Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/89VvU_G4ZWvSvA9-bJD2TBeX-Sg.roa
File: 89VvU_G4ZWvSvA9-bJD2TBeX-Sg.roa (raw, json)
Hash identifier: x+qVg6q+C631j/eoI1dkuWD39xA4GFwzqOmf6HR81OQ=
Subject key identifier: F3:D5:6F:53:F1:B8:65:6B:D2:BC:0F:7E:6C:90:F6:4C:17:97:F9:28
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22C3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/89VvU_G4ZWvSvA9-bJD2TBeX-Sg.roa
Signing time: Fri 25 Nov 2022 04:41:37 +0000
ROA not before: Fri 25 Nov 2022 04:41:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8899 (0x22c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F3D56F53F1B8656BD2BC0F7E6C90F64C1797F928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:47:cc:f5:b1:9a:42:63:48:25:2f:e5:ec:
f6:e7:97:c6:59:f1:ce:2a:02:ec:a9:87:88:50:17:
40:d5:79:1f:20:26:34:83:85:0f:32:95:3b:d3:33:
23:86:7b:73:8a:32:c6:b5:9b:3b:59:c1:d2:e9:ac:
c6:95:23:3a:ac:79:dc:da:6d:00:18:cb:05:07:92:
13:3f:86:42:f3:95:bb:37:71:e6:90:0d:fe:55:b4:
e3:8d:1a:9c:bf:16:8b:ef:e1:c0:fb:cf:a8:db:cf:
14:fb:f4:c2:ae:67:a3:c6:c7:ce:7d:8d:5f:7b:aa:
1e:9e:d1:3d:88:3c:ee:90:78:99:f3:62:06:af:f0:
94:4f:5a:7b:e3:c7:53:be:b4:3e:76:ed:6a:47:85:
67:e0:e2:37:d0:cb:75:72:24:73:d2:d5:e5:4b:30:
95:b2:3b:2f:ba:18:0b:4e:f5:78:ed:6c:82:79:d5:
03:92:59:c9:85:e5:8b:4c:63:dd:29:a2:41:c9:85:
62:eb:59:ab:02:35:8f:79:a2:e9:b1:78:5e:18:b4:
a2:51:84:69:49:10:02:d6:a1:b5:5c:38:12:0d:d4:
c3:a5:e1:d5:e0:5c:8c:b5:c5:3b:c6:90:37:dd:f9:
f9:e0:6d:37:15:2c:c8:3e:03:31:95:a9:51:d3:e3:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D5:6F:53:F1:B8:65:6B:D2:BC:0F:7E:6C:90:F6:4C:17:97:F9:28
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/89VvU_G4ZWvSvA9-bJD2TBeX-Sg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.200.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:ce:2f:3c:5a:f4:1c:3e:7a:de:7c:75:22:bc:37:0d:5d:8b:
95:d6:d3:25:33:bc:03:e7:69:be:06:69:e3:73:8a:4e:f1:d2:
5d:cd:1e:35:b6:0e:50:b6:05:51:04:b7:22:b4:3c:cc:ed:f0:
c7:06:0f:98:21:5c:69:46:00:0d:18:61:f7:a4:0e:dc:7f:e2:
0d:61:60:5f:6c:2e:fa:85:5f:e6:8a:50:da:40:45:b2:57:57:
16:3b:7a:e3:00:d1:61:33:2f:d6:a3:c1:7d:d8:c7:c8:01:70:
8c:52:af:40:77:fc:1e:c2:a2:92:03:b9:60:e2:21:b2:ad:59:
2f:b9:f7:ab:7a:c6:71:c3:62:43:f4:27:3e:66:01:51:d8:89:
fd:27:d6:1f:60:ec:40:2f:02:ad:29:4e:2c:a4:d8:e8:23:eb:
e7:55:2e:b5:f3:36:7d:9c:65:87:10:9d:1d:66:08:39:f1:9e:
be:d1:a8:fd:4e:d3:bf:cc:cc:7c:3f:db:aa:c4:26:96:31:dd:
aa:62:6e:68:8d:bc:97:39:c2:e4:b8:83:0b:9a:89:0d:0a:f0:
4c:82:5d:49:43:93:8f:35:d7:90:99:3b:ff:cb:12:5b:15:d2:
66:f4:11:eb:d8:44:6f:bb:e9:0f:ba:22:98:84:0a:a2:e6:84:
12:7e:00:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org