Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cnz0BFTZ-ooOAc9vCWkeQ_jGI2Q.roa
File: Cnz0BFTZ-ooOAc9vCWkeQ_jGI2Q.roa (raw, json)
Hash identifier: goDI+Cc0WYy3lozkc4rdapnuDf7s+OhCvAZuWvwqn+s=
Subject key identifier: 0A:7C:F4:04:54:D9:FA:8A:0E:01:CF:6F:09:69:1E:43:F8:C6:23:64
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F27
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cnz0BFTZ-ooOAc9vCWkeQ_jGI2Q.roa
Signing time: Tue 29 Sep 2020 09:56:33 +0000
ROA not before: Tue 29 Sep 2020 09:56:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3879 (0xf27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:33 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0A7CF40454D9FA8A0E01CF6F09691E43F8C62364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:43:2a:27:a8:d0:d3:85:7f:5c:b3:1b:ff:
7e:99:36:3c:aa:b1:e3:43:38:23:09:08:b5:35:89:
f8:84:ff:d5:e1:94:a8:e5:fe:cf:76:22:d6:a7:93:
f1:99:e2:91:ce:88:1d:f0:e3:1e:f8:a2:27:f8:9c:
93:f8:75:f7:36:2d:4f:72:d4:d2:25:e0:ce:75:7b:
88:31:76:32:ce:bf:3c:e9:22:03:a7:9d:94:e5:e9:
72:e0:a0:07:cc:36:fe:10:b1:87:fe:d2:8f:6f:90:
4a:b5:a2:be:3f:3c:66:de:4f:5c:15:af:58:c0:c5:
38:dd:ae:08:ec:2c:63:f3:e0:5e:3e:c9:ee:0e:a7:
75:10:f1:e8:16:c9:fa:09:fc:8b:08:ad:97:ba:75:
22:54:09:85:74:d3:30:93:ef:68:27:a5:83:68:ac:
29:f3:a1:81:43:5f:22:b3:15:88:06:59:13:b0:70:
c9:95:4c:9b:d9:b8:44:fd:f2:55:1f:e1:0e:86:15:
16:37:8e:ee:2e:65:32:8b:ae:62:76:1b:12:e3:74:
5c:e9:05:30:ff:df:9e:cc:92:35:15:16:88:0e:3b:
f9:06:a1:6d:70:39:07:7c:2a:07:b6:74:bd:97:28:
cd:20:6c:41:a9:48:b4:c7:d9:b8:74:8f:4a:34:5e:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7C:F4:04:54:D9:FA:8A:0E:01:CF:6F:09:69:1E:43:F8:C6:23:64
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cnz0BFTZ-ooOAc9vCWkeQ_jGI2Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.176.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:42:2f:c4:cd:c7:64:2f:aa:95:17:61:c1:8e:90:58:30:50:
76:9e:e6:fd:c7:78:1d:51:71:40:07:dc:4b:f3:d6:a5:d6:89:
c4:9e:f9:ef:81:ac:ac:c6:ec:28:10:4b:1f:ce:4f:80:93:1d:
04:05:8e:85:7c:ff:c3:44:ed:35:0c:09:51:e0:78:c7:50:65:
07:ee:61:75:1c:cb:aa:d9:80:60:77:0b:67:c3:61:80:5c:8e:
98:02:3d:46:1e:38:76:ad:ce:d4:66:dd:e0:e6:01:a4:52:78:
a9:72:59:ba:39:18:e8:63:2f:ee:40:85:31:a3:c3:c8:b2:8c:
cf:24:60:02:b2:fd:dd:30:16:d2:e3:e8:1c:c0:e5:54:4b:af:
be:b3:34:76:e0:f7:0d:aa:b5:3d:0b:9b:29:71:87:9b:72:87:
aa:80:74:45:6a:75:f9:c4:d7:37:bd:4b:fc:87:e7:8d:55:19:
be:bd:a0:ca:36:a5:a8:79:cf:b6:a8:af:7e:f3:a2:71:b4:4d:
3a:57:8d:db:6a:a5:41:c0:da:98:fb:02:7e:93:f0:80:a6:2d:
cd:e6:81:d8:32:70:f9:a9:ae:4c:0d:7d:33:46:32:f7:d0:81:
23:75:99:32:b7:75:ac:1f:57:93:04:e7:7c:15:57:9f:1c:97:
06:44:41:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org