Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2zkBfWAKC3qiongOus0W30KvVQQ.roa
File: 2zkBfWAKC3qiongOus0W30KvVQQ.roa (raw, json)
Hash identifier: tXWS4qGpM8Fd+hZpAyALk3nFO+1XKJuFUlPi3bGr8N4=
Subject key identifier: DB:39:01:7D:60:0A:0B:7A:A2:A2:78:0E:BA:CD:16:DF:42:AF:55:04
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E52
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2zkBfWAKC3qiongOus0W30KvVQQ.roa
Signing time: Tue 29 Sep 2020 09:55:36 +0000
ROA not before: Tue 29 Sep 2020 09:55:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3666 (0xe52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:36 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DB39017D600A0B7AA2A2780EBACD16DF42AF5504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:58:af:12:44:b3:b7:28:5e:ee:ef:0d:98:
76:a6:30:09:dd:2a:fc:87:69:c1:5f:bb:ed:b6:81:
c7:0a:13:c6:11:e2:d7:7e:ea:c8:71:91:48:b4:c2:
67:ab:9f:8d:2b:b2:0a:e1:d1:ac:c9:40:37:00:10:
29:be:50:30:02:42:91:7f:ef:a8:03:0e:c1:a0:ba:
92:05:30:09:57:20:c0:04:c0:57:74:8a:07:af:1b:
f9:fe:4d:a7:62:16:31:8f:43:51:0e:5f:b9:04:fa:
e5:7b:fc:1f:c9:58:08:dc:31:37:2c:ff:b2:d8:02:
2b:8e:40:81:d6:c3:f0:4b:fb:99:cd:e0:02:cf:d8:
af:cf:94:ab:17:79:2d:10:cd:44:47:be:fa:9d:b7:
a7:d8:b4:b6:db:4c:79:b6:90:59:b6:b2:68:cf:2c:
4c:0c:2a:27:5c:2a:09:09:e7:1a:0b:db:01:f9:02:
d6:cd:f7:5b:af:e8:63:b9:36:da:7b:81:5b:3b:e9:
b3:a4:9d:25:8a:c2:4d:84:ae:0b:ae:a6:d2:1b:ee:
77:48:e6:c9:a7:92:b7:f8:34:b1:ef:14:7d:fa:af:
18:66:98:de:0d:70:24:35:39:21:f6:f5:b8:10:6c:
fb:ba:60:a0:1d:23:88:ca:57:ff:20:34:d5:ef:55:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:39:01:7D:60:0A:0B:7A:A2:A2:78:0E:BA:CD:16:DF:42:AF:55:04
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2zkBfWAKC3qiongOus0W30KvVQQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.72.0/21
Signature Algorithm: sha256WithRSAEncryption
65:2f:9e:7a:11:f9:98:96:b3:cc:f1:5e:c1:4e:37:aa:53:3d:
a3:1b:53:ef:c4:ba:05:1e:19:60:d5:57:ed:f5:8f:dc:3a:c9:
6e:0c:44:d2:15:f2:54:09:84:66:a6:08:ad:c2:0f:ad:56:86:
c0:d6:e0:d2:73:eb:1f:cd:a3:c5:33:14:39:78:e7:4c:aa:6c:
ce:b7:3b:69:f7:8f:bc:0c:bf:b4:c3:45:24:57:80:6c:06:41:
b3:7c:70:af:9b:e5:8b:b2:13:2c:da:44:72:5f:3f:f3:5b:d2:
2a:ab:45:06:7b:84:af:33:44:c3:05:2d:48:63:af:a8:4b:24:
89:0e:99:92:78:11:bf:4c:46:0a:5f:a2:5f:e4:46:70:47:d8:
ff:41:05:b8:5a:88:8b:00:9a:df:c9:ca:ac:51:b6:ef:26:60:
3a:db:bf:ef:c4:54:87:8d:55:5c:f1:dc:76:3f:cc:6c:5f:11:
2e:ac:b7:30:5a:75:9b:de:73:e5:0a:6b:e5:5a:fc:4b:21:8e:
60:95:1d:60:83:88:82:f2:94:99:fe:db:02:b9:81:4d:4b:93:
ec:ea:a2:fc:aa:13:2d:3e:e1:f5:5d:89:35:f6:6c:a2:6a:96:
46:87:e9:bf:04:a1:b0:ad:49:3f:25:20:8c:86:15:3f:80:ea:
6f:2b:d3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org