Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MtTnnT-3qXsR7uTHNjf_bIbuEB0.roa
File: MtTnnT-3qXsR7uTHNjf_bIbuEB0.roa (raw, json)
Hash identifier: oubSpR0MYuXfdILEc9T4M1x5A57IeVa8VB3LCCT9oS4=
Subject key identifier: 32:D4:E7:9D:3F:B7:A9:7B:11:EE:E4:C7:36:37:FF:6C:86:EE:10:1D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MtTnnT-3qXsR7uTHNjf_bIbuEB0.roa
Signing time: Thu 15 Sep 2022 02:45:56 +0000
ROA not before: Thu 15 Sep 2022 02:45:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=32D4E79D3FB7A97B11EEE4C73637FF6C86EE101D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5d:e0:14:71:09:6a:86:4c:95:f0:56:03:13:
fe:da:02:e2:eb:d3:8c:19:cf:e3:b3:cd:b4:d6:fa:
24:65:02:2d:31:34:46:45:3f:db:3e:d5:ba:d0:2d:
f6:03:27:30:15:4b:e2:14:a7:9e:35:26:00:06:b8:
44:7e:88:3f:a9:9c:31:fb:db:36:06:92:66:18:00:
22:26:40:d2:65:e4:70:d6:9b:8a:1f:56:6d:31:c0:
d8:b0:56:4b:fb:9c:90:67:ee:c4:b7:30:9a:06:18:
42:0f:01:48:90:27:f8:da:a7:16:55:3d:7e:70:0e:
13:5b:69:33:4b:95:42:b8:b4:5b:39:4b:a6:9c:2d:
dd:4f:8c:ef:7c:23:71:79:9f:ae:e6:5b:47:c3:2f:
30:d8:de:42:15:8f:9b:7b:b1:74:5a:dc:c3:9a:93:
85:89:58:69:ec:c8:6d:08:12:86:a8:48:bf:c0:ea:
ca:17:28:ca:e5:a2:27:9d:09:f4:cc:5d:55:78:4a:
e7:83:e0:cd:0b:48:28:ce:76:ee:1f:4a:9f:13:db:
3e:2d:67:76:58:d9:9c:e6:28:71:f5:5e:ec:63:1f:
7b:df:a0:9d:d8:ab:6f:a2:85:42:db:1f:95:55:41:
53:a1:de:67:4b:5b:ee:b3:2c:b7:5f:b6:2f:52:41:
6d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D4:E7:9D:3F:B7:A9:7B:11:EE:E4:C7:36:37:FF:6C:86:EE:10:1D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MtTnnT-3qXsR7uTHNjf_bIbuEB0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.47.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f6:57:e5:96:f0:ac:52:9e:0e:5c:8a:60:ef:47:0a:64:a8:
5d:09:14:67:b0:19:f6:5a:a0:84:59:16:e3:dc:8b:5c:65:33:
13:7b:b5:21:35:44:7b:c4:0d:5a:89:cd:6c:c9:ea:9f:d4:5e:
7e:08:c5:08:e8:c0:2a:c1:97:72:7b:8c:4b:c7:9a:9b:03:96:
cd:16:7c:0f:31:db:3a:1d:83:a3:25:1b:fe:6c:1c:60:2d:0a:
f5:e9:23:ea:4c:96:1e:bd:ff:35:b9:fa:ec:bb:8d:6b:ea:0a:
3c:d9:f5:a6:04:b5:82:1d:2b:fe:83:48:3b:35:92:9f:d6:7c:
58:dc:20:1f:a4:d4:f0:70:a0:10:a1:bb:69:c0:04:fc:55:6b:
77:48:53:67:77:3e:42:e5:6c:48:d5:cc:fd:92:52:cd:11:f8:
68:15:ea:62:bc:8b:5a:17:fc:c3:de:e3:c9:62:13:0c:85:57:
ff:39:60:cf:f7:a0:4a:e8:42:43:4d:c6:1d:59:46:a9:88:d1:
f6:bc:e0:61:59:8d:d1:1b:e6:b0:26:58:b0:1b:f7:4c:4b:b1:
0f:ed:cf:ba:78:72:36:48:4d:c7:74:3a:37:46:74:33:50:a6:
a2:7f:e5:a6:fc:30:57:97:a7:b1:4b:25:da:d0:cd:ce:d0:03:
3b:bb:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org