Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OZY7Jw98guNu_TQa8UCMyt4W448.roa
File: OZY7Jw98guNu_TQa8UCMyt4W448.roa (raw, json)
Hash identifier: 2ml1T+GomuRe/xu6ZSi7ge2nX1M2hrw0HwwJww4BhSc=
Subject key identifier: 39:96:3B:27:0F:7C:82:E3:6E:FD:34:1A:F1:40:8C:CA:DE:16:E3:8F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17E5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OZY7Jw98guNu_TQa8UCMyt4W448.roa
Signing time: Sun 07 Feb 2021 12:24:30 +0000
ROA not before: Sun 07 Feb 2021 12:24:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6117 (0x17e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:24:30 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=39963B270F7C82E36EFD341AF1408CCADE16E38F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:e2:c4:38:3a:59:e1:90:8e:6b:47:63:62:
3a:57:fd:48:59:95:d0:1b:95:7f:33:b1:8a:a4:e8:
a6:f6:c6:69:c1:83:7d:69:f2:02:39:73:eb:d0:03:
34:54:41:c7:26:87:3e:90:d8:88:94:ce:c9:bb:18:
24:33:75:b9:fe:f6:ad:d1:5d:67:d5:3f:79:4a:d8:
87:a2:4c:b5:c5:c9:11:30:07:7a:fa:1a:06:0c:11:
1b:5d:2d:a2:ab:b3:1f:fd:19:cf:9f:0b:74:de:29:
ce:cd:b9:bf:09:2a:4f:a5:88:3e:89:89:81:a8:05:
1d:7d:ba:41:37:34:6f:1f:26:06:47:38:6f:fa:09:
86:b4:d9:74:17:04:51:79:e0:86:f9:93:ef:9f:60:
14:64:ca:04:dc:6c:12:28:e6:cb:9b:13:37:94:70:
b4:01:c1:d7:97:66:04:48:88:26:c1:55:0f:ad:31:
1c:fb:25:10:fc:eb:d1:58:74:ee:cb:78:a0:db:c1:
2a:71:f1:2f:19:f8:9e:7a:07:75:b2:4f:33:c4:e7:
e7:16:06:c2:23:c6:6a:f0:a0:41:e2:d7:ce:a1:01:
7f:0d:4f:ae:89:35:4a:04:a3:ac:f4:5f:a1:3a:be:
23:86:69:4f:39:21:97:df:8d:81:64:13:a3:aa:17:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:96:3B:27:0F:7C:82:E3:6E:FD:34:1A:F1:40:8C:CA:DE:16:E3:8F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OZY7Jw98guNu_TQa8UCMyt4W448.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.128.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:41:bf:7f:87:d2:34:ef:95:41:8e:84:1f:ea:69:a4:90:c7:
a3:1e:e2:08:6d:e7:f4:de:7a:c0:0f:83:2a:47:82:9e:a7:0c:
2b:37:13:7c:21:c5:97:ff:a8:49:e1:57:0d:38:e1:06:53:39:
fa:c1:80:f7:c7:cb:7d:7c:ba:0c:9b:c8:da:1b:7a:fb:63:c4:
59:38:38:6e:0e:ca:19:11:a5:73:3c:ac:d2:eb:0e:b2:33:09:
8c:b2:e0:32:16:f0:78:57:6e:05:0d:2e:2f:93:6c:8a:af:4a:
bf:c8:27:a9:23:16:e4:f5:98:a0:24:00:c8:f9:4a:84:3f:8f:
26:d3:7d:39:37:e2:2c:53:4a:22:04:63:76:2c:e4:ff:6f:47:
68:a3:e8:e3:f6:50:92:d1:bf:56:8d:8d:f4:ad:62:24:5b:68:
d2:20:46:1f:bd:46:fa:13:3c:39:ff:a4:b9:a8:93:67:b8:98:
c8:d4:68:22:7e:6e:be:cd:77:49:94:92:3d:1f:22:d1:e7:a2:
91:a5:f8:e8:9b:13:d3:18:a9:97:9e:3a:d7:be:23:8c:ef:8b:
9e:92:ab:b9:6c:ee:6d:94:2b:d1:95:6d:52:7d:2a:4b:3b:2e:
ed:61:32:78:3f:ad:97:c1:35:10:ff:a4:16:1e:a0:ad:39:c5:
7d:bb:3f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org