Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JwHA7iLsyGfz_H7WYooIKJkzH_I.roa
File: JwHA7iLsyGfz_H7WYooIKJkzH_I.roa (raw, json)
Hash identifier: D8/z4HsKT9JHCwjRTGUzW07O2ZR6kH4XE63/nrtRZjQ=
Subject key identifier: 27:01:C0:EE:22:EC:C8:67:F3:FC:7E:D6:62:8A:08:28:99:33:1F:F2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JwHA7iLsyGfz_H7WYooIKJkzH_I.roa
Signing time: Thu 15 Sep 2022 02:53:07 +0000
ROA not before: Thu 15 Sep 2022 02:53:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2701C0EE22ECC867F3FC7ED6628A082899331FF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:93:6d:51:a6:f8:eb:71:7f:f6:2f:3d:49:
db:f5:af:90:72:87:01:10:66:34:dd:69:c1:23:91:
86:16:41:10:99:c8:03:2b:81:20:be:eb:c5:79:da:
8f:66:7b:48:ec:61:1f:c5:7b:db:bf:39:1b:4c:e3:
3d:c1:fb:35:38:08:2a:21:fd:76:86:b8:f0:2e:c1:
0b:d9:2a:c9:f9:09:82:0f:e6:6a:cc:dd:34:f1:2a:
0e:dc:f0:b2:58:8e:a9:44:1f:af:3e:df:0a:c6:7d:
3b:b9:a8:20:38:48:2a:8d:35:d9:cf:67:7e:44:ac:
da:5d:dc:8b:f8:4f:be:3d:18:8a:48:5c:81:e0:93:
ec:cc:9a:c8:10:e6:1b:81:30:80:56:b4:52:69:d8:
cc:2b:6c:c2:14:85:54:ef:b6:83:c5:b2:3d:42:63:
4f:d7:48:9f:31:ae:0b:45:0d:34:bf:47:f5:36:ce:
0a:2a:05:c4:93:b1:3e:37:6f:8e:2d:2d:a1:94:3a:
df:6b:1d:2a:df:8e:75:4e:22:78:d1:76:09:33:4c:
16:00:fe:c2:dc:07:e0:11:49:5e:a5:da:a9:d6:75:
b1:60:aa:39:d1:4e:a7:91:c8:17:9d:7f:00:4a:9d:
b6:f2:e2:12:cb:2c:9c:26:7b:8e:03:6d:53:da:50:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:01:C0:EE:22:EC:C8:67:F3:FC:7E:D6:62:8A:08:28:99:33:1F:F2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JwHA7iLsyGfz_H7WYooIKJkzH_I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a2:46:b7:61:50:ba:7f:af:f0:e2:74:7b:11:b2:85:de:d3:
e4:ee:31:fe:e1:80:8c:01:d6:8e:a8:89:57:76:a4:de:4a:56:
88:49:4a:08:68:1d:5a:53:13:17:04:b6:9f:64:86:7d:4b:b3:
34:83:f9:29:e5:77:7e:72:b7:75:d6:d7:aa:f9:5e:36:8a:17:
fe:35:b2:35:e9:05:cc:f7:00:24:18:86:8e:ff:16:a7:ce:ea:
df:92:83:4c:da:64:e9:1b:a6:79:55:b6:2e:65:75:c2:e6:9d:
2e:2d:80:71:e4:5e:ad:ae:ef:51:5b:d6:87:42:aa:ec:87:05:
dd:02:5e:23:bd:67:f4:04:e8:d8:fa:73:57:42:7f:4a:52:6d:
22:8d:ea:44:3d:d0:42:72:e2:ce:81:a4:de:06:bc:2d:1a:06:
d9:fd:89:91:62:9d:d1:34:00:77:c5:18:9c:37:7f:5d:ea:53:
43:7d:42:66:2a:00:34:ec:19:f5:80:90:a3:63:f2:3a:f7:af:
05:e6:ee:2e:0d:b3:c4:e5:dc:ba:93:90:3b:2e:51:a6:9f:0c:
a5:9d:64:80:7c:69:81:f6:1b:cd:22:6a:87:91:ea:ff:8f:44:
e9:e0:79:86:d3:f4:aa:34:a5:12:9a:50:5f:8d:3c:a3:16:a5:
33:5a:ea:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org