Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lu9bUcgljnbaRx0dqAOERw_FJ2o.roa
File: Lu9bUcgljnbaRx0dqAOERw_FJ2o.roa (raw, json)
Hash identifier: B/0mqXEy6Xnf03h/s/IRH3qCp9fDYh2YYIMMGVq9bgw=
Subject key identifier: 2E:EF:5B:51:C8:25:8E:76:DA:47:1D:1D:A8:03:84:47:0F:C5:27:6A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 179F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lu9bUcgljnbaRx0dqAOERw_FJ2o.roa
Signing time: Sun 07 Feb 2021 12:20:48 +0000
ROA not before: Sun 07 Feb 2021 12:20:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6047 (0x179f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:20:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2EEF5B51C8258E76DA471D1DA80384470FC5276A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:04:47:5d:7b:f4:1c:d5:77:88:6a:e1:cf:c1:
0a:1a:26:35:f9:4b:42:d7:99:83:80:c3:36:a6:be:
6b:6e:67:09:12:32:a0:07:be:46:3e:f6:60:3c:8f:
4b:e6:77:35:f1:38:1b:b0:26:0f:8e:44:73:b3:7b:
ef:ab:fa:8b:64:50:1f:7d:ed:10:32:f0:39:4c:d7:
24:01:3b:58:96:60:0b:18:5a:30:c5:9c:ed:8b:e4:
c7:2c:f2:cd:50:f3:c9:ac:01:91:07:2c:20:8b:75:
f4:5c:66:ab:de:e8:d6:f3:47:3c:fd:b7:44:84:e6:
21:fb:9b:88:59:5c:4f:89:b2:5b:b6:06:ca:91:70:
53:4f:9f:b2:24:20:de:45:68:af:f4:4b:7b:60:9f:
32:76:d5:59:55:0d:4a:fd:11:d7:cb:43:ca:ee:77:
5d:3c:30:3f:23:64:f2:12:99:74:02:f3:3e:5c:fb:
9d:45:04:dc:02:58:60:47:3a:0c:b2:2e:7e:44:22:
1f:e6:78:78:77:dc:89:55:4e:47:1c:2b:c9:5c:5e:
d9:b4:04:20:aa:e8:ba:ff:32:be:33:cd:a7:54:3d:
4f:5e:97:ed:59:f2:1a:9a:1a:56:32:08:ba:b0:6a:
27:f5:59:7d:87:54:b8:a0:17:97:66:c2:31:95:e7:
ff:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EF:5B:51:C8:25:8E:76:DA:47:1D:1D:A8:03:84:47:0F:C5:27:6A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lu9bUcgljnbaRx0dqAOERw_FJ2o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:3e:eb:d2:2d:86:9f:9e:7c:c3:86:f3:df:ec:c1:72:c2:ba:
ab:48:c0:33:06:16:a1:9a:0f:8d:6c:8d:72:b4:fe:bb:ea:c8:
51:97:7e:2e:99:a1:df:95:61:5d:ac:20:a3:0d:d5:57:46:ee:
03:e9:99:79:53:6d:c0:61:20:54:c6:31:46:0c:87:51:c7:fb:
04:be:9c:2c:0b:87:f5:15:7e:65:4d:e0:d5:3f:81:84:36:80:
49:d3:e7:84:06:7a:1b:69:d5:9e:53:62:08:58:64:cc:35:a0:
e4:82:a9:5b:50:95:12:44:ab:85:63:2d:b6:19:f3:f7:cc:05:
8a:c7:41:20:0a:11:46:7c:38:a5:8c:87:e0:8c:30:b0:44:15:
dd:81:7b:02:97:51:84:13:56:d6:ac:20:fc:81:c7:b9:9e:81:
06:0b:78:71:58:30:98:24:e1:cd:ad:24:7a:d0:d1:89:b7:b6:
0b:67:11:71:aa:83:80:13:1a:6d:c3:c1:ed:36:0b:2c:b7:58:
75:de:74:b4:f8:af:49:62:26:42:2a:e1:5e:0f:a9:ad:a5:9f:
f9:ef:79:4d:52:87:f8:40:0a:af:49:c8:86:d6:80:41:44:bd:
5c:23:7e:af:41:ee:37:29:aa:14:60:85:c9:3e:89:cc:5e:00:
93:c8:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org