Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8c_gVY8Ltzv6tCsURhAot8tvrTM.roa
File: 8c_gVY8Ltzv6tCsURhAot8tvrTM.roa (raw, json)
Hash identifier: rK2/cSbv211vdk3DyvAxJZxMiFsPdMu7pXEQ6xcf6QQ=
Subject key identifier: F1:CF:E0:55:8F:0B:B7:3B:FA:B4:2B:14:46:10:28:B7:CB:6F:AD:33
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2176
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8c_gVY8Ltzv6tCsURhAot8tvrTM.roa
Signing time: Fri 25 Nov 2022 04:39:57 +0000
ROA not before: Fri 25 Nov 2022 04:39:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8566 (0x2176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F1CFE0558F0BB73BFAB42B14461028B7CB6FAD33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:d1:2a:08:ba:d0:41:87:85:0a:d0:4c:c9:
fd:ec:ca:bb:b2:7b:65:6b:15:ff:81:cf:f6:66:82:
73:f5:ee:f3:cf:7e:e7:78:b9:c9:4a:80:f6:5a:de:
19:10:42:b4:52:10:15:20:12:01:84:87:5b:25:62:
4d:dd:5e:38:6f:9c:e0:b5:9b:6a:d4:13:61:d0:39:
48:81:59:a2:49:4b:a4:31:95:67:f5:f7:18:6d:8d:
01:17:45:31:4c:80:49:88:74:ef:e4:9d:29:e0:a8:
f7:78:68:44:35:07:3a:55:80:73:95:13:4f:b9:58:
3c:10:a3:90:39:df:24:be:1b:33:50:03:a6:c4:4f:
1b:a6:d2:1e:05:f0:58:46:b8:6a:5c:99:60:d9:a0:
44:37:d0:6e:fd:b3:64:d5:d6:a9:a7:7e:67:0f:32:
c1:bb:04:d6:b6:52:f1:8d:5d:3b:04:0d:12:fc:98:
6b:94:4f:e1:28:b1:12:89:8d:1a:40:0c:a0:46:d6:
ec:5b:eb:31:07:5e:f3:dd:0e:c9:88:3a:73:8b:db:
79:43:07:21:95:52:25:a7:30:3d:ff:1a:48:30:c2:
19:1e:1f:37:2b:99:56:14:aa:f5:07:2a:68:55:b1:
68:99:e4:e2:e7:e0:4c:6c:63:8d:f8:3e:80:75:43:
b6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CF:E0:55:8F:0B:B7:3B:FA:B4:2B:14:46:10:28:B7:CB:6F:AD:33
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8c_gVY8Ltzv6tCsURhAot8tvrTM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.220.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f5:4e:3f:47:c8:a2:86:9e:60:0f:55:75:2f:48:1f:5a:0b:
2b:9e:1e:ca:04:59:97:35:c6:f3:1e:0f:61:e3:f4:26:b0:e3:
d4:e6:a3:17:d8:db:0e:8c:33:c4:75:14:5f:24:a0:ae:d9:41:
b9:41:f1:b5:70:18:f7:1d:a8:c2:d3:db:a6:07:5b:df:c3:12:
4c:e0:d3:b4:94:da:e7:5a:44:02:a7:e7:bb:f8:51:19:59:42:
a9:f8:4a:03:12:73:94:ed:c4:84:05:fa:f4:75:d2:40:08:63:
5c:90:91:e1:ed:d4:c8:5b:cc:6f:30:9c:94:c8:96:b3:87:e7:
dd:37:e1:f4:04:be:9a:ee:37:ce:6e:21:2b:c5:3c:2d:ba:70:
58:33:94:a2:5a:21:b2:1a:24:36:88:33:d1:b1:d6:50:b8:da:
6e:69:86:2d:a0:66:16:13:a6:e6:91:13:6f:c7:64:92:2e:6a:
91:e0:ec:4b:9b:4c:17:65:c3:da:c1:96:60:93:5b:05:3a:e2:
9b:e4:e9:b6:8d:0e:87:9e:71:1c:79:50:15:09:b3:7a:c3:ec:
77:ec:39:de:d0:1b:25:c6:e7:88:19:3e:79:c3:a1:33:bb:76:
b9:3a:6c:7e:7d:2e:41:2e:2a:44:61:de:8a:ed:57:a5:86:7b:
60:da:ef:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org