Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2W-Vh3cLVossRqBlj8lpkj0WkR4.roa
File: 2W-Vh3cLVossRqBlj8lpkj0WkR4.roa (raw, json)
Hash identifier: jrIY8uS2nhVLNiXSptvYsmEsdyY8jMVtOglytLaPVSc=
Subject key identifier: D9:6F:95:87:77:0B:56:8B:2C:46:A0:65:8F:C9:69:92:3D:16:91:1E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2W-Vh3cLVossRqBlj8lpkj0WkR4.roa
Signing time: Thu 15 Sep 2022 02:53:28 +0000
ROA not before: Thu 15 Sep 2022 02:53:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D96F9587770B568B2C46A0658FC969923D16911E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:00:ea:b3:5f:1f:03:bf:87:fe:4d:17:bd:
53:24:e5:46:85:c4:3a:e1:4b:0f:db:a3:39:1f:88:
dd:ef:8c:5b:5f:64:3b:c7:fd:c4:3b:76:96:42:f2:
dd:48:aa:c7:e6:c6:b0:6a:28:74:f8:3e:65:61:9f:
5c:c6:df:87:a7:08:1b:23:62:0b:44:47:13:48:cf:
c2:b0:d1:ae:19:1a:7f:92:0b:16:10:c8:25:a1:38:
16:75:63:19:3d:f3:34:48:02:d4:4f:6e:e3:55:f7:
e3:73:15:f1:8b:53:1d:1d:56:94:15:88:75:ab:da:
3b:9c:d5:2c:fe:23:1c:aa:1c:d3:1f:50:60:3b:b6:
94:19:23:cb:59:db:c4:c9:65:45:ce:82:30:97:1b:
c9:7d:a6:09:ba:cb:c9:a7:ce:b5:8a:69:2d:69:c1:
78:b5:a5:5b:0d:14:27:36:df:46:33:51:8d:1b:fc:
98:53:7b:38:0c:1e:4b:12:d9:05:a7:79:42:ee:0b:
bc:f2:95:eb:2b:85:11:82:c6:4c:c6:d1:50:8c:b6:
24:fc:a9:3d:26:01:c5:99:fa:35:cc:b9:62:ce:05:
6f:4c:e3:c0:c0:75:30:7b:5c:4a:dd:47:9b:a1:bb:
84:1d:dc:f3:44:0e:3b:ec:4c:fb:60:ec:7a:39:0f:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6F:95:87:77:0B:56:8B:2C:46:A0:65:8F:C9:69:92:3D:16:91:1E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2W-Vh3cLVossRqBlj8lpkj0WkR4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:bd:9e:c4:4a:21:b9:86:bc:5c:4e:7a:a6:16:47:08:af:6f:
28:fb:aa:36:9f:1b:21:b8:45:d4:89:e8:74:52:9b:4f:d7:e8:
e9:3f:18:91:6a:9b:97:0a:71:65:d0:8d:9f:d9:36:88:db:d7:
92:77:e2:83:e0:70:6a:65:91:8a:43:21:a5:28:37:ba:d0:b5:
96:7e:8b:db:d7:85:98:65:4a:7a:34:43:5d:26:08:21:12:e4:
f2:f7:24:a0:af:17:05:84:de:34:db:b0:36:85:83:20:30:d1:
8e:c2:53:ef:50:4b:46:79:38:c2:21:12:a9:2a:7a:3c:a9:df:
04:b6:1b:3f:c6:0a:3e:c2:88:59:66:c0:55:c7:38:80:70:9e:
2a:be:9f:b7:cf:27:8d:18:bb:6c:07:f7:40:00:ee:f3:06:4d:
00:1f:27:33:d3:24:4f:4a:02:1e:c3:91:04:2e:73:e0:f2:ff:
ab:4e:0a:55:13:bb:e1:60:19:1f:98:d1:31:63:c8:88:67:14:
ee:1f:96:89:aa:59:e8:c9:be:8a:5f:68:87:90:ed:bc:d3:4b:
7e:53:aa:4f:45:7c:7c:16:2e:64:94:07:d9:39:ee:d7:5a:44:
46:61:10:8b:6d:b3:b4:63:26:89:b7:0f:8e:17:bb:85:f4:18:
b5:3c:28:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org