Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/25rPmzcbX4nooSC59CdKsoyjmNc.roa
File: 25rPmzcbX4nooSC59CdKsoyjmNc.roa (raw, json)
Hash identifier: 6ilxEs1rQo5oSVI7HGpoy8kkQZEVhk/9QtHeVCSOfw8=
Subject key identifier: DB:9A:CF:9B:37:1B:5F:89:E8:A1:20:B9:F4:27:4A:B2:8C:A3:98:D7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/25rPmzcbX4nooSC59CdKsoyjmNc.roa
Signing time: Wed 29 Sep 2021 02:46:49 +0000
ROA not before: Wed 29 Sep 2021 02:46:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7076 (0x1ba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:49 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DB9ACF9B371B5F89E8A120B9F4274AB28CA398D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:03:6a:41:82:f5:9a:ba:d5:17:f6:1a:2e:
e5:e5:b0:dc:25:a7:fc:90:bf:93:56:70:41:91:94:
b9:01:67:5d:0a:bd:af:a0:f4:d5:29:51:f8:4d:0c:
c3:b6:f9:d6:ef:25:74:96:93:e2:ce:ce:53:5f:2f:
1c:e7:86:cd:8e:6b:79:62:de:09:8b:31:67:ef:58:
cc:54:38:6d:9d:4e:aa:21:c0:3d:77:f3:80:c2:26:
6e:16:c2:5c:d3:8e:2d:79:57:57:f3:ea:5a:39:ac:
25:2f:fd:c1:d2:c4:cb:a1:1d:44:f6:f4:5b:7c:65:
28:0a:fd:6c:3c:7c:b2:09:90:4f:48:29:e9:18:34:
e6:2b:e9:a5:96:03:44:f7:0a:84:7b:63:8c:53:e2:
29:b8:95:49:6b:c2:47:32:e3:b1:68:fa:81:67:28:
19:05:ef:be:f2:ca:ba:5a:33:9c:28:ab:85:ca:14:
c7:49:87:54:46:a3:d0:2f:b9:0f:12:0b:33:22:21:
93:dd:c0:e4:83:f3:37:77:17:0c:2c:06:43:a2:c6:
ea:a4:b5:1a:ca:58:8d:c6:b5:24:b5:dd:98:34:4c:
d7:16:b3:0f:08:11:75:ee:df:0f:15:46:40:df:31:
ad:1f:8f:4b:cc:c3:a4:a2:d0:1e:7b:ac:7b:ec:14:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9A:CF:9B:37:1B:5F:89:E8:A1:20:B9:F4:27:4A:B2:8C:A3:98:D7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/25rPmzcbX4nooSC59CdKsoyjmNc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:ef:c4:d3:15:d2:55:22:1d:0c:97:89:1e:8b:5e:0a:79:73:
af:2d:81:66:33:29:e1:3e:90:5a:55:d9:a3:b5:bd:eb:55:3c:
c2:be:3e:71:9c:e9:3e:ea:09:ee:3d:ce:e1:6a:30:b3:27:15:
a8:8b:00:59:24:00:4a:ff:70:07:fa:02:7d:64:02:4c:47:e8:
05:98:0c:02:75:ea:e9:25:72:39:11:64:25:4f:61:75:7b:c3:
32:5a:7d:b2:31:77:62:52:56:71:8b:c6:4e:0a:e8:f0:83:ee:
96:3a:ed:0e:ca:51:e2:ce:ec:7c:cc:67:c7:76:19:a8:f9:1f:
b5:ed:58:d0:c3:b0:66:70:cd:2e:46:dd:25:81:05:b3:7a:0a:
bb:c2:e3:cf:3e:b5:8c:1d:7c:43:d8:0e:5d:ae:28:44:4b:c5:
f9:2a:4c:6b:2e:12:43:1f:df:fc:ed:e4:77:4f:9d:a7:8c:b5:
cc:7e:f8:1c:3f:bb:a5:cb:0d:14:73:f3:d9:88:bd:f1:cb:65:
a9:ea:82:63:08:0d:ad:a1:13:26:f2:c5:b9:13:b7:01:74:a3:
c8:95:6b:4c:0e:7c:e4:70:10:fb:cb:79:4b:9e:05:d9:9b:68:
d2:9e:84:fc:5f:6e:44:21:17:e6:54:fa:05:70:ea:5d:bb:49:
af:78:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org