Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7VRcn6t7rSTjjD283tKBtB8Eblw.roa
File: 7VRcn6t7rSTjjD283tKBtB8Eblw.roa (raw, json)
Hash identifier: nzerKaVrDr/2i+FzRnOKEnEBwbV0x2ATHzlFueyu4Kw=
Subject key identifier: ED:54:5C:9F:AB:7B:AD:24:E3:8C:3D:BC:DE:D2:81:B4:1F:04:6E:5C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7VRcn6t7rSTjjD283tKBtB8Eblw.roa
Signing time: Thu 15 Sep 2022 02:53:09 +0000
ROA not before: Thu 15 Sep 2022 02:53:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.212.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ED545C9FAB7BAD24E38C3DBCDED281B41F046E5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:ce:e6:38:26:f7:9a:2a:93:d6:8c:5f:ed:
9a:cc:e2:b5:5f:d8:21:98:09:bc:c8:26:a3:c2:6d:
be:42:a1:68:3b:72:d1:17:ab:2b:77:fd:45:3c:d3:
47:a6:fe:ae:d6:26:e6:e3:40:56:38:3c:ff:c3:6a:
ff:ec:9a:f2:4e:1e:65:f9:f8:42:33:62:9b:c7:e6:
3f:b8:5b:cd:03:33:bd:1b:57:16:2c:db:83:dc:54:
a7:85:b5:f5:f3:be:e9:a7:70:ba:6e:90:ac:b4:38:
4b:82:a0:e8:3c:ce:14:63:89:1e:00:b3:70:c0:05:
26:d1:f8:f9:0a:dd:77:ff:06:5c:06:59:8d:e7:43:
ba:68:24:1a:48:2e:6c:7b:96:df:f8:ba:a8:9e:00:
c5:5f:3d:31:af:bb:f2:4e:50:ca:81:a6:95:c5:db:
92:e7:e4:5b:f9:30:f6:5d:af:2d:73:f1:23:2f:9e:
ee:fc:5b:f9:bf:17:8a:2e:d4:3e:b0:18:d8:4f:61:
3f:3c:11:27:e4:ec:24:be:37:8b:cd:ea:2d:8f:d2:
54:08:c8:bb:08:8b:c6:d2:bc:c3:ac:e5:0a:ee:c4:
27:f2:0b:3c:18:a8:3b:de:12:2b:63:b7:ab:4e:0e:
3e:90:01:b4:b1:27:80:12:d1:82:d3:25:c2:27:0d:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:54:5C:9F:AB:7B:AD:24:E3:8C:3D:BC:DE:D2:81:B4:1F:04:6E:5C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7VRcn6t7rSTjjD283tKBtB8Eblw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.212.0/23
Signature Algorithm: sha256WithRSAEncryption
18:af:9d:73:b2:f8:df:79:15:2c:83:38:cb:07:9a:e9:22:70:
aa:65:fd:23:5e:b7:e5:cf:59:18:1a:b8:f7:67:14:25:b5:fd:
a7:45:51:13:2c:ec:ac:4c:9e:70:95:df:0e:70:47:23:7e:b9:
56:a7:9f:d4:1b:1f:9d:e2:dc:df:bb:85:83:e8:19:e7:3e:86:
db:03:b0:4d:fe:53:80:78:1b:1d:b9:e3:23:df:b0:9b:d4:99:
0a:37:9e:5c:52:07:cd:5e:36:73:df:26:f5:6c:f9:b2:2d:2d:
eb:89:bb:80:6b:28:87:b3:24:31:fa:64:2d:31:19:e7:34:d6:
20:a3:69:f1:67:7e:4b:1d:07:bf:0e:d6:9c:7f:02:77:8f:db:
a9:ef:81:e6:c7:d0:32:cd:80:38:8c:73:16:f7:0b:d0:39:ab:
73:7d:90:16:00:45:f7:bc:fd:13:c5:3c:00:87:e8:d3:f6:46:
7f:25:50:2e:16:5c:07:7f:c5:0e:c8:a1:13:e0:3f:4a:cf:3d:
67:51:bc:4f:bb:2b:6a:c9:5f:ae:ac:7e:fe:9b:2f:60:64:0f:
7d:8a:de:ab:9c:bc:2d:e2:bf:34:2b:88:9b:66:6b:df:3d:bb:
52:bc:29:cb:92:0c:e0:2b:e3:0f:00:ce:b7:d7:b0:15:a0:c8:
c2:22:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org