Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Iev-mE7ehMVS9OD1c4oG2Gs81X0.roa
File: Iev-mE7ehMVS9OD1c4oG2Gs81X0.roa (raw, json)
Hash identifier: f1R81LLL08PZe/4zxHU45cXjq0k2x4EKqOdlIDaZCRg=
Subject key identifier: 21:EB:FE:98:4E:DE:84:C5:52:F4:E0:F5:73:8A:06:D8:6B:3C:D5:7D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F20
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Iev-mE7ehMVS9OD1c4oG2Gs81X0.roa
Signing time: Tue 29 Sep 2020 09:56:32 +0000
ROA not before: Tue 29 Sep 2020 09:56:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3872 (0xf20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=21EBFE984EDE84C552F4E0F5738A06D86B3CD57D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:c5:6a:c1:89:e4:99:87:01:c1:a6:8d:f5:
12:7b:f1:ee:1f:25:66:1e:0f:72:f7:f8:d8:30:59:
45:d1:a7:10:3f:f8:a4:82:4f:d5:91:05:c0:cc:f4:
eb:5a:5a:f5:84:19:a0:4c:ff:9b:f4:a5:a4:0e:70:
a9:ab:12:16:ee:3d:a4:91:cf:30:52:dc:49:e1:0b:
96:4b:9a:10:7d:e7:52:07:75:a6:aa:da:30:04:7e:
a3:09:78:d2:83:69:d5:88:56:bf:c8:d6:0b:9c:1b:
6e:dc:7c:75:72:2b:53:28:89:ed:1d:38:74:c6:06:
c2:f7:21:1a:b0:6d:01:19:8a:56:92:e6:8d:28:59:
8a:b1:64:31:40:82:a7:63:a4:ca:5b:6f:29:c2:59:
89:28:f3:0a:95:a7:fc:d3:a2:aa:0a:4d:d3:93:27:
8e:b8:65:57:0d:a0:a2:4b:6e:00:3f:13:ca:5c:f0:
19:1f:31:a7:69:bc:83:b0:58:59:79:54:4e:f5:ff:
1d:c4:46:eb:65:10:2e:04:cb:da:a9:16:58:57:98:
df:ba:1e:fc:08:a4:78:f7:af:6e:ab:ad:51:0e:0c:
46:b0:dd:1b:8f:20:2f:53:dd:b5:34:5c:a8:51:c0:
55:ac:84:41:9a:95:d5:f2:3a:7a:87:3f:33:c5:65:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EB:FE:98:4E:DE:84:C5:52:F4:E0:F5:73:8A:06:D8:6B:3C:D5:7D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Iev-mE7ehMVS9OD1c4oG2Gs81X0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.253.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:01:c6:a0:ae:2d:07:32:db:d0:ed:6a:7e:65:57:a4:32:ad:
fb:e1:9e:3a:d3:67:d5:5e:45:f2:d4:61:d3:5a:9c:84:d9:dc:
b7:f9:ee:e4:e9:12:3a:5d:ed:f7:83:cd:46:c7:d6:8e:4c:60:
b5:e3:a1:a3:c3:66:40:3b:f3:82:16:1d:e4:2d:ec:91:c1:6e:
9b:ce:eb:74:dc:a5:cf:9c:3e:14:0d:5d:30:e2:83:92:39:e2:
1b:99:43:37:b8:6a:13:25:ff:df:7c:3e:b5:68:af:5f:65:a6:
8a:c3:4f:35:53:f8:35:cb:7f:10:3a:94:3a:9d:0f:3b:ca:03:
ff:e7:74:be:6e:e1:f0:d5:51:27:4f:c3:18:ad:49:ac:8e:13:
7b:ec:90:60:bf:cc:7c:29:f1:35:90:f3:99:5b:8d:cd:77:ce:
f7:a1:a7:66:09:76:66:d2:f3:66:ec:41:71:59:a4:7e:48:a3:
6c:6f:54:93:d1:fa:df:78:6e:cb:87:c1:d8:a1:d0:4e:20:e0:
2e:4a:36:6f:be:fe:35:7f:a4:09:da:d6:28:a3:13:52:e7:c8:
6a:b0:46:9c:3d:27:92:09:54:77:ab:5e:38:98:79:8c:50:6d:
e4:be:4e:63:1f:45:6d:81:fc:89:04:b5:62:d6:cf:12:61:1e:
6e:6a:57:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-fra.rpki-client.org