Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3QWcHyOlrX1rhxLHVgxx-ilxQNA.roa
File: 3QWcHyOlrX1rhxLHVgxx-ilxQNA.roa (raw, json)
Hash identifier: Vr6vtQ05xHGKcUJ2nlgCyZxAGwzfvI2/fcCPPxHfyWE=
Subject key identifier: DD:05:9C:1F:23:A5:AD:7D:6B:87:12:C7:56:0C:71:FA:29:71:40:D0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B1A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3QWcHyOlrX1rhxLHVgxx-ilxQNA.roa
Signing time: Wed 29 Sep 2021 02:46:10 +0000
ROA not before: Wed 29 Sep 2021 02:46:10 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6938 (0x1b1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:10 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DD059C1F23A5AD7D6B8712C7560C71FA297140D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:a8:f3:63:18:f1:c5:f4:fb:87:50:e0:44:
eb:8e:69:67:c2:db:93:12:c0:30:4d:c1:dc:6c:3d:
41:d7:5b:2b:d5:d5:88:80:7d:60:ff:f9:53:26:09:
95:1b:f8:01:12:0d:df:aa:74:07:93:dc:58:18:16:
61:ee:1b:7e:85:cd:7a:52:ea:f0:7e:c2:a7:21:d2:
b2:23:f5:53:79:43:7c:f8:95:b8:96:18:75:42:84:
24:1d:80:85:a8:4b:0c:98:e3:97:e0:fd:fc:16:73:
1c:af:ab:52:39:c9:ae:64:a0:99:e2:8d:91:54:3b:
c9:90:28:c5:4e:69:32:c0:da:c1:8f:45:9f:51:15:
94:11:66:69:62:f3:ad:0e:d4:18:93:89:23:a2:3e:
da:74:d0:57:24:8f:70:e2:15:9a:1f:44:b9:7d:2e:
61:cc:b9:61:6a:ee:a0:0b:80:3d:5a:a8:f7:43:c5:
f6:20:bc:ea:05:92:72:f2:88:b5:c7:cc:2a:8b:5a:
82:80:c4:2a:a3:db:96:ca:02:2b:f3:cb:08:49:3f:
fe:61:5a:fa:dd:1c:fa:79:b4:0d:d9:33:13:7c:4f:
3f:1f:bf:b0:29:6b:4b:26:2b:c2:fb:93:24:b7:33:
3e:7e:54:54:36:98:92:35:5b:4d:8e:d3:7b:71:e8:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:05:9C:1F:23:A5:AD:7D:6B:87:12:C7:56:0C:71:FA:29:71:40:D0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3QWcHyOlrX1rhxLHVgxx-ilxQNA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.165.0/24
Signature Algorithm: sha256WithRSAEncryption
04:dc:b3:bc:b4:cf:d3:7a:0f:19:3c:50:49:fd:24:16:dc:95:
61:52:83:e3:b5:c3:e1:47:9d:da:47:62:4b:c4:02:89:16:0c:
11:56:e7:23:01:01:23:58:82:d1:2d:bf:4b:f3:88:04:e1:fe:
46:11:7f:3b:be:f2:c7:8d:b6:7e:71:7b:f6:7c:3c:a6:01:a6:
da:03:ca:74:61:cb:56:f0:8e:a5:47:af:06:ba:fa:66:da:2f:
9f:7f:d6:95:b7:80:dd:db:ed:13:72:b2:ba:b6:6f:22:a7:c9:
2d:a1:d5:27:0d:1e:89:03:83:e3:38:50:d2:3f:7f:57:02:90:
59:cd:23:22:23:17:db:47:24:c5:a3:20:f1:c2:67:60:2f:47:
87:fe:3b:2b:5e:2f:89:49:8e:c9:c3:9c:84:f7:af:2d:db:b3:
19:22:d0:b9:37:a7:6a:a0:03:71:2c:1d:3c:22:3d:50:61:e4:
7f:42:56:bb:d6:8b:fc:af:eb:0b:d2:97:c5:72:6f:d6:70:f7:
55:46:aa:62:bb:eb:d2:c7:b3:ff:d3:b9:4c:a8:d5:d2:b2:e1:
56:51:80:9d:07:04:38:6e:0c:19:53:e2:86:09:e2:16:67:b6:
b1:08:0c:4b:ad:77:f7:a3:72:9a:a7:45:d0:f7:48:13:4c:8b:
c6:cb:e1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org