Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6xpBggPAnKEMAKCRaZ5ERRccP80.roa
File: 6xpBggPAnKEMAKCRaZ5ERRccP80.roa (raw, json)
Hash identifier: woHr+Q1GAmeeWghq5zav1rTXyHgGMVfDD6vuSOigNZg=
Subject key identifier: EB:1A:41:82:03:C0:9C:A1:0C:00:A0:91:69:9E:44:45:17:1C:3F:CD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BC8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6xpBggPAnKEMAKCRaZ5ERRccP80.roa
Signing time: Wed 29 Sep 2021 02:46:59 +0000
ROA not before: Wed 29 Sep 2021 02:46:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7112 (0x1bc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=EB1A418203C09CA10C00A091699E4445171C3FCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:9d:8d:7a:84:0d:81:a5:67:28:85:3f:17:
1f:54:3a:d8:10:39:7c:b9:d1:2e:f2:f2:01:3f:bb:
3b:01:15:f0:d9:50:03:65:d7:f4:63:1f:89:b3:15:
85:a1:5d:f9:70:09:df:bd:3a:c9:be:26:40:f0:d7:
e7:75:8b:ca:ba:f5:6c:b8:f1:0f:fe:c2:dc:22:06:
9d:95:f4:3b:05:c5:89:b6:01:91:41:48:47:3c:ec:
85:39:48:30:5c:5a:e4:4c:95:97:28:3e:d3:d5:97:
7f:16:10:17:11:82:fc:53:64:3c:26:d6:1f:f4:7f:
2b:17:8a:4b:93:c3:c6:2e:35:d5:8a:bd:b3:e2:29:
10:6c:7f:d3:57:e6:a7:f4:6a:f9:6b:db:87:a0:fd:
46:a1:ef:9c:ea:f2:5e:81:84:52:73:2b:6d:72:49:
14:b0:20:5c:43:12:c2:90:26:e0:2b:33:0b:34:0b:
64:e9:89:9e:db:e5:a6:23:8a:84:c3:01:01:8c:79:
37:91:98:59:3d:7c:59:ea:bb:24:28:ec:cf:41:3f:
29:ef:f4:30:96:f2:8f:dc:72:c6:0e:d8:c3:28:a1:
5c:6d:e2:d3:d8:46:44:49:6c:a8:9b:c5:1f:1f:84:
13:40:e9:f3:90:0d:4d:e5:bd:f6:51:2e:68:3f:1c:
a2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1A:41:82:03:C0:9C:A1:0C:00:A0:91:69:9E:44:45:17:1C:3F:CD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6xpBggPAnKEMAKCRaZ5ERRccP80.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.216.0/22
Signature Algorithm: sha256WithRSAEncryption
29:f7:34:03:a5:31:da:5e:20:61:13:ff:45:85:59:6e:42:41:
fc:64:d2:83:fe:3c:ed:50:da:ce:31:db:48:59:84:3d:16:0d:
b5:dd:f8:0a:10:09:47:02:91:2d:af:af:df:c5:27:24:1d:a8:
33:8f:b2:57:9d:0c:62:69:03:68:22:7e:47:84:bc:2d:f6:9d:
00:2e:1a:0d:86:74:0f:25:14:09:e2:95:b0:43:40:9f:bc:df:
43:44:c6:bb:db:55:31:9b:1e:0d:bf:ac:01:21:85:3b:62:be:
b8:71:73:41:a3:30:4d:97:12:d3:2b:66:9d:7f:5b:08:39:30:
e8:9e:91:5c:a9:3f:18:d6:4f:60:2d:64:be:b8:13:c3:23:4a:
14:d8:b2:8b:c1:93:be:81:dd:ce:a8:ea:07:41:03:74:6b:3b:
bc:ec:f6:5c:97:3e:2e:2d:c3:bf:59:92:1c:ed:29:b1:e7:e5:
0d:e0:82:1f:7b:c6:67:8e:27:84:d5:5e:4e:f0:76:a3:32:06:
15:24:25:c2:a2:fa:cd:26:59:29:a0:48:73:05:d6:56:98:b2:
82:90:ec:24:70:23:2c:99:d2:c8:0c:62:b6:af:e5:72:42:60:
59:8f:c1:45:41:1e:54:0a:ac:cf:4e:08:a5:88:d3:bf:3f:c7:
f7:17:79:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org