Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BvFW_I_IHUevK-AGzQzB9s_pTxQ.roa
File: BvFW_I_IHUevK-AGzQzB9s_pTxQ.roa (raw, json)
Hash identifier: FOBDALYsDts4QKP3z06h+wcf4zrqO96tYHnEHqk3pQU=
Subject key identifier: 06:F1:56:FC:8F:C8:1D:47:AF:2B:E0:06:CD:0C:C1:F6:CF:E9:4F:14
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 163B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BvFW_I_IHUevK-AGzQzB9s_pTxQ.roa
Signing time: Sun 07 Feb 2021 12:09:08 +0000
ROA not before: Sun 07 Feb 2021 12:09:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5691 (0x163b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:09:08 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=06F156FC8FC81D47AF2BE006CD0CC1F6CFE94F14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:fc:0f:a0:b0:ac:9c:80:0f:f8:a2:95:51:
6c:d1:00:a4:60:62:bf:b3:aa:73:12:87:52:f0:a5:
5d:0d:dc:37:4e:78:52:9a:78:33:93:a7:b4:b2:9a:
33:6d:55:c2:cb:81:ca:78:c2:97:53:ac:d0:90:75:
3d:f3:9f:10:bb:42:27:26:ef:15:e1:78:83:7e:5d:
c8:0b:00:d2:93:3a:c1:0e:85:8c:ab:d1:12:fc:32:
d5:57:2a:5a:40:62:3b:d1:02:02:ac:6b:e7:60:06:
7f:78:39:bb:25:8c:ea:32:46:ae:3f:f9:dd:f4:e3:
75:75:8f:2b:e8:45:bd:14:c7:45:1f:8e:2e:1f:03:
a4:56:9d:00:2d:bb:c1:70:c8:78:a7:87:b6:14:1f:
ca:e4:0e:7e:78:12:5a:49:31:48:fb:63:f8:d9:00:
78:9f:3c:d9:77:15:a9:43:6e:27:66:a2:9d:e3:a9:
1b:68:8f:48:2b:95:31:99:08:ec:f6:8c:d6:ca:ba:
85:c3:0e:37:15:96:bd:24:54:58:9b:a9:af:f9:0b:
ef:59:ec:43:22:5a:22:89:9f:72:7a:06:ed:5b:26:
99:45:dc:a3:9e:eb:a8:0f:5e:ea:6f:e5:a3:a5:3c:
75:e8:80:6a:18:e6:9c:c9:0c:4b:0a:5d:6e:51:58:
f5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F1:56:FC:8F:C8:1D:47:AF:2B:E0:06:CD:0C:C1:F6:CF:E9:4F:14
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BvFW_I_IHUevK-AGzQzB9s_pTxQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.214.0/24
Signature Algorithm: sha256WithRSAEncryption
15:09:f7:76:75:f4:72:9f:f0:04:81:0e:d3:e6:66:d3:aa:c7:
b6:f5:dc:8d:b5:c1:7d:d2:ca:9b:24:6e:14:0a:2f:cf:90:fc:
65:0b:71:97:58:5b:8c:85:6e:68:e9:29:22:a2:ff:c9:30:0a:
7e:35:f9:59:d9:0c:f9:ef:4b:17:30:bb:a8:fd:ac:4b:49:11:
f3:ae:c9:ec:6c:ae:60:3f:1d:5b:e3:99:f4:fe:00:bd:4b:5b:
0f:e5:c9:2f:aa:81:a3:21:f4:43:82:db:d2:fe:57:ce:f9:0f:
8f:b6:9d:27:cb:14:7c:c8:f3:64:f5:31:66:a3:50:8e:4f:85:
b9:81:7a:1e:fa:88:78:63:be:ea:c5:f2:c8:5f:e3:54:07:69:
c1:7e:84:a3:4a:d9:f8:ac:25:6f:58:ef:bf:c2:84:47:66:21:
c4:b8:8f:f7:a8:fe:94:30:b1:df:6d:b2:e9:99:10:b3:99:50:
b5:69:a8:5a:1b:02:03:d7:be:a0:86:58:33:e0:c2:ab:4a:45:
b3:51:d3:c0:72:36:6e:9b:2d:fd:63:e0:bd:b7:38:09:9f:22:
30:63:75:c2:cb:aa:ae:8a:31:17:aa:03:ef:00:cd:63:69:3e:
7b:2d:6b:f5:cc:b6:b5:cb:36:a8:84:f4:df:88:e6:37:c9:ab:
bd:3e:4e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org