Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MHyXjMdAupjAi1DqKGK4vhk9www.roa
File: MHyXjMdAupjAi1DqKGK4vhk9www.roa (raw, json)
Hash identifier: 9tuqvpAoYZSQ03K/OZXW3+WKy4ZICNgjNu9fwePtd68=
Subject key identifier: 30:7C:97:8C:C7:40:BA:98:C0:8B:50:EA:28:62:B8:BE:19:3D:C3:0C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A86
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MHyXjMdAupjAi1DqKGK4vhk9www.roa
Signing time: Wed 29 Sep 2021 02:45:27 +0000
ROA not before: Wed 29 Sep 2021 02:45:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6790 (0x1a86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:27 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=307C978CC740BA98C08B50EA2862B8BE193DC30C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:5d:05:7f:e0:6d:a2:40:a0:d1:b2:c7:35:
59:05:2f:36:3e:46:0c:05:dd:24:a8:9b:11:01:59:
50:b1:e5:a6:11:75:c8:11:3a:b2:d1:37:f9:f0:97:
b2:9d:9b:91:c9:bf:c2:1d:5d:be:1d:15:41:dd:81:
1d:43:40:81:2a:19:c0:a5:c4:9a:ad:12:07:63:9b:
39:e8:fa:39:05:7b:cf:62:f3:49:96:93:8a:61:ff:
d1:49:29:bb:57:15:8f:e3:34:96:5e:6d:c3:c3:51:
c6:2a:3d:56:d6:2c:b0:87:85:a0:67:ae:bd:c9:a1:
5a:1f:14:a8:c3:31:d4:15:26:8d:a1:12:5a:6a:d4:
a0:18:8c:93:df:99:d8:2d:33:a5:9e:51:dd:50:8d:
af:17:dd:53:be:5b:a7:2f:6f:24:fa:10:a1:be:e2:
1f:31:23:6a:02:ea:31:41:72:b4:11:57:99:c1:11:
e7:93:ec:98:d0:85:6a:e2:f4:33:3b:94:a5:e0:2d:
e3:5f:3c:d8:cd:b9:bf:a0:3a:62:78:b3:b8:55:fc:
6b:4d:be:9b:77:d4:34:7e:ff:08:97:54:23:0a:da:
2a:91:13:28:c6:37:a8:7b:d2:ba:fb:c6:4e:b3:bb:
ed:7b:c9:77:69:dd:bd:09:b7:42:42:83:9c:4a:c2:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7C:97:8C:C7:40:BA:98:C0:8B:50:EA:28:62:B8:BE:19:3D:C3:0C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MHyXjMdAupjAi1DqKGK4vhk9www.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.98.0/24
Signature Algorithm: sha256WithRSAEncryption
67:54:a1:49:63:b6:94:6f:6d:55:c6:32:70:76:f6:1e:cb:cb:
ca:89:cb:2f:8d:86:e9:11:38:1f:01:e1:cf:ed:e8:39:0a:69:
3f:ac:49:78:23:4e:75:80:44:4f:67:d2:15:09:ef:a8:56:c4:
57:8f:1c:1f:06:19:24:4b:54:3a:a1:a6:54:28:4c:a8:58:77:
b0:78:41:ab:e1:dd:dc:1c:6d:e1:2f:46:22:80:6f:2e:b6:0e:
ab:5f:38:b2:7c:67:ce:3a:38:2c:03:77:ec:8d:c6:92:2a:5d:
b1:4d:ed:e2:f2:62:39:b4:84:99:69:2e:02:70:be:cc:b2:9b:
d9:b0:57:49:62:2e:af:16:42:10:f7:fa:57:23:48:2f:f5:94:
5c:e6:1a:f7:47:28:ae:95:12:25:96:f3:25:94:48:e9:27:1a:
2d:d3:d7:ac:cb:50:61:30:95:ae:15:e5:6b:08:ca:b3:85:80:
1a:bf:5c:1b:eb:4a:74:64:bf:b2:00:c0:2c:67:63:19:54:ba:
58:99:3d:8a:d1:49:33:49:ae:e7:a6:6b:db:73:1b:af:10:41:
f5:d5:7d:a3:d0:bb:f0:fc:0c:35:c7:1e:18:2b:3c:a9:2a:a3:
b4:39:4d:78:5e:25:6f:2f:29:e2:41:f4:e7:e5:cd:d1:8c:8f:
7f:d5:69:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org