Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1SaurUvH66WpKEhCz0BxRp1hDfo.roa
File: 1SaurUvH66WpKEhCz0BxRp1hDfo.roa (raw, json)
Hash identifier: N2UawuSbB3b4DnXz1T9xDvH6pGRlRfskqkl1yKimWtA=
Subject key identifier: D5:26:AE:AD:4B:C7:EB:A5:A9:28:48:42:CF:40:71:46:9D:61:0D:FA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1SaurUvH66WpKEhCz0BxRp1hDfo.roa
Signing time: Thu 15 Sep 2022 02:45:58 +0000
ROA not before: Thu 15 Sep 2022 02:45:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D526AEAD4BC7EBA5A9284842CF4071469D610DFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:7d:41:81:89:f3:f7:1b:42:c2:9d:e0:6e:
52:4a:aa:10:26:43:d8:ef:4d:ea:c4:7d:7e:57:56:
75:52:ac:06:be:98:3e:b0:ce:38:c7:9d:4f:65:3d:
d2:ff:38:f9:52:15:da:d4:05:06:35:2d:5a:35:18:
1d:48:27:ad:f6:cf:7c:fd:1d:10:6f:9b:dd:9d:ce:
08:f1:7e:a3:85:cc:0e:3a:ec:7e:7e:9f:34:15:a3:
ed:08:37:7e:96:66:41:35:a0:62:4c:15:5e:70:02:
5f:68:ad:cf:64:3b:bf:c4:59:7e:e6:c6:6a:2b:4c:
65:eb:c8:0f:1f:ec:70:36:cc:45:93:f6:09:15:d7:
12:3e:f4:4c:f1:a2:2f:69:40:6e:0e:d5:1f:6f:87:
94:66:bc:d1:48:1e:27:13:fa:50:d0:3e:44:3e:99:
bb:71:f4:05:ba:b7:28:08:24:9c:07:68:eb:5e:0d:
d0:37:5b:a3:1c:e9:de:7c:5d:3b:a2:f1:6d:aa:6f:
6b:c6:b8:14:5a:c0:f2:2c:9d:0e:6b:35:bf:aa:13:
dd:8c:18:6e:e0:0c:d8:73:c7:e6:0a:f4:ec:8a:34:
98:b7:f5:20:3a:1a:09:a5:03:d8:c6:61:ef:04:80:
eb:c2:63:ed:b3:31:42:e8:92:e8:5d:d3:c0:e0:b2:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:26:AE:AD:4B:C7:EB:A5:A9:28:48:42:CF:40:71:46:9D:61:0D:FA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1SaurUvH66WpKEhCz0BxRp1hDfo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.44.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f1:f8:ba:84:e8:51:6f:be:70:d6:db:95:e9:34:1b:a9:6c:
4e:6e:60:31:63:cb:cf:ce:8d:15:88:15:a1:9f:36:66:36:62:
4e:eb:de:18:ee:79:c5:01:e1:2a:f0:dc:ea:ab:27:a8:99:e4:
5e:1a:fb:25:6c:64:93:34:a6:ac:ca:04:54:e5:49:e5:d7:6a:
a3:54:e5:d4:c7:fe:3c:88:64:fe:a9:29:38:a2:8f:ef:4f:11:
a5:8d:e5:1f:7e:37:af:3a:d4:0d:08:ee:54:b3:32:2f:f6:26:
bb:70:20:7e:e9:c6:1b:03:5f:3b:89:59:a5:3b:b9:36:6a:67:
f7:1e:1f:ee:72:15:ec:00:52:76:3d:1a:93:aa:8e:a6:93:88:
5c:6a:c8:c2:43:0e:36:10:16:c6:d3:46:81:83:47:5c:0e:9d:
cf:4f:8d:4f:f3:d9:42:d9:14:7a:7f:dd:3b:0b:df:96:4c:31:
cd:56:67:9a:be:63:1e:69:d3:d4:a3:28:5b:cd:0e:4f:62:87:
c4:88:cf:51:14:3d:65:a3:18:98:e3:6a:b1:da:1e:60:a1:6c:
80:aa:83:64:48:6f:bc:cd:5c:f7:ce:1c:5d:4d:06:36:c1:6b:
76:ca:f3:1e:90:ea:4d:b0:4e:84:43:0c:5d:3f:cd:01:cb:13:
15:a1:75:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org