Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KX61t4FYMrQRRlAxZJHPIcDbM5M.roa
File: KX61t4FYMrQRRlAxZJHPIcDbM5M.roa (raw, json)
Hash identifier: DBI9Wnn6xcDUADBLlda0mxAYPIo+OSj4d2meSFdO0ZA=
Subject key identifier: 29:7E:B5:B7:81:58:32:B4:11:46:50:31:64:91:CF:21:C0:DB:33:93
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2096
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KX61t4FYMrQRRlAxZJHPIcDbM5M.roa
Signing time: Fri 25 Nov 2022 04:38:53 +0000
ROA not before: Fri 25 Nov 2022 04:38:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8342 (0x2096)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=297EB5B7815832B4114650316491CF21C0DB3393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:71:ac:d4:e4:bc:ec:81:51:5d:3a:90:c5:8d:
7d:77:de:96:39:dc:af:7e:7f:27:a6:5a:f7:54:fc:
34:e3:df:ec:16:35:c8:0c:b1:6e:e9:82:c5:6c:c8:
be:3a:8a:cb:ed:0d:80:ee:a8:fc:67:a2:cf:89:c2:
6a:e7:c2:e0:55:37:4f:97:e4:f7:64:25:39:62:90:
6f:bf:a5:3b:25:36:3e:17:f5:fb:44:3c:82:87:6b:
67:2d:12:8a:ff:de:db:e6:82:5d:bd:68:9e:64:dc:
2f:05:39:7d:bd:f9:4c:30:28:48:1b:12:7c:3a:f0:
2e:51:29:d8:21:a3:43:d3:fa:34:66:2c:35:0b:e9:
0f:f4:db:ca:ab:9f:00:99:14:c2:43:49:04:0d:e3:
31:82:2b:39:09:da:09:e5:7a:e5:85:57:39:d8:e9:
0b:04:95:37:82:07:4b:5b:1f:e4:87:d2:f0:4f:4b:
30:f3:d1:39:46:c4:e8:17:86:99:df:eb:a5:b4:cc:
8d:7a:da:e5:61:a5:30:26:3f:19:5b:61:37:e3:6c:
b6:96:66:a3:01:68:c7:b0:7e:bc:84:0d:e4:fc:40:
82:8a:e5:6d:64:f5:24:35:52:46:19:19:6b:41:7b:
0b:9e:77:1f:3e:b6:df:88:31:5f:28:84:8b:54:3a:
ee:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7E:B5:B7:81:58:32:B4:11:46:50:31:64:91:CF:21:C0:DB:33:93
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KX61t4FYMrQRRlAxZJHPIcDbM5M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.80.0/21
Signature Algorithm: sha256WithRSAEncryption
34:e6:ec:41:26:e0:c1:94:3e:15:05:40:8c:eb:1e:ec:46:79:
aa:2b:09:fd:eb:4e:be:74:4e:3b:b3:7a:8c:ea:5a:e1:23:5f:
d1:0c:63:9f:80:13:03:54:86:6d:aa:f9:ed:d2:35:e9:c7:c6:
d5:99:b7:aa:df:35:4b:d0:c4:51:ea:c0:dc:d7:23:56:1d:78:
a9:36:8f:de:e9:49:9e:c1:c0:09:72:a9:c0:d3:2a:ec:a4:4f:
3b:97:a8:bb:ed:66:08:0f:a4:3c:26:00:66:30:12:ce:a8:2c:
d5:ef:27:f2:87:07:37:62:82:92:8c:76:2b:9d:5b:3f:fa:0a:
70:d9:2a:24:67:89:09:4e:53:ba:4a:04:12:41:6b:0d:c4:33:
20:1f:d5:d8:96:a9:8b:10:a5:e3:d5:9f:d0:5e:cf:74:35:89:
2e:a3:03:18:d5:8b:cc:f9:15:46:5b:2d:7a:94:c9:83:74:85:
14:e7:39:27:68:0d:c9:3f:45:93:3d:73:9b:67:c0:bc:9f:16:
ba:eb:b9:3d:d0:ca:77:1a:c8:2f:a6:80:fa:a7:9e:89:48:f3:
c5:b2:4e:4c:cf:fe:4c:e0:ec:28:06:79:cf:d8:40:6f:fb:d4:
54:64:e8:8a:0e:40:1b:cb:0c:65:a6:7f:e1:27:a5:aa:c4:53:
45:72:66:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org