Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7aRQRWCAJjZ70ZLhX_xrkgggXok.roa
File: 7aRQRWCAJjZ70ZLhX_xrkgggXok.roa (raw, json)
Hash identifier: gGA0riSNb8W0acq7cBU3i0ZIZeB25LDMH7TV7ZcIq9Q=
Subject key identifier: ED:A4:50:45:60:80:26:36:7B:D1:92:E1:5F:FC:6B:92:08:20:5E:89
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7aRQRWCAJjZ70ZLhX_xrkgggXok.roa
Signing time: Thu 15 Sep 2022 02:54:06 +0000
ROA not before: Thu 15 Sep 2022 02:54:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:54:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EDA45045608026367BD192E15FFC6B9208205E89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:5e:5c:14:1f:fa:3d:e9:79:bd:f0:44:bf:
c8:b4:6d:ce:5f:18:fe:7a:0d:ee:ba:6c:b2:eb:08:
33:16:f4:7e:f0:76:a0:9f:4f:70:88:33:8a:41:96:
e8:93:61:e5:1e:0d:17:ae:a3:90:2f:ba:f6:91:0d:
09:9c:e8:65:b2:f7:4a:e7:24:52:40:b3:8c:5d:7f:
40:d9:f9:5b:a6:1b:70:e8:3f:e2:a7:62:17:cb:71:
16:90:63:6f:51:f0:42:b4:22:0c:66:ea:9f:21:a5:
d2:48:81:83:fb:ca:34:5f:a0:3c:66:42:62:d4:18:
b9:ec:22:63:8e:11:14:54:70:94:b8:7a:f7:cc:a9:
c6:76:27:2d:6b:c3:61:70:c2:fa:0a:17:aa:33:a8:
36:42:7b:7c:b6:89:4e:39:1b:5d:6f:e8:c2:68:89:
b0:d4:0a:f0:0b:ce:f6:7c:e7:49:ab:36:c0:0f:bd:
43:e2:8b:58:89:65:7b:03:9f:29:57:a0:47:16:ff:
5b:86:47:7c:41:e3:f1:f8:5d:bf:16:c8:70:ed:40:
0a:f8:f9:b1:ea:38:4e:67:82:b4:f3:67:c7:13:00:
98:3e:1b:69:d8:00:db:a7:81:b4:ed:01:88:5c:26:
01:bc:b9:6a:c3:d7:09:67:25:99:04:b0:2c:67:cb:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A4:50:45:60:80:26:36:7B:D1:92:E1:5F:FC:6B:92:08:20:5E:89
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7aRQRWCAJjZ70ZLhX_xrkgggXok.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.45.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b3:ee:26:87:72:1f:69:52:76:86:16:d9:b4:59:71:f4:c1:
ba:38:31:ed:d0:38:2c:1a:8b:ac:60:7a:b2:64:27:2c:a3:81:
36:27:a5:47:32:f7:48:5d:5a:ad:9b:2a:74:d6:fb:4c:7b:37:
a8:a8:6d:e3:bb:04:44:7a:54:42:3a:aa:fa:a7:0d:34:e8:9b:
31:dd:0c:b6:c8:2b:a1:69:9f:5e:04:0a:e0:74:e8:a7:93:b6:
bc:0d:6b:10:71:64:ac:25:a9:9a:f9:21:9e:5a:f2:3a:ff:93:
de:aa:85:78:0a:f8:08:12:ad:92:07:1a:5e:c1:61:31:63:72:
36:1a:93:7b:4c:5b:c3:e0:3d:7c:28:7b:80:2f:41:27:d6:12:
8c:69:b0:e8:5f:80:4d:e6:9d:a3:49:b5:1e:0d:9e:d6:be:53:
d0:e9:4b:e3:68:d3:d2:5c:9e:3c:40:76:a2:6b:3b:68:f8:eb:
33:7b:5c:f9:70:3c:d1:5a:ac:ec:d9:4f:62:dd:c1:7c:78:f7:
7d:cb:e6:06:d1:08:77:9f:36:da:35:5a:c0:b8:2e:8a:dd:e2:
8b:65:48:ca:5c:1b:ed:27:76:53:38:7f:d5:b2:75:64:cf:e9:
0b:ad:db:bb:b7:72:48:c3:32:59:a9:fb:eb:a1:75:4b:f7:24:
bd:f4:be:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org