Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5CKk3gGWSyAIK6Q8GuDwKvlG6XM.roa
File: 5CKk3gGWSyAIK6Q8GuDwKvlG6XM.roa (raw, json)
Hash identifier: Iz9YJDJA+VU5oDQ2AmEGpUTI6tI1t7jX48ZEPl7FFG4=
Subject key identifier: E4:22:A4:DE:01:96:4B:20:08:2B:A4:3C:1A:E0:F0:2A:F9:46:E9:73
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 206E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5CKk3gGWSyAIK6Q8GuDwKvlG6XM.roa
Signing time: Fri 25 Nov 2022 04:38:42 +0000
ROA not before: Fri 25 Nov 2022 04:38:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.16.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8302 (0x206e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E422A4DE01964B20082BA43C1AE0F02AF946E973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:82:7d:6a:8c:6c:49:db:57:13:78:db:b7:
fd:97:00:10:26:e0:a1:09:25:2f:3d:bd:f3:18:b1:
c3:92:9c:ee:f3:fd:26:9c:ce:23:36:8e:17:92:60:
9d:0d:b8:45:25:f6:29:ed:fb:26:75:a3:1c:cb:fb:
31:83:31:c5:91:2b:f3:68:ee:e1:19:29:a1:07:ed:
90:fb:dd:4d:85:e6:3a:14:3a:4d:04:7b:59:6b:55:
3c:7d:c4:69:ea:77:a1:17:8e:cc:b5:62:92:69:30:
22:6c:27:fa:3a:f1:5a:f2:6e:ad:55:0f:72:6a:f1:
7e:9d:1c:31:f2:b3:b5:2f:04:22:10:94:d9:ff:9b:
64:77:cd:e2:51:b0:61:93:01:8b:20:94:7c:07:41:
01:12:e9:26:6a:78:cf:32:ee:82:5c:2c:15:7c:75:
2f:84:9a:83:4d:a1:74:4d:d0:e6:8c:47:49:bc:04:
da:80:c4:73:02:65:36:e0:73:f4:91:b1:d6:cd:a3:
3b:aa:1f:99:9b:e2:a6:35:29:48:d7:d5:ab:a2:8c:
26:91:44:60:eb:29:45:1e:60:e5:37:44:e0:89:be:
b2:3c:73:b2:a1:39:a0:65:60:54:91:f2:b8:01:f8:
46:44:78:b3:aa:55:39:75:13:8c:94:de:a1:3b:36:
49:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:22:A4:DE:01:96:4B:20:08:2B:A4:3C:1A:E0:F0:2A:F9:46:E9:73
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5CKk3gGWSyAIK6Q8GuDwKvlG6XM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.16.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:e8:99:75:1c:34:a2:9a:36:ea:a2:a9:04:0e:0b:c4:8f:db:
ff:b1:b7:e0:71:fc:2d:2d:07:bc:01:f7:fa:72:4a:cb:12:a7:
2e:ed:26:86:1d:ba:a6:7c:f4:26:3b:e4:a4:04:81:4c:0f:f7:
23:f0:7b:44:00:cd:f1:3a:0a:ec:54:dc:d2:df:11:ce:56:6f:
b0:d5:5d:9b:98:7c:53:eb:a0:22:c3:bb:71:d2:39:b7:92:d0:
02:5d:0c:76:79:c5:c0:68:53:54:76:ae:2d:2a:98:08:ca:70:
ac:63:0c:74:fa:1b:26:00:51:47:28:ac:53:4e:b8:c6:1a:fa:
68:97:4b:db:05:05:50:cc:ae:4d:5c:06:ff:87:30:ad:89:4b:
bb:84:b8:2f:51:64:71:bb:6b:aa:59:f9:e7:bb:e8:d1:33:55:
40:d0:2e:7e:23:29:ff:ef:86:ba:c1:64:a8:1d:61:d0:60:1a:
1a:90:d0:83:59:03:25:9f:d8:cc:92:7f:60:08:42:ac:56:58:
53:32:0e:ba:3d:7c:04:11:bf:3e:3b:1e:ec:2d:d3:0a:fd:92:
10:c4:66:3c:e6:42:e0:ff:98:2b:a4:03:e9:97:a8:a1:0a:51:
96:d2:26:9c:0b:8b:44:1d:7e:e9:a5:a4:63:d2:4e:d6:25:b1:
f4:11:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org