Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DCCfbzadECg_vNgvG3hUPH1w0PY.roa
File: DCCfbzadECg_vNgvG3hUPH1w0PY.roa (raw, json)
Hash identifier: T6e4mVte/1WD6HQg7eu/YkrNk3DNjWV7N5kxSDxm3a4=
Subject key identifier: 0C:20:9F:6F:36:9D:10:28:3F:BC:D8:2F:1B:78:54:3C:7D:70:D0:F6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 180D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DCCfbzadECg_vNgvG3hUPH1w0PY.roa
Signing time: Sun 07 Feb 2021 12:25:51 +0000
ROA not before: Sun 07 Feb 2021 12:25:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.148.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6157 (0x180d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:25:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0C209F6F369D10283FBCD82F1B78543C7D70D0F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:75:50:36:0c:1c:ef:4b:bf:a2:e4:6c:a3:
2a:71:ce:2d:96:ce:8e:01:27:a1:82:31:bb:8f:11:
c0:de:4c:59:f5:a4:cc:ba:e4:f4:c4:54:a7:62:df:
2b:e7:37:40:0e:af:7a:a9:4f:18:d9:87:fd:64:91:
e2:00:5b:5b:b6:cd:4d:7c:70:de:9b:7d:58:0b:af:
38:53:45:9b:96:09:44:3a:6d:4e:db:be:25:ca:6e:
a3:b5:9e:63:1a:72:9c:30:b4:89:6a:a3:65:86:be:
4a:25:5a:ba:a0:d8:da:03:a3:2d:ba:cd:bb:25:82:
5b:de:a7:a0:e6:f2:1d:30:1d:ea:c2:2a:5f:50:0a:
0e:aa:4c:74:75:4e:1b:fd:44:83:c7:99:35:0c:ed:
c1:0d:79:95:d6:d4:1b:e3:68:0e:64:27:64:15:37:
c4:ec:83:ee:96:d8:bd:6c:25:5d:f2:19:bb:4f:59:
bc:e1:ba:1e:b9:af:f9:d7:fc:29:ba:fa:e0:0b:b7:
cd:70:c8:d7:87:50:35:bf:ce:f3:35:91:78:2d:75:
a0:6d:2f:28:a4:e5:6e:a0:87:7a:e0:ff:1f:64:fb:
7d:de:c4:1a:60:81:f3:72:e3:be:3a:f6:a7:95:89:
77:4d:80:69:29:2d:61:cc:e3:d5:65:cd:33:ad:20:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:20:9F:6F:36:9D:10:28:3F:BC:D8:2F:1B:78:54:3C:7D:70:D0:F6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DCCfbzadECg_vNgvG3hUPH1w0PY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.148.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:b4:8e:24:48:41:0e:0a:a1:3e:1d:0a:4b:4f:65:a8:54:4f:
49:f9:a6:2f:28:1a:ff:b9:47:21:3a:bb:f4:a5:23:c1:56:32:
21:50:37:35:64:2e:7b:6e:1d:3f:0f:0e:04:bc:f3:d6:bf:ab:
6d:68:44:c5:c9:ed:73:ea:aa:b1:36:28:a3:b4:86:a6:26:53:
d2:b0:ed:cb:b5:9f:79:32:73:e0:ad:b7:f2:c5:d7:d6:83:48:
d8:c2:90:7c:de:38:ff:28:31:eb:89:72:03:37:10:43:50:5e:
02:32:7e:92:b3:77:85:c9:29:54:d8:5b:00:f9:8c:cc:c6:90:
9c:36:8a:e6:1b:74:23:06:75:ab:33:56:c7:eb:6e:49:5c:2b:
9f:69:47:4a:70:bf:55:1b:44:5b:f9:c3:23:fc:a5:70:07:4f:
d7:9d:5a:8a:be:63:a7:2b:c5:36:e7:26:a9:4b:37:a5:bd:da:
f5:9d:1f:46:94:17:6a:58:0e:23:ac:ac:49:08:aa:b4:4e:e1:
16:fa:c2:b0:8f:dc:34:6d:f2:ed:0e:e2:ca:06:12:c4:db:0a:
79:cb:e4:56:c6:f3:94:51:d8:32:f4:1e:8d:db:75:fc:ab:8c:
c0:fe:2f:e1:ec:db:bf:ac:05:95:80:1d:70:55:08:7f:e9:21:
8c:21:f4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:24 2023 by rpki-client on console-fra.rpki-client.org