Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Kix2Eu9lRj1_wfnfRL5ambhZXek.roa
File: Kix2Eu9lRj1_wfnfRL5ambhZXek.roa (raw, json)
Hash identifier: BaGmvcyVnH79nrq5XG4BjvBloy+Hn9O9Wx0nr6Q04Jg=
Subject key identifier: 2A:2C:76:12:EF:65:46:3D:7F:C1:F9:DF:44:BE:5A:99:B8:59:5D:E9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14E3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Kix2Eu9lRj1_wfnfRL5ambhZXek.roa
Signing time: Sun 07 Feb 2021 12:00:29 +0000
ROA not before: Sun 07 Feb 2021 12:00:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5347 (0x14e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:00:29 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2A2C7612EF65463D7FC1F9DF44BE5A99B8595DE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:68:e5:e0:ed:e0:9c:5b:af:b2:99:e4:69:
71:43:7a:8d:e6:69:e6:60:98:e9:fd:05:a1:54:f8:
17:6a:2f:d7:08:77:d4:5a:fb:80:04:fb:50:ae:97:
ac:e0:75:71:a0:31:ef:0b:c5:38:27:e9:2a:f9:1c:
42:82:bc:ea:2d:98:7b:8c:c6:f0:e4:11:89:c5:55:
76:2e:fa:f7:60:f3:8b:0c:5e:88:47:fa:42:4c:42:
77:a8:6c:af:99:3c:ea:5f:c1:27:87:8e:84:38:a7:
d7:ef:21:ac:9d:c8:98:cd:d4:50:b5:3c:2e:b6:a9:
d6:fd:4d:88:bb:53:b7:56:5e:c1:55:64:17:0f:07:
69:97:b1:de:63:2b:44:98:43:4c:61:43:be:99:b9:
8c:0e:56:7b:31:99:05:2d:f1:90:a2:eb:e1:f2:96:
40:cc:59:c7:23:ac:65:00:ba:ed:25:c6:49:5c:da:
8a:c9:67:79:72:b5:f9:f4:79:fd:35:db:fd:3a:51:
09:89:df:cb:43:10:b6:61:dc:83:76:c9:cc:73:8f:
3f:fc:1e:19:f1:43:1e:2d:ca:0e:9c:c1:d3:39:d8:
7a:cd:ee:45:b3:77:88:92:65:f0:c1:37:da:5e:06:
0f:23:89:61:a3:87:55:79:bd:3f:54:e7:bc:6b:8e:
f3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2C:76:12:EF:65:46:3D:7F:C1:F9:DF:44:BE:5A:99:B8:59:5D:E9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Kix2Eu9lRj1_wfnfRL5ambhZXek.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.150.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2c:b4:d5:d1:e7:a8:db:96:0e:76:e8:18:8d:30:b1:a7:12:
a7:16:2e:f6:ad:35:b0:ae:c5:8a:5f:92:c4:c8:5e:00:6f:4d:
33:5a:eb:33:cc:dc:7b:7a:08:10:97:aa:4e:6f:fb:bb:b2:d5:
fd:27:b5:06:2d:c0:69:b3:76:9d:99:9f:e8:9b:a4:fe:ec:b4:
6c:e3:b2:05:a7:b8:fe:d9:e9:c4:35:c6:66:26:ba:8e:67:b0:
63:71:45:25:50:f1:78:71:96:5e:a5:99:17:c8:00:a6:5e:89:
5b:9b:66:a9:13:62:cb:2d:96:32:fb:aa:34:28:cd:47:62:5b:
64:bd:28:54:7e:76:0c:b9:fb:f1:58:98:40:8f:2b:5e:ee:2f:
33:c2:5b:74:6e:54:f5:70:0c:35:5e:a1:6e:b0:8a:45:ae:de:
0c:7a:88:d1:d4:32:6c:82:a9:03:57:03:ff:79:34:12:88:5b:
08:53:0d:9c:0c:fe:fd:f7:ec:52:2b:79:2a:a8:ec:d8:20:9f:
cb:06:46:24:a7:16:85:ec:18:85:4a:97:78:8f:80:27:6d:fb:
59:0e:c3:1f:d7:1f:25:53:85:1a:f7:d9:4f:da:02:06:27:a6:
30:34:2a:77:90:14:d1:b9:30:17:50:e4:40:c1:1f:24:41:28:
a3:83:99:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:16 2023 by rpki-client on console-ams.rpki-client.org