Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KrvK3vzN71xW-xIIcB1V4Gv1dYY.roa
File: KrvK3vzN71xW-xIIcB1V4Gv1dYY.roa (raw, json)
Hash identifier: q9RW3a6LRMVxMzzB1VXDMi/JZkE68XJN1NjPW2bnNGc=
Subject key identifier: 2A:BB:CA:DE:FC:CD:EF:5C:56:FB:12:08:70:1D:55:E0:6B:F5:75:86
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E1F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KrvK3vzN71xW-xIIcB1V4Gv1dYY.roa
Signing time: Tue 29 Sep 2020 09:55:21 +0000
ROA not before: Tue 29 Sep 2020 09:55:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3615 (0xe1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:21 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2ABBCADEFCCDEF5C56FB1208701D55E06BF57586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:14:48:56:57:75:53:2c:b9:36:29:7c:c0:5b:
8f:e4:61:ed:19:87:f7:99:51:a9:d6:62:be:77:ac:
dc:5e:d2:2b:68:47:3e:fa:9f:77:b2:4b:99:87:66:
86:96:b0:96:a7:92:17:73:9b:c1:7b:7e:13:7a:af:
2d:90:08:cd:36:bb:f1:7f:79:55:31:d0:da:98:d8:
0b:c1:82:29:56:69:5d:66:3b:ee:ef:c0:e5:fe:2e:
96:0e:55:b5:ea:c9:c3:39:d7:98:ee:a2:d4:8b:38:
31:58:0f:79:85:c9:1d:fe:af:2c:98:5b:84:ef:e4:
bc:55:0c:df:ad:0a:38:6c:9f:26:1c:e7:b1:88:b9:
0c:8b:bc:ff:2c:8e:df:fa:36:9b:2a:17:6d:c0:ce:
9e:ba:8c:45:a3:ad:49:dd:4c:ec:43:fe:63:15:09:
a7:0e:e8:1a:d7:6e:11:ea:e7:12:4e:04:12:0f:2f:
c0:1e:3b:54:76:5c:01:30:9f:27:9e:bf:da:41:bb:
89:ae:0c:bc:1f:43:27:c3:6f:76:57:cc:6e:ec:c6:
f7:0e:bd:3c:0c:17:0d:5e:f1:f2:36:c6:57:a0:ba:
7e:8b:28:2a:29:49:82:44:10:a3:dc:87:39:12:08:
4b:01:42:a8:36:80:95:d7:ba:85:05:44:b7:44:67:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BB:CA:DE:FC:CD:EF:5C:56:FB:12:08:70:1D:55:E0:6B:F5:75:86
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KrvK3vzN71xW-xIIcB1V4Gv1dYY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.47.0/24
Signature Algorithm: sha256WithRSAEncryption
46:35:20:db:8f:46:2d:63:7f:34:1d:b7:f2:47:c7:78:dd:f3:
fb:47:a9:01:4d:40:56:93:0d:63:70:a5:d7:b5:3e:be:6b:e4:
c8:70:22:e1:c3:07:38:25:7e:a7:9f:e5:b9:cc:38:a1:ff:ce:
82:24:16:cc:3e:47:64:72:42:76:09:8c:57:7d:cd:37:a9:92:
cc:20:dc:80:63:fb:c2:69:f4:3e:19:2e:00:8a:62:66:09:a6:
0c:46:8b:60:9e:11:0b:25:8a:1b:a6:f7:af:56:28:d1:4a:81:
7c:c3:53:b0:7c:30:e3:b3:f7:98:27:01:51:67:d8:26:e3:e9:
02:95:8c:15:51:40:5d:87:c5:0d:74:e3:99:02:f0:cf:2d:96:
b5:5c:16:17:e1:da:d4:18:fd:de:f9:f3:4c:3e:1d:85:6f:60:
45:35:b2:8e:39:05:d6:0c:08:2d:0c:85:84:ac:eb:a2:d7:bd:
c9:40:54:8b:00:3b:87:a6:a2:95:d8:2f:fa:82:cd:10:94:25:
b2:3f:55:1b:e7:24:e9:b5:94:e3:6e:6e:92:b7:ab:25:e7:59:
9c:e4:f2:43:82:b8:ea:82:67:04:8e:7e:87:21:47:fd:94:38:
b2:3e:15:d5:9b:5b:6a:af:19:48:c7:c7:4a:eb:ee:27:c8:18:
58:6d:b7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org