Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NbgeBK_kNsyDud87gW3WG8_Xmnw.roa
File: NbgeBK_kNsyDud87gW3WG8_Xmnw.roa (raw, json)
Hash identifier: NUln1XK4lY0UzlFsh3YiJ2btnWrdbziDFhiguK/yO1Q=
Subject key identifier: 35:B8:1E:04:AF:E4:36:CC:83:B9:DF:3B:81:6D:D6:1B:CF:D7:9A:7C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 230E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NbgeBK_kNsyDud87gW3WG8_Xmnw.roa
Signing time: Fri 25 Nov 2022 04:41:59 +0000
ROA not before: Fri 25 Nov 2022 04:41:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.144.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8974 (0x230e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=35B81E04AFE436CC83B9DF3B816DD61BCFD79A7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:43:6c:d9:94:e1:e5:1c:b6:b1:d1:dd:de:
af:5f:a0:f9:16:2f:a3:db:d6:ca:fc:a6:40:75:62:
c6:c0:2c:6f:bb:c2:aa:e2:8b:1f:e4:72:82:ae:3f:
20:34:d8:13:00:d8:bc:8c:b9:16:ef:18:80:d5:44:
f6:93:37:62:aa:84:b1:93:4d:63:eb:ed:61:39:98:
67:df:76:2d:97:19:4d:25:c9:31:67:22:e3:76:7c:
79:41:f0:ba:d7:62:ef:03:69:32:0e:d3:d5:90:73:
eb:80:fc:ab:1b:55:8d:83:e9:00:23:5e:1f:b1:d8:
a7:c6:32:a5:ff:4b:40:a0:ba:13:b3:49:7f:e2:ae:
44:30:d1:d7:51:d1:46:ea:a1:e7:13:bc:3e:d5:46:
86:5f:d0:d5:89:73:32:d7:be:88:60:7a:53:f4:50:
75:3c:0a:83:d2:f7:86:bf:98:ce:b2:2f:8a:c7:08:
f1:ff:05:9e:c4:ef:bc:37:13:d4:23:44:9a:12:f5:
15:16:61:ab:ff:6e:4e:57:3b:b9:0c:c2:46:bf:58:
19:63:d3:54:76:da:5b:8a:36:cc:dc:f6:c1:8c:ee:
1f:2b:d3:ad:00:87:e2:3d:2f:43:6f:de:63:ba:4d:
e6:f0:e2:ac:de:b0:a3:54:2b:29:33:69:56:27:69:
ba:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B8:1E:04:AF:E4:36:CC:83:B9:DF:3B:81:6D:D6:1B:CF:D7:9A:7C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NbgeBK_kNsyDud87gW3WG8_Xmnw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.144.0/23
Signature Algorithm: sha256WithRSAEncryption
54:d3:27:7b:b8:bb:53:04:73:04:b7:71:15:0e:84:8d:17:f0:
cb:cf:4a:1a:90:60:cc:c9:29:63:99:54:6c:4c:4f:31:23:c6:
9b:41:01:40:b6:07:4e:5b:81:5d:51:d2:d6:26:61:4e:63:1d:
8f:66:53:5c:dc:70:bd:e3:d9:3f:c1:6d:55:44:a3:90:7e:1c:
7f:6a:aa:ed:73:5e:3c:02:86:4a:85:1b:83:40:ff:75:ad:03:
aa:a2:15:30:60:8c:29:df:a7:10:6d:28:d8:80:23:88:59:1b:
da:aa:78:1a:21:ef:c6:b3:b8:f4:92:bb:2b:07:d6:9b:65:58:
e9:fc:80:f2:ce:88:52:cc:a9:2c:c5:9b:11:5b:0d:dd:97:09:
5a:6c:93:4c:1a:ad:93:c9:3e:52:b6:79:5d:37:51:f6:ce:36:
50:9b:d7:59:f4:97:6a:ba:05:0f:7a:4f:bf:82:9d:98:95:e6:
c4:99:c8:42:41:ff:42:55:be:67:67:1e:5a:21:f7:7a:b0:d3:
5a:08:a7:e8:87:5d:01:f6:57:1f:85:19:32:2e:6b:86:fd:31:
46:61:50:64:69:0f:ec:ba:a1:3f:b8:e3:7a:c9:93:11:a7:d7:
64:85:fb:63:95:de:a3:92:fe:18:7d:db:8b:92:16:c2:22:3f:
df:7d:c2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org