Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CJjyAWEO_JtmVlVJui2M7-9-XfA.roa
File: CJjyAWEO_JtmVlVJui2M7-9-XfA.roa (raw, json)
Hash identifier: zSAIa5lir0rCiyBdOx/YngTS5Wjc0O1fRNWBMvXtLPQ=
Subject key identifier: 08:98:F2:01:61:0E:FC:9B:66:56:55:49:BA:2D:8C:EF:EF:7E:5D:F0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20A6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CJjyAWEO_JtmVlVJui2M7-9-XfA.roa
Signing time: Fri 25 Nov 2022 04:38:57 +0000
ROA not before: Fri 25 Nov 2022 04:38:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8358 (0x20a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0898F201610EFC9B66565549BA2D8CEFEF7E5DF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:60:d8:f8:b5:63:c5:d9:df:93:9e:ee:ae:
fa:6d:e6:58:c7:63:60:55:f5:e3:b9:b6:3d:f8:00:
ae:02:2f:df:81:af:1a:95:29:83:ec:60:35:d2:6e:
46:6d:56:05:f8:65:d7:3d:b5:cd:cd:e0:46:55:52:
86:58:07:d8:24:0b:e8:fd:7e:1d:7d:a7:27:fc:4c:
e7:01:a2:07:b9:c8:f5:d9:7b:2d:14:f0:af:6a:98:
ea:b8:4f:61:80:6c:9d:50:4f:29:da:d7:f5:b0:a8:
58:de:55:3c:68:59:a8:89:12:69:48:94:8f:0b:49:
12:cc:e2:7c:68:b8:9f:d1:b0:b5:87:d2:11:a4:a9:
48:ed:e6:f9:a7:68:15:69:37:ea:85:ae:a9:e3:ce:
f1:b1:21:53:b2:f1:ea:a6:4e:11:d0:88:cb:75:61:
6b:32:98:81:dd:4a:f8:3e:46:86:a8:ea:00:16:5b:
b9:dc:39:cb:e2:c2:b4:7d:a5:df:28:6b:84:bd:5d:
16:98:5b:90:11:a7:c2:8a:c9:42:c4:d6:11:8b:e4:
03:be:3e:1d:01:ac:f2:20:58:44:c6:80:d6:6f:5d:
d3:54:54:31:e3:c6:9c:4e:4f:1d:7b:d5:dd:e6:53:
df:bc:58:e5:90:ff:98:33:a9:dd:e0:fd:86:d3:04:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:98:F2:01:61:0E:FC:9B:66:56:55:49:BA:2D:8C:EF:EF:7E:5D:F0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CJjyAWEO_JtmVlVJui2M7-9-XfA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.72.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:f5:93:3c:7a:5e:5b:00:4d:80:2d:a0:0c:b7:be:6f:89:a5:
6d:7e:b3:20:ff:68:f1:20:a3:80:58:24:49:03:59:b4:40:06:
4c:e8:6e:55:db:e7:46:d4:53:14:ba:7c:c4:3d:90:d0:19:05:
54:33:b8:6f:19:83:82:12:5d:2b:5c:98:d9:12:9f:86:06:1a:
3f:f5:c5:42:a8:ee:c1:c0:63:d2:7c:49:d4:36:9f:96:e7:b6:
02:7b:96:73:6a:5d:03:a2:63:21:06:e9:7f:73:38:3e:9a:86:
81:97:d7:89:99:38:a3:1d:ee:94:b5:1e:3e:79:16:5f:cf:95:
4f:47:85:81:08:33:c5:a4:8b:da:49:8d:34:05:15:c5:2e:a5:
89:06:9b:1e:e3:4c:73:11:bb:57:73:a5:1f:99:d6:47:d4:e7:
93:55:fc:93:aa:6d:1b:ec:91:be:3c:18:fd:75:4f:45:65:ae:
b9:b8:cf:df:46:9e:b4:92:f4:a7:4a:ce:10:11:85:e6:99:b4:
44:a6:cb:9b:cd:f4:71:f8:dc:3b:db:a2:9a:8d:c1:23:57:49:
ec:8a:2a:f3:1e:34:4e:61:0f:9f:35:33:20:ce:8b:c7:04:b3:
5b:d4:8b:f8:53:05:7e:8f:bd:0c:ad:63:03:e1:39:c9:90:62:
1f:a1:a9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org