Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3aMRhZDB_nqJisoRimXFsIHxVek.roa
File: 3aMRhZDB_nqJisoRimXFsIHxVek.roa (raw, json)
Hash identifier: 8JD5FvmOnkx8atoEhEVmT4syJ7/Y6rgkJoz68oE+4is=
Subject key identifier: DD:A3:11:85:90:C1:FE:7A:89:8A:CA:11:8A:65:C5:B0:81:F1:55:E9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3aMRhZDB_nqJisoRimXFsIHxVek.roa
Signing time: Thu 15 Sep 2022 02:45:35 +0000
ROA not before: Thu 15 Sep 2022 02:45:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DDA3118590C1FE7A898ACA118A65C5B081F155E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:88:b7:fc:be:5a:66:52:3d:89:78:4f:c1:
ed:4f:b5:c0:ff:c3:cb:af:40:39:9e:8a:7d:2b:95:
3f:38:41:c2:4f:b7:fd:ae:f0:80:4e:b5:5d:48:74:
28:43:a6:31:e4:af:c3:6c:c7:63:7e:9b:c3:88:50:
c6:cc:dd:37:12:4e:92:ee:91:53:f5:a9:a4:b7:a0:
e6:52:ce:4d:2d:ac:47:2e:99:a3:bf:1c:44:f8:0c:
46:d4:bd:bc:fb:01:b1:31:6c:99:ff:f9:57:3d:f8:
7e:d1:0c:9a:d8:d0:3c:a2:82:a9:e5:99:17:08:ed:
9a:72:be:a8:90:91:d5:af:81:7b:2e:3f:83:40:df:
7a:65:dc:86:88:c1:39:f6:fa:a6:da:de:0a:69:32:
8a:7f:2c:c4:8d:17:1d:17:2d:36:b2:cb:84:0f:55:
db:13:4c:56:6c:83:96:84:7a:b3:be:47:38:b6:a1:
ca:2c:bf:1b:07:02:32:cf:4c:5c:fc:77:de:65:00:
39:15:8e:86:4b:ce:d7:4d:aa:09:3f:7e:ea:20:30:
ad:ee:85:1b:2d:e7:af:49:10:a6:df:ce:4a:87:ef:
d4:fe:32:1f:22:d3:ac:a6:f9:0c:78:80:b1:31:65:
17:bd:9c:a7:85:08:d6:30:a3:01:52:c8:b0:f5:d3:
72:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A3:11:85:90:C1:FE:7A:89:8A:CA:11:8A:65:C5:B0:81:F1:55:E9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3aMRhZDB_nqJisoRimXFsIHxVek.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.182.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:96:60:db:af:8c:e8:0a:dd:5a:fd:c2:8a:e0:84:6c:79:82:
fd:36:b9:0e:58:f7:98:9a:6c:8c:a5:d2:fc:81:89:cd:3b:55:
ff:e1:61:47:3d:78:4a:e8:28:04:49:bf:79:72:10:c6:4d:4d:
37:b2:2a:5a:91:c1:ed:c1:e6:45:10:cc:02:2b:74:f5:90:6a:
2f:d0:ad:94:c4:5c:34:a1:51:79:c9:d0:95:8d:b4:83:f9:ca:
b0:56:ba:2a:08:c6:1c:50:67:9a:e4:11:d9:1a:38:5b:b4:b7:
e0:15:fd:3a:5d:4e:fe:1f:5a:de:91:14:26:5d:7f:6f:22:96:
63:b8:6c:f0:e1:d1:3e:7f:a4:e5:b4:54:b6:5c:77:a4:1e:55:
04:6d:10:dd:9b:a4:e3:1c:f9:71:0f:da:c3:19:f4:a3:d2:26:
4c:9c:34:d1:72:e3:0d:3f:f3:93:f4:4b:f6:a7:eb:04:13:c3:
be:e6:15:04:d9:ae:b7:6b:5c:33:22:2f:fa:59:54:a2:cc:9b:
5b:85:39:e9:08:94:6d:df:b8:fd:b1:fe:82:98:0e:5b:44:b1:
b5:eb:58:d9:72:31:e4:ee:06:e8:4f:02:89:a3:f3:38:d8:0e:
67:92:4e:f4:53:20:d9:9b:0f:eb:b2:b5:c8:3b:28:a7:13:d5:
19:ac:e9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org