Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4DPzR8COkXqh5cijodlWbWF1Y_k.roa
File: 4DPzR8COkXqh5cijodlWbWF1Y_k.roa (raw, json)
Hash identifier: CrIETYOzQpwvNmRBj5b4NO/RS6KM9Um20cLzZCGCIc8=
Subject key identifier: E0:33:F3:47:C0:8E:91:7A:A1:E5:C8:A3:A1:D9:56:6D:61:75:63:F9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2189
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4DPzR8COkXqh5cijodlWbWF1Y_k.roa
Signing time: Fri 25 Nov 2022 04:40:02 +0000
ROA not before: Fri 25 Nov 2022 04:40:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8585 (0x2189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E033F347C08E917AA1E5C8A3A1D9566D617563F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:50:5a:fa:91:1a:f8:24:82:4a:11:1e:33:43:
77:ed:05:27:cd:13:05:93:58:05:77:d3:ce:35:aa:
35:b0:62:4e:f2:17:dc:5d:cd:c3:c1:e1:d2:30:3d:
2c:32:99:ea:18:1f:be:1c:31:3c:17:5f:ae:6d:57:
e1:89:e7:a6:cc:18:cb:5a:2f:d1:45:b7:10:4a:e4:
1e:2a:6a:67:7c:e7:00:44:66:5e:25:cb:8d:87:fa:
49:af:b5:e1:63:e1:56:0d:71:c9:a9:bb:c7:c8:32:
1c:1c:a1:a1:d4:46:ff:bb:7a:cb:2b:b7:e9:a8:6f:
6b:6d:6d:ee:5e:49:52:63:b0:1a:fc:ff:48:08:da:
a7:df:f5:3d:57:60:99:8b:35:e8:90:83:90:c1:6a:
fd:67:89:6f:db:bd:c5:b0:9c:b4:a0:8e:d8:9f:78:
6f:df:f3:c0:b3:31:3e:05:0e:1d:fb:b7:e2:41:ae:
a5:5c:51:05:a7:f8:50:98:1b:41:57:ac:5b:74:58:
27:c0:e7:b6:10:eb:62:16:fd:0a:c2:50:83:ba:fa:
08:e0:a2:e0:21:d5:b5:74:9c:12:f0:00:ad:0e:b9:
7c:3e:73:87:01:93:30:92:c5:7f:95:15:ee:bf:25:
91:cc:98:5a:40:55:4c:df:34:1e:ae:62:eb:e7:73:
30:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:33:F3:47:C0:8E:91:7A:A1:E5:C8:A3:A1:D9:56:6D:61:75:63:F9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4DPzR8COkXqh5cijodlWbWF1Y_k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:06:00:6c:ac:90:de:c3:4e:57:c1:b4:1c:3c:53:86:54:e2:
f3:73:3a:2b:42:81:cf:46:3b:f9:0a:75:ff:34:67:53:9c:27:
77:8b:d5:d7:2b:29:40:18:c9:ae:d1:e4:fd:58:13:dc:1e:04:
65:2d:12:6b:4b:fe:ea:9a:bf:ce:c2:29:5e:68:4b:f7:38:be:
cd:9e:37:40:14:33:aa:47:0c:83:9a:0a:74:fa:ca:a3:c9:82:
ec:2e:5b:8b:ae:ea:cc:24:26:69:6a:39:a7:fa:03:d2:31:66:
d2:e7:c1:53:10:3c:29:92:ac:2d:db:99:1d:d8:d2:71:48:e1:
6d:98:68:43:c1:27:34:9d:b6:8c:b6:2a:61:24:cd:25:94:77:
bb:6e:e1:8f:a5:23:95:21:dd:6e:d3:8e:ce:6e:92:1c:33:6f:
6a:22:41:6b:07:de:3d:02:19:69:df:24:07:ad:03:24:0b:6a:
3e:15:46:ae:d8:34:b3:cf:a7:2e:04:39:41:9d:7c:01:b9:e7:
eb:4b:75:db:c9:d7:06:6a:c4:e4:e6:e3:7f:8a:a8:72:12:aa:
36:cb:5b:11:86:14:24:ea:e0:fe:ee:d7:ce:fa:34:cf:18:fe:
df:b1:3d:11:25:b6:f9:98:46:a5:97:68:0e:02:9a:31:94:f1:
4a:6b:3c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org