Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7IabSf_wBvyfaxKBfO7Gz9Q1u6k.roa
File: 7IabSf_wBvyfaxKBfO7Gz9Q1u6k.roa (raw, json)
Hash identifier: Xwd7hndM4Qsu08L0sTs5POLQIW5mO3meqkbBFqRSmow=
Subject key identifier: EC:86:9B:49:FF:F0:06:FC:9F:6B:12:81:7C:EE:C6:CF:D4:35:BB:A9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C9A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7IabSf_wBvyfaxKBfO7Gz9Q1u6k.roa
Signing time: Wed 29 Sep 2021 02:47:58 +0000
ROA not before: Wed 29 Sep 2021 02:47:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7322 (0x1c9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=EC869B49FFF006FC9F6B12817CEEC6CFD435BBA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:1f:48:99:5d:f7:2a:dc:03:d5:ec:9e:bc:
94:69:39:1c:09:1c:7b:ad:02:11:90:b2:63:0a:e9:
bd:73:30:52:50:81:2e:1d:16:51:bc:71:0d:7b:e5:
48:4d:2c:da:12:41:53:e5:53:93:65:65:ae:12:1d:
dd:7f:e0:3e:3e:39:51:45:7f:37:94:61:c5:df:b2:
c3:07:62:11:99:86:08:bb:6c:42:25:8d:cf:52:26:
5e:2e:17:19:eb:e9:82:6c:2d:ab:23:dc:82:90:d9:
b4:82:ba:6a:e8:42:14:f2:d8:33:99:5c:d3:71:76:
a8:6f:bc:e8:1a:61:c3:3f:f4:08:2b:0c:f2:d4:c8:
a9:dc:dd:fa:07:2b:40:95:70:a4:d9:b3:1b:a1:7a:
7c:da:3b:8e:8d:0c:10:0d:a3:76:be:42:fa:b2:d6:
1c:ae:d7:b9:f0:18:89:12:c6:69:f2:51:28:fa:44:
a1:22:35:54:72:89:b3:01:cd:43:98:e5:09:87:e6:
6b:63:a9:bf:f8:5d:d7:33:fb:32:ef:4a:a6:9c:f9:
a3:d3:76:af:08:15:ba:dd:7d:9b:c5:c0:74:d3:e1:
71:f4:dd:37:f6:dd:da:dd:80:23:9f:9b:e3:ac:5d:
dd:27:56:c9:9c:71:a3:22:c2:88:69:13:ae:25:9d:
10:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:86:9B:49:FF:F0:06:FC:9F:6B:12:81:7C:EE:C6:CF:D4:35:BB:A9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7IabSf_wBvyfaxKBfO7Gz9Q1u6k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.128.0/24
Signature Algorithm: sha256WithRSAEncryption
01:9b:00:e9:ff:29:83:6b:cb:f8:c3:a3:fc:27:bd:2f:e6:e8:
65:e7:bd:4e:18:a7:9c:1c:28:72:2b:3b:10:78:01:fc:61:ab:
9f:7b:e5:42:53:55:6c:af:32:69:57:a6:03:c8:47:23:04:86:
44:fd:7c:cc:34:1b:99:e0:7f:10:75:e6:08:f3:ca:b3:ac:c7:
ef:19:ed:52:47:fd:bf:82:8d:7b:4d:40:7d:c4:8a:ff:e7:d8:
42:c7:73:f9:01:02:00:80:15:d2:07:6e:d7:64:fc:db:26:9b:
2c:91:3f:b1:76:0e:26:a1:25:51:67:df:1d:98:dc:5b:06:4e:
23:54:fb:56:5b:4a:57:fc:8d:c3:c1:ba:25:3f:59:54:99:6c:
bb:db:f0:14:25:ad:96:da:30:b4:e4:d9:b7:ee:74:7c:33:61:
0b:8e:dd:b8:00:7d:23:9b:0d:4e:f5:5b:8d:7e:35:fd:fe:f1:
6f:f2:6b:80:af:fb:99:b9:34:99:25:06:eb:5a:7f:49:6e:95:
43:4c:71:38:0f:91:5f:0d:1b:e7:b9:7c:c9:5e:02:bb:f9:8e:
76:33:ab:ef:5a:2a:5c:f9:af:58:97:21:af:31:8c:3e:3e:5e:
c9:54:76:e5:cd:d5:59:0f:2f:9e:20:06:0b:52:e0:4b:a7:ac:
f6:20:25:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org