Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M3-G6jGpNgerTVp-WCfSjq7MwkY.roa
File: M3-G6jGpNgerTVp-WCfSjq7MwkY.roa (raw, json)
Hash identifier: YO05g04EFKMiHSGYj+D3mU3WpzQCOE855TQcjZ7QC7A=
Subject key identifier: 33:7F:86:EA:31:A9:36:07:AB:4D:5A:7E:58:27:D2:8E:AE:CC:C2:46
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 13C1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M3-G6jGpNgerTVp-WCfSjq7MwkY.roa
Signing time: Sun 07 Feb 2021 11:56:10 +0000
ROA not before: Sun 07 Feb 2021 11:56:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5057 (0x13c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:56:10 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=337F86EA31A93607AB4D5A7E5827D28EAECCC246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:03:cb:6b:c6:5a:73:ce:7f:29:78:aa:e5:
c1:72:68:ac:bf:35:1e:fd:59:5c:2a:82:0f:4c:a8:
70:eb:c4:05:1d:aa:62:be:e3:26:9c:48:e2:80:db:
3c:95:12:71:56:e7:4e:42:d0:36:01:38:6a:3d:ea:
1b:20:bd:0c:1f:f5:7e:c0:a0:b8:b7:77:ca:31:f6:
06:cd:ed:20:a9:4d:1b:24:da:1f:11:cb:27:dd:73:
c9:32:47:51:82:36:aa:fb:90:67:16:73:e3:1b:0c:
92:e7:a7:5b:d9:0f:b7:b8:08:33:0c:88:64:be:f4:
66:69:c8:85:5b:16:79:3b:87:9d:0b:37:b7:c0:5b:
bb:4b:5b:a2:d5:54:fa:0e:ba:84:23:dc:10:2f:b0:
9e:d3:41:f8:f0:9b:e0:36:1a:2d:6c:4a:a5:95:7b:
86:82:25:7b:62:7d:15:0d:a5:05:31:9a:6a:78:41:
3e:82:89:6d:b1:10:2f:10:52:cb:2b:c6:e4:80:4e:
92:3c:6e:77:02:2b:45:c2:42:67:43:3a:ee:45:20:
50:b2:76:f5:89:94:4b:57:99:ea:e0:f7:be:34:0d:
0c:35:1a:53:49:30:75:27:33:10:a2:fd:70:17:10:
0f:0a:1f:90:6b:81:7b:6f:e5:2d:7e:cd:5d:16:d8:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7F:86:EA:31:A9:36:07:AB:4D:5A:7E:58:27:D2:8E:AE:CC:C2:46
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M3-G6jGpNgerTVp-WCfSjq7MwkY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.102.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a7:60:b6:19:96:45:7a:a9:c2:86:bd:9e:77:9f:9f:83:26:
78:61:c0:a9:56:ff:df:0d:0d:d9:54:ce:df:55:00:52:91:74:
5f:3d:f5:6e:fa:b1:76:e1:9d:76:51:9e:01:c9:89:23:e9:55:
b2:78:6a:9c:c0:78:3a:54:08:c4:46:95:2d:a7:14:85:ae:f4:
91:9a:cc:50:94:41:3e:b5:4e:41:a0:ce:16:d6:df:aa:06:38:
0f:76:ef:30:c4:a6:6b:76:56:09:d3:0f:f3:23:32:ed:85:ac:
23:57:b9:cf:36:38:e6:f6:c0:41:b6:a5:43:07:58:7b:d3:05:
de:eb:b4:78:46:98:bb:b5:52:48:36:03:6f:0c:8d:b1:ff:a7:
f4:59:1f:61:aa:bb:ff:a2:4a:11:d5:da:0b:08:7f:5d:fd:e3:
e9:b6:c6:4a:ca:65:11:7a:97:0f:08:db:ad:63:6f:93:e3:84:
bf:b5:55:62:81:d2:f1:27:bf:53:f6:65:1e:ee:15:2f:eb:49:
19:9d:b9:f4:19:6f:bb:90:1c:0f:ae:f9:24:6e:91:b3:8a:56:
90:0a:96:39:d4:7e:8c:05:e6:08:d7:4a:90:9f:e2:3e:85:37:
1f:4a:c7:98:60:e9:f6:86:83:d1:05:9b:e7:e9:48:40:ad:1a:
b2:82:5e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org