Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DWczhQGOP4R5CQR7pBIHIf3Wzec.roa
File: DWczhQGOP4R5CQR7pBIHIf3Wzec.roa (raw, json)
Hash identifier: XjBqKhqqjoTaO4lfNTfgGV4A5aCR6rOQvdS+x6ZH2Gs=
Subject key identifier: 0D:67:33:85:01:8E:3F:84:79:09:04:7B:A4:12:07:21:FD:D6:CD:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BA1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DWczhQGOP4R5CQR7pBIHIf3Wzec.roa
Signing time: Wed 29 Sep 2021 02:46:49 +0000
ROA not before: Wed 29 Sep 2021 02:46:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7073 (0x1ba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:49 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0D673385018E3F847909047BA4120721FDD6CDE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:8c:78:4f:88:4a:d6:c3:e3:d3:1e:53:28:
1d:47:76:11:64:12:8b:7c:c2:19:ca:c0:38:22:4f:
72:a8:d7:f1:d8:28:d1:ce:c5:21:38:7b:0e:b9:0d:
d3:21:83:b2:42:37:10:63:ab:30:8c:85:41:ee:f2:
fe:4f:39:c2:25:96:7c:31:ce:72:a8:45:5c:69:ec:
3d:b6:85:d4:45:05:1d:d5:02:d2:88:7a:83:5c:c1:
8b:0f:37:b0:d5:73:4d:ec:0a:b3:ab:d2:9b:f5:00:
d8:7a:bc:96:16:bf:3e:9f:cf:d1:3a:26:b1:57:0d:
47:2a:cf:fe:af:56:0c:61:9d:12:5f:8b:c8:d4:b1:
c1:7e:59:6b:ad:6b:f5:ca:88:e9:ab:04:54:ed:7f:
61:d8:bf:35:93:38:62:86:df:85:4e:02:87:1b:1c:
c0:19:0a:3e:5f:be:fe:1d:3a:a6:0e:af:ac:9c:57:
5c:3b:26:20:f1:1b:45:0a:92:58:d9:6c:b1:a1:52:
f8:1e:36:33:cc:fe:0d:44:b6:24:34:26:cd:1e:34:
96:5e:32:c1:67:5b:68:95:fe:d7:dd:19:cb:d5:30:
a4:1b:7f:4b:7f:29:e2:0c:ad:ab:76:84:db:fa:04:
26:c2:8e:f4:f4:40:7a:c5:5a:b1:4f:73:ce:0a:ba:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:67:33:85:01:8E:3F:84:79:09:04:7B:A4:12:07:21:FD:D6:CD:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DWczhQGOP4R5CQR7pBIHIf3Wzec.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.237.0/24
Signature Algorithm: sha256WithRSAEncryption
40:03:1e:04:e0:e3:25:e0:d6:0b:20:07:95:d8:db:8b:4f:89:
61:8c:f7:85:80:27:09:4b:8b:ba:f3:27:82:64:1b:ab:32:05:
93:0d:68:c0:bc:34:55:46:51:65:60:19:37:5e:be:32:de:44:
99:a4:69:91:19:d7:6b:b9:9c:7f:7e:56:3a:22:d1:3b:3e:cc:
76:b3:9d:0b:1e:e4:fc:89:7f:3e:db:e0:77:ac:16:7e:00:2c:
bd:97:63:dd:ea:5c:33:76:12:65:51:f7:be:94:9b:cb:c3:56:
19:b0:be:24:73:19:95:62:8c:36:78:b9:fe:b6:14:15:36:fa:
a5:7d:03:0b:20:f6:f9:b7:98:32:1f:10:83:99:75:8b:32:d1:
07:44:6e:26:63:4a:ae:5c:fe:e9:a2:cb:75:61:1a:94:00:a1:
0b:12:2b:5b:ff:27:f9:d2:de:94:45:21:79:bc:c2:0a:15:09:
03:97:41:aa:8a:2a:06:24:02:2d:f6:b4:70:76:a0:2d:ad:8e:
cb:b5:e3:0d:75:85:24:25:dd:15:27:b9:46:40:99:67:7f:0f:
99:1c:6c:78:15:4a:cc:8a:f5:64:03:4a:3a:87:d4:da:5a:ae:
1f:0d:74:00:c1:4e:58:61:87:15:dc:9c:eb:8f:dd:12:34:d7:
68:11:0e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org