Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OOmSnmIAOzdzmDdLEfhiM0q5ZLI.roa
File: OOmSnmIAOzdzmDdLEfhiM0q5ZLI.roa (raw, json)
Hash identifier: MSF/TR5EfIjDdTlBypEXJlgqhq1JNjNJ+fL1Za+Oybo=
Subject key identifier: 38:E9:92:9E:62:00:3B:37:73:98:37:4B:11:F8:62:33:4A:B9:64:B2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C49
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OOmSnmIAOzdzmDdLEfhiM0q5ZLI.roa
Signing time: Wed 29 Sep 2021 02:47:34 +0000
ROA not before: Wed 29 Sep 2021 02:47:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7241 (0x1c49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:34 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=38E9929E62003B377398374B11F862334AB964B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:58:0b:09:b9:16:8d:09:3a:06:92:2d:1f:
41:a2:97:38:5c:bd:57:fa:3b:cd:12:d7:b7:70:2a:
62:97:eb:f1:05:47:35:12:41:2b:08:67:2c:18:b4:
70:0a:92:6b:1e:b2:e3:c3:f0:50:4e:5d:2b:19:ba:
12:26:e9:8b:85:68:ce:2c:9f:f7:48:3d:5c:c4:fe:
ed:cb:fc:49:c3:67:b0:94:e6:19:4d:62:ee:95:75:
94:e8:42:93:e7:a1:90:b0:72:e7:fe:03:26:e7:64:
76:9d:ec:6f:fa:8b:9f:ff:5a:ae:27:5c:fe:7f:e9:
31:ab:05:c0:c0:d6:50:b9:b2:42:c9:c0:16:04:84:
7f:64:76:40:9e:a1:75:21:b7:9c:59:23:ef:a0:8c:
10:e4:83:b0:74:55:61:00:58:e4:b9:94:0a:92:83:
ad:65:7c:79:34:1f:7b:24:f3:2d:a2:cd:af:9b:62:
17:9a:fa:d8:35:b3:74:18:fd:28:c2:17:18:3d:29:
2a:37:b7:b8:e6:61:9b:72:54:b6:70:33:5a:22:92:
49:09:1a:4b:c0:d0:2a:ed:af:98:41:54:1a:88:53:
28:d7:a2:cb:54:7d:ad:f4:0b:15:6b:b3:85:a2:02:
d4:21:8e:b0:cd:b7:9b:20:da:c8:75:9f:70:b6:c4:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E9:92:9E:62:00:3B:37:73:98:37:4B:11:F8:62:33:4A:B9:64:B2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OOmSnmIAOzdzmDdLEfhiM0q5ZLI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.12.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:51:99:1e:e9:7b:36:1d:cb:5c:ea:32:21:1f:dd:1e:76:76:
82:a0:84:d1:34:46:d3:97:d9:09:7b:fc:0e:1d:ca:1e:3f:2a:
66:b0:79:0a:5d:30:c3:a5:b9:94:67:ac:96:dc:95:9e:ab:32:
c7:da:e5:20:91:dd:61:05:47:cb:e7:de:41:68:4b:d4:f9:01:
1a:7b:c6:fe:ac:6f:56:2b:e6:d1:ae:08:4e:b6:f3:27:df:0e:
a6:6e:81:df:5f:5a:2c:ca:ab:32:90:6c:ce:af:89:70:93:e7:
65:5c:b3:8d:39:47:0f:b0:76:bc:9b:0d:1c:7c:e6:46:b0:dd:
57:cc:6b:36:83:d8:ed:be:64:a9:69:c7:f8:d8:1f:6a:d8:45:
c3:6c:28:52:b8:ed:80:4c:2c:23:c1:2c:de:96:2d:09:bc:c8:
fd:6f:12:cf:03:4a:9a:5f:7e:40:55:39:a4:a5:d3:dd:3e:08:
e7:d5:80:9f:32:8c:c9:dc:46:7d:a0:b7:f1:ff:e8:2d:85:1c:
82:cd:bf:5a:3c:3b:6e:b4:6f:f2:38:20:e0:7f:a0:32:35:79:
cd:64:27:a0:1e:de:2e:ed:28:17:2a:ea:26:5f:85:d9:28:18:
3e:18:14:05:d5:86:4d:58:6b:0d:ab:3e:34:3a:09:99:18:75:
7c:c6:b5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org