Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LbEjgtbHM1fEBkneSI-yszInmiI.roa
File: LbEjgtbHM1fEBkneSI-yszInmiI.roa (raw, json)
Hash identifier: 3BbtLFqXA5PXqbLYae6LAIhYah5YGF+ONsghwWMB4M4=
Subject key identifier: 2D:B1:23:82:D6:C7:33:57:C4:06:49:DE:48:8F:B2:B3:32:27:9A:22
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DEE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LbEjgtbHM1fEBkneSI-yszInmiI.roa
Signing time: Tue 29 Sep 2020 09:55:09 +0000
ROA not before: Tue 29 Sep 2020 09:55:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3566 (0xdee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:09 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2DB12382D6C73357C40649DE488FB2B332279A22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5a:61:2f:a2:00:1c:89:17:40:00:7e:06:20:
d7:30:ec:cd:2e:28:48:8f:a4:7b:27:90:39:d7:ab:
26:23:b4:74:fd:7b:26:00:47:79:87:d4:a3:c1:13:
77:23:9b:4b:27:67:52:1d:26:44:d9:52:ba:fb:0d:
5f:eb:ff:d5:3a:38:ac:c0:0d:a4:f0:20:02:d8:77:
33:92:11:b6:96:6f:75:75:47:1a:eb:09:ab:cb:9b:
34:58:1b:ec:90:00:b5:d1:8f:e8:d3:0b:26:3d:8b:
23:e6:68:8e:18:cc:83:40:3b:09:26:e1:6d:00:08:
20:01:45:b8:0b:ca:1e:d7:a7:08:3b:0b:17:26:0c:
d5:6c:11:ce:7f:0f:bc:7e:3f:bc:ee:e5:97:af:45:
c4:39:bc:75:83:d6:c4:d1:8f:bd:84:be:6e:7d:d4:
b5:6d:47:6a:75:b4:e3:6d:c7:06:b9:5c:93:3a:8a:
9a:7f:90:41:6c:ea:76:72:4e:41:4d:6c:2c:13:01:
0c:47:96:99:d9:b0:ca:40:12:c1:91:1a:08:4c:89:
ec:4f:73:7a:95:96:2d:b7:19:25:df:e2:7d:f6:d3:
47:03:99:d5:4a:d2:e3:f0:6c:b8:81:2b:8d:32:f2:
97:f1:c5:a8:48:b2:17:d3:ec:a8:f2:e5:b2:d9:44:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B1:23:82:D6:C7:33:57:C4:06:49:DE:48:8F:B2:B3:32:27:9A:22
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LbEjgtbHM1fEBkneSI-yszInmiI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.244.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:70:cc:bb:c0:ff:f4:12:e8:d1:09:b0:fa:ef:4c:ee:1c:ea:
cb:74:8a:fb:ac:f1:18:90:df:35:5c:c6:25:a2:f1:da:32:4c:
dd:dd:23:90:ec:40:6c:83:72:df:a3:83:ba:b8:fa:f6:fb:99:
8b:bd:18:5b:85:64:d5:c1:92:cb:7f:79:1b:58:43:39:aa:99:
58:af:73:b9:89:a2:08:c9:f8:96:7f:d0:aa:cd:9a:f3:0b:d1:
fe:fe:ed:ef:fc:c7:29:85:29:b1:8a:01:9a:93:72:2b:4a:b2:
4e:0e:8e:85:20:e7:3f:80:91:a2:10:f3:46:e4:1e:36:67:15:
27:6c:5f:5f:1b:7c:ed:a5:0d:b5:b9:8b:38:f0:ab:2e:2d:b0:
71:ef:a0:68:f9:4a:47:36:55:8b:19:60:49:70:18:ae:f7:7f:
b6:ac:d7:94:8a:06:1c:3b:ef:6b:81:79:71:72:be:e1:31:69:
b5:57:0f:21:2a:e3:cd:d7:d2:d5:bf:0c:26:c0:ed:d0:0e:ed:
bb:8b:21:42:87:87:17:98:e0:4b:ee:86:71:52:41:76:b5:2b:
bb:36:05:ce:8e:23:dd:ec:b4:dc:cb:e0:19:1a:c1:fd:52:d5:
9a:67:51:1a:44:67:73:2d:74:bf:8e:56:42:1c:46:36:44:74:
51:00:4b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org