Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5PpBpM1j6NDknqXnkqGJj5NSADY.roa
File: 5PpBpM1j6NDknqXnkqGJj5NSADY.roa (raw, json)
Hash identifier: ZVX4cNku13eKUgr/6R0iN0HfTtV+s8Pw3tG0LPMeVEw=
Subject key identifier: E4:FA:41:A4:CD:63:E8:D0:E4:9E:A5:E7:92:A1:89:8F:93:52:00:36
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5PpBpM1j6NDknqXnkqGJj5NSADY.roa
Signing time: Thu 15 Sep 2022 02:52:32 +0000
ROA not before: Thu 15 Sep 2022 02:52:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E4FA41A4CD63E8D0E49EA5E792A1898F93520036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:a0:83:d8:3c:50:9d:5c:df:5d:98:7e:6d:
fc:de:18:94:87:dd:79:87:5f:1a:3a:de:c7:27:d6:
52:74:db:9e:67:e1:10:be:2d:25:da:35:92:e3:f9:
7b:21:84:f6:3b:16:3d:0f:d3:1c:da:49:18:c4:9b:
74:15:ef:6c:d3:f0:9c:e2:6d:f3:fe:08:63:32:75:
bb:71:f4:68:22:2a:2e:24:fa:39:1b:31:05:b5:b4:
94:65:1e:1f:32:04:2e:7d:68:5a:dd:9b:d5:a1:1c:
a7:bf:9b:b2:4e:21:a5:a4:8e:2f:82:d9:bc:2e:e0:
b9:ef:c2:08:c1:9f:a2:9b:ce:01:42:c5:46:30:59:
08:f0:f1:d3:84:69:d7:4b:32:2e:29:03:ac:f5:4b:
5c:30:4f:05:bc:11:78:e0:cc:5f:27:55:b0:31:f9:
68:36:e0:bd:37:0a:b4:17:76:18:a7:b4:97:c9:bb:
94:d4:97:33:35:9b:f3:9b:8f:89:72:4d:aa:6f:4b:
98:64:29:4e:f2:48:b1:66:ce:18:8a:ff:5f:af:fe:
65:cb:ca:dd:6e:78:8f:bc:89:b9:43:1e:8f:24:9f:
60:5e:11:a9:ef:21:0a:40:d0:c5:b8:83:52:6a:ac:
c4:ae:79:d4:ab:f1:bd:a5:07:93:4c:31:6f:d6:d4:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FA:41:A4:CD:63:E8:D0:E4:9E:A5:E7:92:A1:89:8F:93:52:00:36
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5PpBpM1j6NDknqXnkqGJj5NSADY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.156.0/22
Signature Algorithm: sha256WithRSAEncryption
16:48:f1:c9:ed:01:51:95:85:6b:0a:87:c3:02:d1:0b:19:8c:
28:90:d5:14:97:b0:99:1c:17:a5:e1:da:04:c5:e0:42:3d:cb:
29:a2:3f:70:93:b7:73:3a:57:31:8f:aa:ff:1e:19:9e:6c:e4:
88:7e:47:51:4b:e9:22:26:18:99:af:fc:b1:bd:85:b3:fa:49:
5f:b6:83:c6:f3:6d:4b:c2:bb:c9:c7:7c:67:b1:07:68:ed:02:
1f:ed:88:c1:bc:14:8a:8f:54:54:de:33:67:af:b5:1b:1e:f1:
2e:45:93:85:b3:9d:a9:6c:e1:35:b2:03:bf:0a:ee:53:ce:bf:
67:76:c1:f6:67:a9:0f:b0:1b:64:42:db:40:4d:f3:59:d3:0b:
87:56:a4:ac:c9:f5:9e:ef:3a:62:9b:a1:25:0f:6a:31:6f:58:
ce:f5:13:d3:e9:f2:0e:24:30:08:54:d1:73:0f:f7:19:0e:0b:
96:7f:46:97:fc:1d:3c:f3:a7:76:eb:a0:f3:c1:f2:8d:96:ce:
ee:f3:43:ce:70:c9:47:88:3b:83:f0:f3:94:ba:3d:4c:a5:09:
22:e5:b9:7a:2a:d8:72:ad:2b:a3:60:9a:7d:eb:30:64:50:7d:
8c:ab:7e:a9:41:0f:3a:90:d7:43:7b:4b:79:63:00:4e:84:2d:
16:98:e8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org