Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2qX6gSt4RTEYQ8lttF1I2XWottw.roa
File: 2qX6gSt4RTEYQ8lttF1I2XWottw.roa (raw, json)
Hash identifier: PouMQnbuG/r4Qr4jK6Nnm/vy57tyeoSs4ZoblTpHrKA=
Subject key identifier: DA:A5:FA:81:2B:78:45:31:18:43:C9:6D:B4:5D:48:D9:75:A8:B6:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2qX6gSt4RTEYQ8lttF1I2XWottw.roa
Signing time: Thu 15 Sep 2022 02:44:52 +0000
ROA not before: Thu 15 Sep 2022 02:44:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DAA5FA812B7845311843C96DB45D48D975A8B6DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:de:7a:f5:06:aa:11:50:1e:df:8d:13:4e:
e0:02:77:b2:9d:52:30:5d:d1:4c:e8:e1:3c:6b:ae:
36:0c:23:0c:e7:90:82:cc:c4:97:d3:88:82:15:a4:
35:4e:c5:bf:38:b9:4f:c3:91:03:89:fc:79:05:b8:
88:00:37:6a:17:3c:62:1d:b2:47:01:a6:2c:fc:0e:
eb:fb:df:56:8c:db:e9:a0:97:1e:20:6b:00:6d:66:
69:af:e3:4d:1d:47:b4:a6:a5:a4:05:4e:80:4f:6d:
cf:fd:cc:de:0b:a0:2e:8a:e5:24:d3:8b:2e:f9:8c:
6d:ba:e2:5c:64:f3:ee:e5:f4:9c:53:dd:78:4d:d6:
fc:0c:68:ab:d9:be:e6:67:f5:00:0f:9a:9d:da:64:
bf:ba:c0:92:4d:01:2c:ac:de:f8:0a:b1:8c:cf:9b:
cb:87:de:71:c6:4e:eb:5d:96:31:41:c1:e1:25:a8:
1e:57:78:45:ac:b3:9f:58:20:16:4e:15:72:e4:4c:
c4:3e:b0:2d:19:14:82:ba:23:78:19:61:3c:33:84:
c2:1e:7f:46:31:e7:2a:03:17:44:72:5c:ca:e5:98:
69:d9:c6:68:1b:25:04:ff:87:05:23:86:18:70:22:
08:e4:2d:ce:38:04:d4:60:bd:04:dd:d9:46:fe:7a:
2e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A5:FA:81:2B:78:45:31:18:43:C9:6D:B4:5D:48:D9:75:A8:B6:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2qX6gSt4RTEYQ8lttF1I2XWottw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.212.0/22
Signature Algorithm: sha256WithRSAEncryption
43:d5:ae:70:24:eb:9c:47:6f:66:16:a0:14:07:63:c5:be:6e:
a9:4a:b5:33:85:b5:8f:12:6f:c4:64:40:ab:8d:62:71:71:95:
53:1e:e3:89:0d:67:63:ed:2f:ac:04:0b:96:5e:9f:b0:27:b8:
09:44:92:08:9f:f0:ce:a4:7e:41:0d:e2:0a:8a:cd:e7:8a:95:
d1:1f:12:64:d3:f3:93:28:20:ab:16:bc:00:ec:50:08:ac:e4:
ea:b3:16:ec:73:7f:a3:7e:99:84:9c:8d:b6:bf:1f:71:a5:f0:
1d:bc:21:33:f6:e5:f1:07:2f:06:1a:74:73:c5:38:f8:95:cc:
c1:24:02:ae:4a:28:d1:39:1a:c4:23:6d:f5:70:9a:f7:35:ef:
8c:92:f3:5e:b9:8b:80:cd:e4:e1:52:51:6b:87:5b:60:91:e3:
4b:bf:19:82:e0:cd:81:79:0f:26:be:51:fa:80:06:16:30:67:
06:12:a4:78:b9:e0:42:8a:b3:8c:5d:7f:e6:d2:54:87:0c:76:
b3:3d:eb:f8:9d:9b:19:12:b8:b8:d3:18:0e:ec:15:4b:54:2a:
35:5a:52:c7:c4:22:b7:6a:8d:44:5b:78:b0:2f:86:8f:18:61:
a5:ca:b3:fa:74:ab:f9:48:c6:fd:1c:82:18:3a:8f:1b:d1:a9:
33:79:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org