Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OpApIkhV4yWZsNXNAW5wM7Nfn3M.roa
File: OpApIkhV4yWZsNXNAW5wM7Nfn3M.roa (raw, json)
Hash identifier: RqYFCcbrDp2HtHQoKlXAYTnj9ClpL++rAOPNV+ZhkJ0=
Subject key identifier: 3A:90:29:22:48:55:E3:25:99:B0:D5:CD:01:6E:70:33:B3:5F:9F:73
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22F3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OpApIkhV4yWZsNXNAW5wM7Nfn3M.roa
Signing time: Fri 25 Nov 2022 04:41:50 +0000
ROA not before: Fri 25 Nov 2022 04:41:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.54.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8947 (0x22f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3A9029224855E32599B0D5CD016E7033B35F9F73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:1a:46:fb:08:85:3c:3e:c7:15:ee:2a:98:
f7:e0:79:15:c2:1e:c4:89:78:c6:94:1c:a2:7f:f3:
80:6c:7c:cc:16:f0:ab:64:e5:19:bc:bb:08:82:23:
37:cf:86:7e:93:6c:27:47:52:ad:12:b1:6a:0f:b8:
a4:23:92:0b:47:06:f6:b8:3e:69:81:bd:be:67:60:
f2:7f:03:b3:41:88:6f:c9:b7:d6:b5:0b:94:be:c9:
60:56:ce:39:1a:93:f4:c6:94:a0:fe:95:a3:48:83:
33:16:06:86:19:6b:18:6c:82:5c:e5:9b:e4:d4:b6:
28:c6:81:87:76:d8:47:00:03:51:57:5f:18:b7:2f:
d5:99:7a:19:e1:48:73:ba:df:c0:25:a1:34:59:b9:
d0:70:ee:74:60:b8:f5:bd:68:67:d3:50:99:58:67:
82:48:b8:b7:c8:72:4b:29:99:fe:98:e5:2e:53:43:
83:99:16:d3:e4:18:21:02:1f:d3:b7:3a:20:13:ef:
27:a5:7a:b9:f8:9e:8e:d4:5e:8a:b5:14:01:8b:96:
10:43:14:13:e8:70:aa:e0:6d:33:de:a4:5e:a3:d4:
41:cb:cf:e8:45:87:be:ea:00:f1:c9:95:3c:b6:16:
fd:82:77:9c:ee:9c:0e:f8:df:80:8c:e5:91:d3:d3:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:90:29:22:48:55:E3:25:99:B0:D5:CD:01:6E:70:33:B3:5F:9F:73
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OpApIkhV4yWZsNXNAW5wM7Nfn3M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.54.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:6a:bb:bb:f7:d4:21:76:dd:29:51:65:4a:8a:87:a8:f1:9d:
cc:3b:25:20:60:4e:60:66:db:cd:a8:8e:01:ef:28:30:11:fa:
ab:ca:90:02:8b:5f:ec:68:ec:8e:7a:70:91:55:56:bd:23:a2:
33:bf:15:77:0a:92:8d:23:45:1f:54:69:57:e4:c4:44:a2:69:
0e:54:a4:21:8f:9f:fd:61:73:d9:b7:8f:06:51:33:31:96:38:
9a:af:8a:54:ac:3c:e9:20:56:e6:b8:ff:a1:c8:3c:6b:5c:3c:
4e:be:63:c4:97:cf:d8:e8:83:51:49:86:bc:32:e5:d4:f9:c1:
c0:bd:93:8d:91:e0:2a:f4:3d:27:aa:6b:68:38:2e:bb:2d:4d:
3b:e7:8c:ff:a7:5b:53:c1:11:b2:e0:24:c9:a5:1a:a0:0a:66:
d3:8f:d4:30:72:3e:d1:a4:17:ed:4f:69:3f:e7:27:f0:f3:23:
b8:6a:f8:ac:f1:51:6e:86:a1:c6:15:e5:1c:b2:3f:ca:ac:69:
c2:38:59:ba:38:f0:98:bf:83:d2:ea:bf:8a:70:73:34:29:db:
48:a9:a8:4b:83:2e:e7:fd:67:12:af:0d:e7:b4:5c:0a:9c:30:
0c:3f:80:c2:9f:40:aa:5c:d6:ec:b5:97:9a:90:95:39:34:3b:
8b:ef:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:30 2024 by rpki-client on console-ams.rpki-client.org