Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Kus8hXPZ2KZzxiKFSTVHPQwnaCg.roa
File: Kus8hXPZ2KZzxiKFSTVHPQwnaCg.roa (raw, json)
Hash identifier: +3xQdZkqYNcrYg6uRamlNtz6yQNF1cYuNFnLJf/fBGk=
Subject key identifier: 2A:EB:3C:85:73:D9:D8:A6:73:C6:22:85:49:35:47:3D:0C:27:68:28
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Kus8hXPZ2KZzxiKFSTVHPQwnaCg.roa
Signing time: Thu 15 Sep 2022 02:45:51 +0000
ROA not before: Thu 15 Sep 2022 02:45:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2AEB3C8573D9D8A673C622854935473D0C276828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:08:33:fb:b3:71:15:61:6d:b5:58:6c:dc:
f7:33:3b:7f:62:cb:6b:f9:04:61:5b:76:87:98:c8:
0c:5f:41:13:87:4a:2f:2c:02:48:89:6d:cf:49:a8:
71:74:65:38:d8:89:6f:77:f4:8f:56:39:45:bb:d5:
90:9b:c8:8e:18:e0:4c:bf:d3:d6:31:c9:a5:6a:cb:
6f:aa:a1:07:a6:8c:50:b3:07:86:ba:01:31:b1:c8:
f8:91:e7:24:31:19:18:aa:8e:7f:7b:a1:f1:05:f5:
35:ec:b5:5d:20:79:df:03:1a:6d:a3:bb:75:cc:0a:
40:dd:04:b0:a5:bf:2b:5b:48:8d:89:9d:3c:6c:ae:
a2:3c:fe:99:f6:8d:c4:8a:da:a0:aa:53:64:68:72:
1e:4e:13:2a:c2:60:e6:1e:37:79:66:ff:07:89:f6:
a9:79:1a:1a:91:3b:5b:42:d7:54:1f:b7:7a:de:df:
1a:48:ae:63:8b:d6:f9:95:07:59:b9:85:3c:bc:b3:
7b:7a:a8:1c:63:74:60:bb:57:84:13:5e:9b:e7:bf:
90:49:0e:f6:a7:88:1a:60:5c:7c:01:d6:cf:91:63:
e6:a2:3f:17:50:6e:5d:29:ea:a4:d1:94:ac:b7:16:
aa:cd:88:82:30:e8:0e:de:f8:bc:cb:ac:5b:8b:39:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EB:3C:85:73:D9:D8:A6:73:C6:22:85:49:35:47:3D:0C:27:68:28
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Kus8hXPZ2KZzxiKFSTVHPQwnaCg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.40.0/22
Signature Algorithm: sha256WithRSAEncryption
90:3c:b4:b2:a9:88:09:9d:e3:a8:fc:2d:d9:08:fd:68:e1:f6:
4b:4f:25:a6:89:bf:17:42:af:b5:5b:87:64:c6:21:97:5d:1f:
c7:ee:77:f8:29:12:bd:98:7a:d1:90:04:5a:3a:1b:6e:18:89:
be:a2:d2:50:48:19:1f:92:f5:9e:a0:79:12:b4:7f:86:3b:d7:
68:ec:f7:fb:49:e7:24:ca:60:4a:6a:f9:71:ac:f8:49:2e:7b:
ec:a3:4f:30:e8:d0:89:c8:10:33:76:8a:7d:75:c3:64:52:36:
4b:65:d8:b5:10:c0:0c:1c:92:33:c7:cc:32:f4:3b:71:1c:96:
31:e9:19:0c:38:23:46:3b:43:07:3e:80:c6:68:a9:57:c5:81:
5c:7d:1d:74:65:63:67:d8:f1:22:f5:24:9a:b2:2e:61:14:1c:
e1:f0:31:6c:bd:28:e1:dc:66:c7:4a:55:39:72:7f:16:e7:51:
e0:2f:b9:50:c7:35:2e:50:36:14:ad:70:1a:99:f8:3b:89:8e:
51:c6:ca:ec:aa:a7:25:16:e1:16:0a:d5:d9:6d:76:1b:58:66:
c7:84:85:12:3a:7a:69:0d:5a:62:47:98:6f:f2:49:89:f7:22:
10:79:0d:ac:a5:24:34:b9:a3:87:47:01:59:7d:89:fa:7b:63:
25:22:5a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org