Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OTz0VS4-tnSTYnM9Ih8Nj0QvaPM.roa
File: OTz0VS4-tnSTYnM9Ih8Nj0QvaPM.roa (raw, json)
Hash identifier: LWOc75GCl+YLmHLEBYlg6QUDjLtcJuRGMj76tH1ABt8=
Subject key identifier: 39:3C:F4:55:2E:3E:B6:74:93:62:73:3D:22:1F:0D:8F:44:2F:68:F3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OTz0VS4-tnSTYnM9Ih8Nj0QvaPM.roa
Signing time: Wed 29 Sep 2021 02:48:00 +0000
ROA not before: Wed 29 Sep 2021 02:48:00 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7330 (0x1ca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:00 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=393CF4552E3EB6749362733D221F0D8F442F68F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:eb:50:bc:e7:7b:ba:b7:18:86:11:cb:ce:
a8:fd:cf:89:f2:93:0b:68:e4:8a:d4:8d:b9:47:c9:
64:e2:a3:bd:8a:8d:62:24:26:08:da:40:48:45:73:
3f:fc:b3:02:c2:fb:27:da:2d:6c:bc:8f:4a:ed:17:
b3:c4:b1:a8:5c:39:0e:69:f1:19:8c:45:d5:27:8c:
62:16:fa:a3:e6:f8:da:22:ff:dd:62:27:ad:c8:20:
e4:59:83:d8:67:cd:44:ac:e0:39:67:73:c1:ac:1f:
2f:af:f8:9d:02:f2:e3:ba:93:70:6e:2c:0b:cf:a1:
07:9c:14:e1:24:5c:16:03:65:ff:48:e2:f6:c2:37:
76:f4:30:c1:bb:7c:5e:92:4b:1f:ba:17:da:d4:e6:
17:2f:e1:a0:ba:ea:6f:8e:11:40:a1:d5:1f:f0:2f:
be:8b:f9:23:3b:58:8e:16:54:09:35:f0:aa:97:60:
e3:bf:a1:4d:dc:a1:32:8c:27:11:08:5f:5e:e6:f5:
95:4b:c7:58:f2:33:63:f0:9b:9f:d3:b9:fb:aa:43:
49:55:cc:88:36:fc:62:84:5d:11:bc:a5:3e:e1:9d:
b6:d0:60:30:12:7e:94:e8:85:e6:7f:0d:35:b0:f0:
8a:28:ae:24:ae:33:5f:df:01:19:86:a8:86:b0:5d:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3C:F4:55:2E:3E:B6:74:93:62:73:3D:22:1F:0D:8F:44:2F:68:F3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OTz0VS4-tnSTYnM9Ih8Nj0QvaPM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.136.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:9a:8f:f8:cb:a4:ce:0b:5e:55:ee:74:9a:db:8f:fb:c8:2a:
3e:43:17:e3:25:32:dc:9e:d0:0b:fe:02:67:5c:6e:97:f3:5c:
fa:2d:dd:d4:64:0b:21:e3:7a:0d:c8:0f:6f:f5:dc:40:14:41:
a9:34:e7:b0:af:85:5e:2a:b5:53:1a:74:ef:48:7d:62:c9:67:
07:c8:29:47:ae:46:91:69:c4:58:14:8a:3d:6a:c8:33:25:c9:
e1:c2:63:aa:b9:ab:c4:c4:88:b6:c6:72:15:61:a1:4d:f6:13:
87:3c:f3:f4:2f:d1:6a:d6:45:2c:ff:10:e4:94:0a:26:15:d3:
cc:9e:7e:90:a8:bb:2c:e0:46:d2:47:d5:26:70:22:cb:89:1f:
c7:c3:88:92:ed:81:e2:ed:17:cf:ce:ee:f9:12:eb:b5:a5:95:
77:17:d5:f0:a7:be:48:f9:38:17:ed:da:49:a5:16:02:cc:12:
b8:e0:6c:47:ce:27:bb:87:c2:53:e4:12:a0:b5:6b:ad:8d:89:
ee:ec:76:f5:4c:33:87:45:77:61:05:8d:dd:47:fa:b9:13:18:
f0:cf:d9:af:be:87:63:dc:0f:27:ac:d3:a7:35:1d:bd:66:25:
a9:df:51:a8:9a:47:4f:e3:d1:ff:f0:aa:62:7c:d7:26:e4:b0:
38:9b:21:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:30 2024 by rpki-client on console-ams.rpki-client.org