mls8.roa (raw, json)
Hash identifier: 2qwnbtpXM0h7GcLne5bIYRyg6CyJukN95YU4r8YrtTo=
Subject key identifier: D4:09:E8:77:C6:18:44:F8:83:7C:CF:F2:F7:13:44:F3:6F:8C:96:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2070
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Anod8YYRPiDfM_y9xNE82-Mls8.roa
Signing time: Fri 25 Nov 2022 04:38:43 +0000
ROA not before: Fri 25 Nov 2022 04:38:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.0.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8304 (0x2070)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D409E877C61844F8837CCFF2F71344F36F8C96CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:6d:51:b7:24:7a:50:7b:47:ae:6d:ed:ec:
cf:9d:f9:8b:e2:3a:dc:93:c1:b1:76:eb:67:b6:87:
d9:d5:58:9f:fe:71:a5:dd:4b:e0:ee:5c:a7:50:c7:
48:d4:f5:e4:3e:05:3f:3a:4a:40:cb:4c:1a:eb:18:
de:b7:c5:6f:95:d2:ce:93:be:06:1c:b9:17:f1:5b:
13:f7:c2:9e:1b:dc:d7:01:87:49:8b:bd:0a:46:e1:
ee:06:e4:cb:85:9b:4d:bc:30:ba:dc:7e:d6:4d:0e:
ff:3f:06:4b:e4:54:35:d8:f4:c7:4e:c2:52:69:a7:
f6:f7:45:a5:b8:e0:25:77:3f:0e:81:a6:1c:ae:3f:
a9:39:10:ae:44:c5:fa:c0:33:40:8a:53:73:8b:e1:
82:78:2b:c3:eb:d8:a6:fe:37:6e:7e:e4:6a:78:b8:
88:3c:c9:56:32:15:96:48:6a:aa:d8:a7:af:e9:93:
40:ad:1f:9f:c8:50:8b:c4:27:b7:b3:16:b3:2b:7f:
65:cc:58:e6:63:1f:92:70:3b:ea:ab:a0:3e:6e:f2:
fb:89:8b:9e:e5:a3:48:ae:02:13:61:d8:1c:d2:68:
9f:ec:13:c1:34:9e:8b:e9:08:a7:d7:a8:82:a6:b0:
cd:a6:2f:52:b5:05:7d:cf:18:5b:ef:ef:ed:ab:ed:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:09:E8:77:C6:18:44:F8:83:7C:CF:F2:F7:13:44:F3:6F:8C:96:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Anod8YYRPiDfM_y9xNE82-Mls8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.0.0/21
Signature Algorithm: sha256WithRSAEncryption
96:5c:35:3a:bd:e4:af:36:0e:43:be:69:09:91:27:b7:cf:85:
d3:47:e4:9a:78:4f:db:46:97:b5:4a:cd:e5:88:33:d3:2f:ef:
df:61:a2:6f:c8:cb:fc:cf:5f:2f:9b:e4:f7:fb:aa:ac:eb:7b:
37:8f:17:24:50:f9:00:47:68:b5:ce:51:e1:6d:c9:4e:78:40:
9b:c3:d7:48:bb:cd:18:c3:9f:2b:b3:95:60:4b:8a:36:d2:b3:
ae:6b:2a:be:f6:bd:aa:46:22:35:d4:f9:60:de:1d:9d:bb:63:
65:e1:9f:4a:58:96:fe:cb:a4:99:e7:02:be:a7:f9:78:50:ee:
e3:9b:42:74:29:01:a6:d4:54:a9:45:e6:b8:eb:09:6d:f0:91:
34:67:17:0a:c4:86:e8:50:dc:fa:b7:3f:32:1d:12:e2:8a:8f:
fa:5c:71:bc:58:3b:c4:9e:e8:5f:a9:3f:be:e1:b1:47:b7:36:
27:1d:f0:ff:ec:23:36:bf:ee:c7:38:08:69:f7:da:91:9a:cb:
88:6b:64:91:ce:39:fc:c0:41:d9:b9:52:c2:0e:1c:42:a4:07:
8a:5b:f1:66:ee:12:77:02:e8:af:67:49:7e:46:4e:03:43:79:
3f:f8:01:91:20:b8:92:ad:1b:4a:1e:81:23:a4:b0:9a:5e:3c:
cf:23:d2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org