Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K2K_uMpRxuWJ_kotFtDjvbHNwGk.roa
File: K2K_uMpRxuWJ_kotFtDjvbHNwGk.roa (raw, json)
Hash identifier: xj2HM5YT7r3XUW5SKxyKtdO6mDjyX0VLd3AbI6Gv7y8=
Subject key identifier: 2B:62:BF:B8:CA:51:C6:E5:89:FE:4A:2D:16:D0:E3:BD:B1:CD:C0:69
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1807
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K2K_uMpRxuWJ_kotFtDjvbHNwGk.roa
Signing time: Sun 07 Feb 2021 12:25:38 +0000
ROA not before: Sun 07 Feb 2021 12:25:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6151 (0x1807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:25:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2B62BFB8CA51C6E589FE4A2D16D0E3BDB1CDC069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:b6:4f:e0:06:a2:77:59:6f:47:99:55:2d:
02:84:28:5e:35:bd:0d:1a:5a:f3:59:c4:a4:24:3f:
3a:2b:51:25:4d:4f:7f:60:e7:dc:0a:6a:08:7c:b5:
c7:29:b7:66:2f:fc:8c:82:ec:b9:95:99:37:c5:27:
a0:5b:8a:e6:4a:20:34:6b:cf:61:2b:41:cd:74:0c:
4d:3d:52:12:1d:5c:3b:53:23:9f:42:0d:7e:e9:22:
35:76:06:b2:30:1f:b5:12:f2:b0:98:5c:73:66:be:
d5:bd:62:05:d8:bc:71:d2:08:d0:90:b5:c4:8b:5f:
89:4a:da:de:51:2d:ed:28:11:21:0d:68:de:69:69:
4c:af:d7:8d:4e:2e:c1:0a:dd:1c:a1:05:43:09:a5:
e0:c4:04:d4:68:4e:05:d8:84:31:34:dd:89:bc:37:
6f:58:1c:62:cb:ad:e1:61:c2:3a:e5:51:7a:17:b6:
b3:9c:b2:42:c2:d6:04:45:92:72:c7:96:01:e4:57:
63:7d:e6:f2:0f:88:d6:1e:f6:72:c9:6d:9c:96:6f:
bb:5b:5c:6b:e4:be:e4:ab:48:f0:52:19:c7:2b:ae:
96:5a:d4:bb:fd:32:a0:8b:52:4f:09:0b:ac:cd:90:
5d:1a:31:69:96:3b:ac:fd:8c:83:3e:98:32:bf:a8:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:62:BF:B8:CA:51:C6:E5:89:FE:4A:2D:16:D0:E3:BD:B1:CD:C0:69
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K2K_uMpRxuWJ_kotFtDjvbHNwGk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.144.0/22
Signature Algorithm: sha256WithRSAEncryption
92:a3:ab:04:c2:37:64:fd:73:12:bd:e6:1e:28:87:e1:e8:e0:
e4:85:72:c6:de:d2:f0:30:42:16:4a:02:68:fe:0a:b7:e7:31:
24:20:12:97:2e:88:12:ed:a4:d1:e3:dc:bb:32:11:fc:c9:71:
e5:ee:1d:f9:c9:58:11:1e:b1:4a:68:ee:bc:e9:9e:fa:07:b0:
14:d3:1a:1c:b0:9f:b8:a0:37:8b:0f:43:f4:85:60:d4:d0:e0:
51:fe:39:a8:50:9c:9b:b8:d8:b4:db:df:47:b1:4a:d0:ff:40:
22:fd:f3:57:35:d6:2a:96:6e:b4:0f:05:15:dd:fb:95:47:94:
58:a1:1c:de:6b:e5:86:90:aa:5e:8b:eb:24:2f:b8:25:44:9b:
7c:98:fd:83:7c:d0:8e:f3:e2:13:af:c7:64:34:2d:92:86:0e:
c7:8c:77:ad:53:22:4c:4a:24:16:60:9c:77:2c:f6:bf:89:bd:
d2:0e:bb:e8:b4:4c:d1:c7:c8:34:c5:8e:72:16:d4:df:81:dd:
7e:8b:a1:ee:45:4d:ef:96:a2:66:80:f1:9e:84:25:48:74:b8:
3e:c3:6e:d1:cf:cf:03:f8:30:46:5d:48:9a:23:7d:16:55:43:
7d:6f:25:2f:f5:fd:40:b4:7c:14:95:e7:30:f1:9f:f8:13:e4:
0a:03:0d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:16 2023 by rpki-client on console-ams.rpki-client.org