Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Tvvk7t8aipDE5gVXkLOdCr-cuM.roa
File: 2Tvvk7t8aipDE5gVXkLOdCr-cuM.roa (raw, json)
Hash identifier: lGJFgYU2C3yeWSojrg/qh6jq74YR5Pd6OiS5wvX+WWk=
Subject key identifier: D9:3B:EF:93:BB:7C:6A:2A:43:13:98:15:5E:42:CE:74:2A:FE:72:E3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1ABE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Tvvk7t8aipDE5gVXkLOdCr-cuM.roa
Signing time: Wed 29 Sep 2021 02:45:42 +0000
ROA not before: Wed 29 Sep 2021 02:45:42 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 103.224.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6846 (0x1abe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:42 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D93BEF93BB7C6A2A431398155E42CE742AFE72E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:8d:09:e0:38:d4:e9:9c:8c:67:e1:5b:8c:49:
0a:95:39:2e:40:a2:41:df:80:15:0e:54:54:13:65:
f6:d6:b2:ff:23:d0:e7:e3:5e:68:d0:77:b2:ae:6b:
b1:c3:9b:61:ca:0c:00:96:59:aa:69:e2:75:44:83:
f5:09:d3:5d:3c:6c:bb:30:e9:5f:15:c4:0f:e4:0b:
2b:54:d1:69:b9:d1:22:2c:bd:b3:c9:da:d3:49:aa:
b3:b8:52:b6:bd:be:f2:84:04:00:21:cc:2c:e5:c8:
f1:92:7a:7e:45:be:e2:29:67:40:a7:7b:17:94:36:
b6:8d:2c:83:2d:6a:c3:59:b6:06:29:58:6d:cb:ad:
3e:2c:05:75:aa:50:4d:e1:9a:52:00:7b:34:39:fe:
fa:57:32:33:d4:bd:fb:e4:c2:97:45:f8:04:ef:56:
6d:c6:13:5b:2a:da:2d:5b:d9:8c:98:44:dd:c9:fe:
67:68:fb:36:35:f4:e7:80:be:78:4a:c8:b6:e2:41:
2d:db:43:09:e4:da:6b:87:3b:fd:e9:45:a5:5a:0c:
00:be:f6:46:c3:c5:82:89:03:db:ba:f0:3b:5d:ab:
cf:42:bc:35:8a:c7:e7:e2:41:3b:6c:b0:60:16:06:
da:3d:2f:59:43:37:ea:2b:f7:75:10:ea:c9:d7:87:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3B:EF:93:BB:7C:6A:2A:43:13:98:15:5E:42:CE:74:2A:FE:72:E3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Tvvk7t8aipDE5gVXkLOdCr-cuM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.194.0/24
Signature Algorithm: sha256WithRSAEncryption
24:90:f4:74:c9:c9:2f:86:7a:a1:02:a4:77:ce:74:f9:56:11:
ee:cb:8a:b1:aa:e7:74:90:57:26:d6:2e:f1:1f:99:0a:af:81:
46:39:ed:fa:8e:bb:88:4a:9d:37:21:d0:a3:93:e0:e0:66:28:
20:07:d0:de:46:10:a4:fe:85:77:0f:f9:98:a1:c6:50:ca:80:
2f:61:2d:aa:77:7e:88:4c:70:96:4f:5a:ee:31:49:f9:22:d8:
fd:6f:86:fa:86:8b:c1:22:c8:3b:ed:cc:61:e0:80:dc:be:90:
ff:21:d1:e7:35:fa:4f:dc:ed:7a:bb:95:1b:cb:5a:f2:b9:17:
7c:a1:01:90:97:5d:51:19:7c:ba:44:20:2f:92:23:a1:ac:be:
ec:36:25:81:b8:e7:54:85:e6:00:32:32:61:0b:3a:88:c6:91:
97:c9:8f:0c:c7:4e:9c:5e:63:a2:dd:14:66:97:46:85:6b:6d:
88:15:0d:01:1a:11:79:1d:1c:33:25:93:47:cf:bb:2d:1d:f5:
22:2f:f0:ba:f1:9e:51:6d:6d:6e:90:3e:24:44:7f:b8:da:e8:
68:ff:b8:89:a7:d2:16:09:d2:d7:4e:ff:6a:7b:c3:50:ea:83:
20:45:84:b4:12:0b:b0:c0:1c:5b:90:06:db:1d:c6:6b:7a:47:
82:a6:11:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org