Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MbjSa_mN1ol8by2uwRzqMj6GODQ.roa
File: MbjSa_mN1ol8by2uwRzqMj6GODQ.roa (raw, json)
Hash identifier: s0GYIkYZ/ArkAjmf08cFQayQLQpTJfyvpVg10qS/jE0=
Subject key identifier: 31:B8:D2:6B:F9:8D:D6:89:7C:6F:2D:AE:C1:1C:EA:32:3E:86:38:34
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1813
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MbjSa_mN1ol8by2uwRzqMj6GODQ.roa
Signing time: Sun 07 Feb 2021 12:26:03 +0000
ROA not before: Sun 07 Feb 2021 12:26:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6163 (0x1813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:26:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=31B8D26BF98DD6897C6F2DAEC11CEA323E863834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:cf:f8:9d:5e:ba:0e:a7:fe:33:31:75:44:
4d:59:1c:e5:45:27:4d:ba:a5:ce:62:69:5a:bf:75:
de:e7:3a:12:33:b3:c2:dc:a3:8e:6f:2f:95:d5:e3:
6c:28:d5:a4:7d:12:43:06:17:13:c7:5d:8d:c8:52:
f4:65:9b:45:d8:23:eb:06:78:d8:e3:35:f2:a6:0a:
fc:53:67:2f:0a:ad:bc:61:d3:6c:c0:f3:35:be:18:
d6:0f:29:0b:2c:e9:fe:be:3f:cd:b8:62:06:2c:7c:
55:05:06:0f:94:26:e2:15:fa:9f:4a:77:4f:88:b8:
ec:dc:66:a3:e9:c4:d3:c7:c7:7e:3c:ef:61:22:c6:
4c:e4:04:ec:7f:a3:15:23:2e:d8:86:bd:c1:00:ab:
43:7d:e6:97:66:2f:6e:7e:fe:59:45:a7:0e:eb:48:
8b:ca:89:98:a6:22:82:31:07:21:f7:7a:c2:8d:ad:
5a:1e:38:45:72:ac:18:2a:dc:1d:9b:a2:8d:81:59:
2b:c8:42:9b:e2:59:87:c9:8c:62:09:a5:3e:56:d6:
31:06:7e:52:49:f2:fe:62:df:20:dd:1b:d7:f4:26:
8f:57:11:24:d0:29:ae:64:5c:48:ab:fb:dc:2e:de:
27:32:9f:32:43:6f:24:3d:7f:f8:4c:7c:4d:c1:03:
4c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B8:D2:6B:F9:8D:D6:89:7C:6F:2D:AE:C1:1C:EA:32:3E:86:38:34
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MbjSa_mN1ol8by2uwRzqMj6GODQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.156.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:83:3f:99:0e:65:07:38:01:14:f3:f0:cd:2e:87:8d:6b:8f:
be:3d:9c:d7:e6:51:79:bd:6e:15:55:76:b2:6b:75:37:68:69:
64:19:b7:d4:42:2b:95:a7:98:0d:e9:f0:9d:7a:6a:cd:83:ad:
13:02:0c:24:d6:24:56:10:26:d6:98:70:cc:28:75:bc:ab:35:
1d:89:4a:b0:5a:5a:b8:e2:8e:d5:a8:89:90:79:05:98:db:6e:
bc:8c:df:9e:a1:91:4d:47:91:e9:a8:89:e1:53:7b:28:ca:f1:
1c:7a:63:b1:9d:a6:bb:72:f9:1a:ec:30:a0:65:6d:ac:51:10:
6b:9b:74:8b:4b:da:cf:de:c7:f5:84:4c:4e:2c:8d:8b:92:e5:
de:53:f7:a1:83:1a:08:c6:9b:fc:08:3b:bf:65:65:53:6a:6c:
27:06:1c:01:df:70:2d:00:2b:22:87:dd:44:9a:56:7f:9b:2b:
d9:05:db:94:bc:5e:64:64:bc:70:41:a2:f0:e9:02:f9:3f:17:
06:5f:e7:23:03:c9:54:5e:ae:d6:3d:60:a5:83:86:82:9c:cf:
6c:db:30:97:bf:01:77:6e:8e:fc:9c:44:d8:6c:d6:b6:be:3f:
e4:cd:6d:b9:73:23:53:51:f1:84:93:e7:21:bb:ad:bb:f4:b3:
e2:cd:86:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org