Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5aPIeqbaGQRtlRMtrKnqgDziVuc.roa
File: 5aPIeqbaGQRtlRMtrKnqgDziVuc.roa (raw, json)
Hash identifier: 8Nc+4k9A83Vcbs8+bVnA1HxrrAiouAP5EaxGwLD49Yc=
Subject key identifier: E5:A3:C8:7A:A6:DA:19:04:6D:95:13:2D:AC:A9:EA:80:3C:E2:56:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C9E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5aPIeqbaGQRtlRMtrKnqgDziVuc.roa
Signing time: Wed 29 Sep 2021 02:47:59 +0000
ROA not before: Wed 29 Sep 2021 02:47:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7326 (0x1c9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E5A3C87AA6DA19046D95132DACA9EA803CE256E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:0f:06:bc:43:c1:28:42:94:2f:8d:9c:fd:
a4:de:44:0e:fa:2c:2c:81:bf:ae:e9:33:ad:6a:77:
0e:cd:e1:47:85:d2:27:07:f4:91:51:5d:d7:75:c7:
09:5d:58:ba:5b:5d:05:ed:c2:7d:56:94:76:4c:50:
37:73:e5:72:b2:ff:1c:a6:ad:9e:dc:db:0a:00:14:
17:dd:16:c5:34:ac:b1:7e:2e:5e:3d:33:e1:e2:8a:
82:07:87:da:5e:2c:50:9b:ed:3e:16:1b:c5:45:ef:
55:78:c5:65:d0:6c:1a:2f:dd:f7:7f:b1:f3:ac:d2:
26:66:5f:0b:64:ad:b8:08:1e:86:d0:c0:07:ec:cb:
49:09:ed:03:78:a2:4d:b9:4e:7f:ad:69:2a:d7:9c:
c0:7a:8c:35:71:08:23:61:36:4c:15:78:a6:e8:6d:
03:25:b0:7a:7f:30:b9:9d:a0:7f:74:6e:18:df:12:
9d:ff:d2:7a:19:0e:db:bd:f7:15:6a:40:21:1e:aa:
d1:16:39:aa:34:ce:3e:58:21:3b:93:a3:ff:90:5e:
36:5e:9f:63:d4:27:99:9d:8d:8f:b8:c3:b1:fd:50:
1d:2e:08:6c:94:f5:0a:32:b1:2b:dc:a0:fb:d6:48:
a9:c3:d1:69:4e:6c:29:91:2c:b0:26:22:4d:55:7c:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A3:C8:7A:A6:DA:19:04:6D:95:13:2D:AC:A9:EA:80:3C:E2:56:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5aPIeqbaGQRtlRMtrKnqgDziVuc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:1c:0a:83:a6:40:6e:af:2f:04:67:be:01:8a:97:36:ff:32:
c8:56:c1:e5:94:1e:53:a4:3d:cb:7c:fb:d4:39:d7:ae:25:1f:
00:24:56:01:4a:22:3b:e9:60:4d:4d:04:b6:99:c8:f1:5a:d4:
1e:85:01:e8:fb:16:42:14:e0:80:36:23:74:d5:96:a4:42:44:
be:5a:b4:3f:04:10:6c:72:ad:b7:5d:c8:4f:f8:6c:93:fc:4a:
21:5b:c3:c7:30:fa:d8:8b:3d:4a:73:11:37:09:46:d3:2c:eb:
7e:5c:0d:1f:7f:04:76:61:a0:05:75:aa:92:cd:42:fb:1b:47:
b4:6a:73:bc:5f:0a:0f:af:05:c3:01:04:5e:dd:5c:6c:2a:67:
a3:35:bd:6b:72:3c:76:e7:6d:9a:81:d0:0b:7c:ed:bb:73:de:
f7:4a:64:40:55:f4:bb:cf:5f:9e:0c:79:81:6c:ab:16:01:e9:
ad:5b:14:f6:9c:a9:58:15:ab:8f:07:e6:13:9e:62:26:2c:39:
6f:8c:15:c6:2b:c2:79:fb:95:a2:74:ce:9c:53:f5:a4:ad:e6:
55:39:15:c0:df:22:9f:74:31:ee:5c:fe:8f:c1:6b:d1:6d:45:
7e:69:12:ac:85:dd:34:81:3f:62:d9:e4:33:0f:db:c2:63:b4:
b0:e7:68:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org