Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EtYEoqoDh1TjkuwzjZ_wHCl1mfs.roa
File: EtYEoqoDh1TjkuwzjZ_wHCl1mfs.roa (raw, json)
Hash identifier: J1wCl+sfKs4Bg4iXCgSaHJA3SItwolWQ1UzZnXsGeyQ=
Subject key identifier: 12:D6:04:A2:AA:03:87:54:E3:92:EC:33:8D:9F:F0:1C:29:75:99:FB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20C2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EtYEoqoDh1TjkuwzjZ_wHCl1mfs.roa
Signing time: Fri 25 Nov 2022 04:39:04 +0000
ROA not before: Fri 25 Nov 2022 04:39:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8386 (0x20c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=12D604A2AA038754E392EC338D9FF01C297599FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:e1:a9:37:19:d5:b8:8f:bb:80:b8:4c:39:
95:f4:3c:ce:89:b2:3e:c6:8e:94:fa:09:92:fb:bb:
46:32:c3:08:30:d4:5d:5f:86:e4:60:16:8c:cc:9a:
db:1e:67:53:70:23:be:3e:49:13:0b:d1:6e:66:81:
cf:f9:a0:33:46:22:5d:ef:43:27:84:80:50:b8:3f:
be:f0:62:ff:a4:66:10:2b:ca:56:05:82:0d:25:96:
c6:ad:a5:3d:4a:42:b3:ef:ec:07:45:9b:68:b0:c2:
f7:48:11:b0:bd:f2:3a:bd:60:94:75:e0:b9:a5:40:
5d:e9:f2:2b:9d:5d:5d:6c:63:53:e6:bd:59:85:43:
42:4d:af:2b:cb:50:9b:25:bf:f9:c2:2f:ef:0c:ba:
3d:b8:26:f4:ab:6f:22:25:c5:df:d2:b5:e1:03:17:
14:b4:b3:85:25:ab:32:39:df:8e:23:eb:6f:a7:d6:
5b:3c:96:03:e4:32:23:32:44:ef:7d:ec:5b:df:32:
33:eb:1a:24:a6:74:b9:14:7e:51:8e:3f:15:80:5b:
9e:fa:00:ba:e4:7f:66:52:8c:a7:09:67:d4:03:22:
86:8d:51:f8:a6:2c:87:49:86:f0:4b:f1:7c:8b:ed:
6c:ea:d1:1e:22:d7:f0:d4:ef:13:9d:c5:2c:9f:62:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D6:04:A2:AA:03:87:54:E3:92:EC:33:8D:9F:F0:1C:29:75:99:FB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EtYEoqoDh1TjkuwzjZ_wHCl1mfs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.181.0/24
Signature Algorithm: sha256WithRSAEncryption
63:c3:d9:68:64:6f:f9:4f:73:a2:e0:09:6f:e6:60:5a:f0:8b:
da:60:f2:14:6e:81:ec:90:e6:13:5f:3a:18:99:ad:74:89:07:
0d:7d:e9:7e:d1:0f:20:0a:b7:34:5e:44:70:9a:04:f7:30:8b:
b0:51:9a:d3:04:70:ab:94:f0:43:1e:c9:27:d9:47:a1:29:b9:
f8:8e:46:fb:d4:ac:14:f7:ea:bf:c3:b4:6a:a9:2b:2f:39:df:
d4:4d:3b:f5:cb:82:3a:98:d9:cb:9c:2a:d3:f7:38:88:34:d7:
9a:33:f2:35:1b:03:cd:e1:57:8e:1b:a0:bc:1f:74:3a:d9:83:
cf:23:95:da:a6:c7:79:75:18:7a:0c:7d:a5:b0:2f:ce:2b:5f:
ad:c9:b2:06:d5:22:81:ad:db:91:a8:54:72:e8:fb:65:d9:8d:
4f:d9:0f:b3:ea:f8:54:5f:2a:8e:14:ae:98:e2:ae:60:a2:71:
49:6d:80:35:bf:a3:fa:7c:22:53:11:af:89:4a:fe:a8:17:83:
c5:05:cb:0e:9a:a5:d3:6b:e8:60:00:ee:db:cd:3c:56:ad:b2:
b7:f3:53:21:bb:97:09:4d:cc:dc:ef:b7:55:e9:ed:e7:f6:10:
51:e0:9a:23:b2:a0:c5:e0:6d:6c:72:88:1c:d1:b9:de:bc:1f:
01:9b:eb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org