Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A_cZcwbK_BYrGEquAyv4KbgcxgQ.roa
File: A_cZcwbK_BYrGEquAyv4KbgcxgQ.roa (raw, json)
Hash identifier: oItn7Yu94g2PzKInX0VgbRRv9bcc+MH7ZAvW2TJAw5I=
Subject key identifier: 03:F7:19:73:06:CA:FC:16:2B:18:4A:AE:03:2B:F8:29:B8:1C:C6:04
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A_cZcwbK_BYrGEquAyv4KbgcxgQ.roa
Signing time: Thu 15 Sep 2022 02:45:48 +0000
ROA not before: Thu 15 Sep 2022 02:45:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=03F7197306CAFC162B184AAE032BF829B81CC604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:fd:9f:f1:9a:54:d7:46:3a:f0:5e:04:25:
fc:64:17:84:20:d4:23:0b:49:42:83:d3:1c:e5:79:
1f:f5:06:3f:16:4d:78:cd:1f:28:3d:14:64:67:4f:
b0:52:4d:30:b3:ee:4a:1f:95:bc:d9:33:52:64:b7:
57:bf:c8:35:b7:18:e2:32:4d:d5:e4:2a:2a:3b:bf:
29:eb:4a:d9:32:a2:a4:29:13:9a:54:8d:4a:29:b5:
37:50:28:9f:09:da:e8:07:3f:09:67:78:5d:cb:70:
9c:ac:63:9d:00:aa:d0:fa:cf:2e:e4:46:cf:c7:dc:
c3:28:4d:9c:da:ba:7b:46:9d:3c:b9:79:fd:1b:64:
a1:29:53:16:89:e3:34:42:d0:25:e3:2d:44:7d:b3:
e6:20:86:76:20:fb:34:cc:85:ff:07:fa:91:39:4c:
61:20:99:e1:2b:c2:4e:c8:95:ab:50:72:e6:9c:f8:
46:df:41:ad:bc:8a:05:da:e6:a3:bc:40:b4:c5:d6:
f8:4c:a1:dc:b2:17:91:36:b3:59:14:89:b6:06:01:
c3:4e:fc:8c:88:89:29:87:9a:a7:07:2a:de:20:5c:
a5:a9:c1:ff:7e:56:a4:c7:4b:cc:e8:a7:6f:38:94:
bb:9b:6f:fe:74:2b:9c:8e:74:12:e2:9f:a2:81:63:
15:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F7:19:73:06:CA:FC:16:2B:18:4A:AE:03:2B:F8:29:B8:1C:C6:04
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A_cZcwbK_BYrGEquAyv4KbgcxgQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:67:df:75:f5:80:d1:b6:ca:7b:ab:2e:6e:d7:a2:61:9c:59:
43:48:08:5a:7e:94:d4:99:2b:d9:07:9d:11:65:25:dd:7a:fa:
99:d0:85:b0:95:19:9d:fa:38:a2:0e:2c:ba:76:fc:a7:73:cd:
fb:5e:98:69:90:6f:44:10:43:73:64:47:04:46:52:b9:93:fd:
8e:66:b2:9f:dc:de:db:64:89:06:50:4d:e5:8b:7e:e6:8c:1a:
8e:fb:05:0d:94:e3:59:c3:a9:4c:58:e8:c5:8c:79:7b:2a:23:
e7:52:be:71:27:b4:1c:63:34:06:7f:df:1d:a6:10:80:2d:27:
64:2e:66:a4:10:df:cd:c5:2f:e8:c3:29:df:8c:f9:d1:bf:03:
8e:3e:95:5c:5b:f2:05:d3:4c:39:46:da:ac:8c:b5:0e:f2:11:
4f:e5:d2:c3:95:a5:48:87:58:3d:23:83:22:77:5c:9e:0d:fb:
81:e8:7f:3e:03:d1:f2:6e:54:f2:88:fe:ca:95:fa:62:76:88:
18:7d:82:22:e0:2c:27:83:e1:82:b1:11:df:9f:c2:f9:0e:ba:
2a:00:0a:b6:13:af:e3:f0:9e:bf:a4:70:2b:87:77:05:30:9b:
bf:35:c9:47:05:f4:81:eb:4b:8a:5b:49:3e:e9:db:c7:a9:bb:
fd:57:95:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org