Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OsCl_BHrQPqnWSYADVLN2TAcKes.roa
File: OsCl_BHrQPqnWSYADVLN2TAcKes.roa (raw, json)
Hash identifier: jNpdLxU3/C8BmspSoeqmDO/b85pn61IYH8af0gP7tJo=
Subject key identifier: 3A:C0:A5:FC:11:EB:40:FA:A7:59:26:00:0D:52:CD:D9:30:1C:29:EB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1559
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OsCl_BHrQPqnWSYADVLN2TAcKes.roa
Signing time: Sun 07 Feb 2021 12:04:09 +0000
ROA not before: Sun 07 Feb 2021 12:04:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5465 (0x1559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:04:09 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3AC0A5FC11EB40FAA75926000D52CDD9301C29EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:49:e0:37:ad:e7:c9:ae:68:d1:b0:6d:6b:
95:48:bf:e8:5f:de:ec:d1:01:58:a2:32:08:75:95:
5f:07:f1:59:ed:dc:53:e7:db:30:95:e1:48:1a:af:
21:b5:4c:93:96:72:d7:85:7d:dd:a7:43:59:6f:7e:
3f:05:a9:d8:1d:ba:b3:6c:0e:98:2c:80:67:36:0d:
9d:c9:72:cf:8f:68:f6:da:ed:5d:be:1a:76:79:7c:
a3:1a:1b:63:28:41:ad:da:16:32:6a:6f:7f:8b:bb:
75:94:15:aa:1d:21:b9:21:ab:1d:e9:fc:fd:f6:9f:
66:33:ed:fb:da:55:c7:3d:64:4e:a5:df:de:09:28:
d9:f4:73:34:84:de:82:f3:6d:d5:21:de:0d:f2:9f:
6d:88:5d:35:a9:21:e3:0b:7a:33:c5:56:b5:9f:74:
f3:2f:60:25:df:aa:16:ac:4a:b9:ee:7a:67:06:cc:
72:84:f8:cf:e6:d8:b2:d6:0a:e8:27:19:8d:07:06:
c7:e6:24:02:d3:a8:67:5a:33:b0:c0:48:ca:31:d5:
02:ee:a7:64:f2:37:f1:c0:67:a5:40:4c:94:4c:c9:
c2:4d:aa:cf:3f:32:7f:78:1e:f4:48:fd:ff:06:61:
82:fd:6a:a4:07:67:6e:47:41:0a:36:a2:96:b6:83:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C0:A5:FC:11:EB:40:FA:A7:59:26:00:0D:52:CD:D9:30:1C:29:EB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OsCl_BHrQPqnWSYADVLN2TAcKes.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.224.0/22
Signature Algorithm: sha256WithRSAEncryption
64:81:de:d9:d6:90:f4:57:7f:76:20:44:b4:60:27:2a:3a:37:
86:49:d6:70:77:43:8f:61:c2:10:46:91:f8:e1:12:64:e2:43:
d0:cf:56:f5:6c:4e:e7:22:f8:d5:0d:04:ae:09:44:51:92:8a:
9f:87:47:b9:1b:d2:c5:a7:b9:d2:a1:51:86:4b:17:29:1e:73:
32:fd:45:ec:28:f3:d8:39:fd:91:93:e8:a0:9a:0e:f4:0f:a7:
6e:01:60:65:45:47:7b:87:b4:fa:b5:8e:8c:66:ac:47:14:74:
64:e7:c4:36:74:01:3f:7d:97:1a:ae:ce:d2:b8:17:ea:4b:1b:
58:3c:4f:67:1c:51:e9:60:7b:f8:b7:01:8f:ca:fb:60:7d:4d:
b9:00:7c:49:b8:f5:1d:88:15:1a:04:37:4e:d5:47:cd:a3:60:
ef:64:fd:02:8e:9e:4a:eb:b2:f1:2e:73:53:e9:72:a8:93:26:
45:ba:77:af:03:b4:0e:1e:85:ec:14:0b:9c:9c:9d:7c:93:90:
8e:8b:36:14:85:6c:6c:68:11:26:3f:04:38:5a:c5:03:fc:39:
19:a0:97:99:2d:75:fb:ad:0e:a4:55:97:8f:3b:c1:a5:24:26:
0a:41:76:17:a2:c5:d1:23:ce:fe:06:b9:66:b4:4e:40:2c:86:
17:61:18:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org