Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NmKFtjrlFhy5xqVE198t4UVGYP0.roa
File: NmKFtjrlFhy5xqVE198t4UVGYP0.roa (raw, json)
Hash identifier: lX/zWhIDatlkFCQIKw7QxkiRWI/hwjYU/mnu4BCbHAY=
Subject key identifier: 36:62:85:B6:3A:E5:16:1C:B9:C6:A5:44:D7:DF:2D:E1:45:46:60:FD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2356
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NmKFtjrlFhy5xqVE198t4UVGYP0.roa
Signing time: Fri 25 Nov 2022 04:43:27 +0000
ROA not before: Fri 25 Nov 2022 04:43:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9046 (0x2356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:43:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=366285B63AE5161CB9C6A544D7DF2DE1454660FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:2e:a1:af:0f:6f:45:7a:7b:03:13:02:76:
69:1b:7c:cc:d1:01:90:00:99:34:0a:3e:bd:72:3b:
cd:44:84:1b:df:c7:b5:a9:77:be:48:85:a2:c6:39:
c1:93:b0:09:61:76:44:d5:80:ba:04:6c:1b:04:03:
81:91:8b:5f:5c:f7:d4:8b:8e:c8:09:39:41:b7:7f:
08:93:c7:84:73:e4:4b:a8:a4:47:30:b4:06:7f:60:
68:3b:1e:5a:33:73:45:8f:d2:91:69:8c:40:35:c9:
5e:c0:ec:66:f1:9b:c5:79:77:38:dd:71:8f:33:7d:
ae:79:8f:70:97:aa:bb:d2:67:67:00:68:97:f1:ef:
01:c4:8d:e1:f3:95:78:58:fa:0c:e2:f9:aa:3a:93:
d4:77:a5:f3:1e:30:e9:f2:31:72:c2:c5:45:eb:a3:
fd:01:81:e8:3b:80:99:83:8b:a0:e1:bb:97:5c:29:
ec:23:92:29:ca:54:9a:1b:17:58:69:46:0f:bd:46:
d4:de:32:05:f2:1e:1e:dd:dc:2f:f5:cc:c4:7c:64:
1a:3c:83:4f:12:51:9c:78:48:d0:ea:a3:e4:60:52:
57:f8:63:9f:25:67:7d:c9:a5:db:6e:da:45:af:bc:
68:27:01:70:11:c8:f8:dc:cc:ef:17:11:93:7f:13:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:62:85:B6:3A:E5:16:1C:B9:C6:A5:44:D7:DF:2D:E1:45:46:60:FD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NmKFtjrlFhy5xqVE198t4UVGYP0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:37:3b:82:90:01:68:91:99:61:d9:b2:39:cd:72:6f:06:da:
93:8b:fe:d9:e4:b8:b5:4f:bc:8c:91:ca:44:3f:e4:df:ba:16:
22:2d:d1:dc:ac:7e:0e:e4:1f:a4:46:7b:3c:f6:86:df:69:7c:
7d:75:0a:e6:e6:88:c3:07:df:a6:12:7e:18:01:83:92:04:d2:
56:7a:2e:bd:40:68:8b:8b:02:b7:8f:c7:0e:b0:8b:4a:fd:da:
fd:55:0f:af:8e:c6:85:4c:b4:e0:79:8e:88:38:1d:8c:31:ad:
17:0e:75:7c:c6:5a:12:59:03:76:ec:b9:c3:25:8e:46:6d:7a:
1f:62:72:dd:af:0e:3c:3e:98:bf:de:ab:33:59:cd:df:b3:65:
b2:5f:0b:ce:3e:1b:5e:be:9c:79:ed:fb:66:6a:fe:82:b0:97:
4a:4f:f5:11:05:1f:41:59:01:21:89:af:ac:e7:fb:d1:29:f3:
cd:7e:90:b4:97:16:0f:72:eb:20:ba:ec:c3:f3:2c:83:26:79:
1f:36:8b:bb:23:16:45:e1:58:52:cc:4a:3c:ad:7b:4f:48:a4:
bc:27:cf:c6:83:ed:66:b6:1f:28:7a:5a:2d:e3:1d:fb:3e:fb:
57:ff:57:dc:13:1b:d3:32:a9:f9:67:04:aa:0b:be:37:56:a7:
dc:3a:51:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org