Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F4n_pgp3hVrr7P-deZw0S5Ir03o.roa
File: F4n_pgp3hVrr7P-deZw0S5Ir03o.roa (raw, json)
Hash identifier: bxSe3rDYERExP6T1zKXq4Y/9S2gr5CYdmokusyHakVY=
Subject key identifier: 17:89:FF:A6:0A:77:85:5A:EB:EC:FF:9D:79:9C:34:4B:92:2B:D3:7A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21D0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F4n_pgp3hVrr7P-deZw0S5Ir03o.roa
Signing time: Fri 25 Nov 2022 04:40:26 +0000
ROA not before: Fri 25 Nov 2022 04:40:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.56.0/21 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8656 (0x21d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1789FFA60A77855AEBECFF9D799C344B922BD37A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:d6:d6:f7:e2:be:e6:16:73:b0:f8:64:75:
3d:91:9c:15:a2:33:b5:54:ce:33:01:d1:37:ce:8d:
d6:a9:7c:aa:95:d5:b6:60:fb:8b:81:ff:3c:79:7e:
85:ef:72:bf:7d:ad:e0:ca:e5:bb:7f:34:f1:e3:bb:
da:18:e9:97:11:ad:48:c8:07:5b:3b:20:65:c5:78:
ff:72:73:a1:65:ac:72:c8:4b:e0:96:d5:ce:74:0e:
40:b0:2f:69:b5:ab:d3:6c:de:ed:c3:1d:9b:5d:5d:
8a:c5:b9:37:96:12:1d:11:2d:f8:6d:78:ff:5a:9b:
0b:65:71:49:da:fd:fb:9a:11:68:28:c8:75:33:cf:
aa:aa:36:67:66:6b:f8:b2:b4:1c:31:d3:2d:24:df:
40:60:1d:d0:de:d1:79:c0:af:cd:45:48:46:ca:5a:
a6:9f:52:e9:22:c1:16:ee:d7:6d:c6:ee:ec:09:6c:
b7:9d:ea:2c:86:f3:d2:c9:58:4a:d8:93:59:16:e8:
39:0e:6b:3f:26:9f:5c:0b:44:47:a9:89:d4:a0:2d:
8c:ec:bc:d1:41:55:8b:a3:18:4f:d6:36:52:94:4a:
79:9e:e9:98:93:75:24:09:5d:6b:0e:68:cb:c3:42:
b9:1a:2e:c2:a9:89:c0:dc:fe:3b:29:54:44:11:b0:
7a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:89:FF:A6:0A:77:85:5A:EB:EC:FF:9D:79:9C:34:4B:92:2B:D3:7A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F4n_pgp3hVrr7P-deZw0S5Ir03o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.56.0/21
Signature Algorithm: sha256WithRSAEncryption
12:ee:b2:87:fb:62:d0:6b:23:cb:0c:7e:b0:a1:19:9a:a6:50:
3e:40:99:76:7e:7e:a0:b1:96:dc:20:4b:1b:f2:f3:3e:f1:f2:
67:1b:39:aa:0f:2a:dc:dc:8a:7c:a5:7a:7b:24:89:d8:22:80:
03:76:3b:9b:64:1a:d0:b1:81:ed:0b:90:6f:5b:6c:d0:99:9b:
ab:42:11:c0:f2:f5:ae:92:8e:60:db:47:02:83:52:42:c2:a2:
47:1a:c4:2f:52:fa:03:93:b0:9b:7f:16:ce:44:11:b6:0c:a4:
71:4c:da:1c:de:6b:f0:40:9c:00:94:93:f3:bf:1d:61:25:e8:
56:64:eb:85:a0:84:d9:3f:48:07:db:1f:ed:a6:6b:97:f3:fb:
9d:57:07:c3:da:2b:30:e3:0f:39:87:df:16:d2:6a:cd:8c:aa:
09:6a:f0:3a:85:6c:60:ab:72:c7:9e:20:9a:80:00:5e:ec:50:
86:ba:8b:36:e3:15:15:e8:b5:e5:9c:84:ca:95:62:0a:e4:3d:
8c:80:c8:00:e5:24:c7:b8:d0:9f:0a:e8:1a:d5:f5:34:33:ad:
8a:bb:72:49:11:2c:d5:47:d4:d7:de:e2:88:6d:11:cc:23:19:
fc:5c:66:58:a0:b8:82:09:f2:85:1f:0d:38:68:72:69:ca:de:
df:cf:e4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org