Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q3PCNni-fG-lVOZwNzjSCPxxpy4.roa
File: Q3PCNni-fG-lVOZwNzjSCPxxpy4.roa (raw, json)
Hash identifier: 1l6iVV//sjSAxO3LfyKHa7zN3CckhCqO4JzNRE0ZyrU=
Subject key identifier: 43:73:C2:36:78:BE:7C:6F:A5:54:E6:70:37:38:D2:08:FC:71:A7:2E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A85
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q3PCNni-fG-lVOZwNzjSCPxxpy4.roa
Signing time: Wed 29 Sep 2021 02:45:26 +0000
ROA not before: Wed 29 Sep 2021 02:45:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6789 (0x1a85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4373C23678BE7C6FA554E6703738D208FC71A72E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:d3:21:22:d8:b0:45:cb:a2:62:43:e8:b7:
f6:ac:92:87:61:2b:d3:a5:69:fb:4d:2a:b5:13:14:
30:ad:2c:36:f1:c7:d1:95:8a:09:d2:16:68:bf:ac:
a8:b1:ec:20:f5:11:35:49:f1:cf:72:ab:94:85:89:
89:7c:b0:c8:51:3f:fa:af:54:a8:9d:bf:85:ee:84:
cc:54:45:06:f2:ba:2a:26:d6:aa:04:80:00:b1:14:
92:37:b4:0d:4f:cb:19:08:36:5c:0b:9b:77:21:8d:
e2:4e:36:b4:6e:d9:73:83:31:95:8c:c6:86:15:6e:
99:68:71:0a:90:0d:97:3f:cd:34:4f:18:d0:a0:04:
d3:7b:e9:40:8a:57:f5:4d:b2:aa:46:21:58:55:16:
d3:c0:13:0a:c3:5e:a3:f5:21:23:1d:52:89:2e:5e:
2f:7e:ba:08:85:a4:4b:de:44:58:79:ec:07:c4:75:
14:3f:e5:05:08:71:6c:f3:7e:04:5d:c2:ac:a5:eb:
b0:8a:12:49:50:4c:21:e5:b6:14:cb:95:da:6c:77:
04:30:64:89:7d:c4:50:02:6a:d9:a3:d4:87:bd:f4:
8f:8f:2d:b3:44:44:19:53:15:05:b2:16:f7:95:6d:
89:c9:83:ce:04:95:4c:a1:fd:b3:a6:5e:92:81:e1:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:73:C2:36:78:BE:7C:6F:A5:54:E6:70:37:38:D2:08:FC:71:A7:2E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q3PCNni-fG-lVOZwNzjSCPxxpy4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.103.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c1:21:28:dc:6c:f0:0d:f8:40:39:15:51:db:96:8c:13:b1:
2b:38:1f:ce:d4:d4:ef:ba:c4:81:99:2d:6b:5d:00:34:c2:03:
27:28:db:79:73:9e:d3:b0:72:39:ba:07:38:be:65:58:03:ae:
39:8d:1c:53:fd:db:44:2e:e3:29:74:71:3f:2b:d3:7b:e0:d9:
40:2c:1b:3b:36:20:29:49:4d:1b:90:2b:37:36:18:ec:d7:d5:
b9:6f:47:dd:86:0e:ad:e7:94:30:22:98:83:76:34:56:f1:79:
52:56:37:89:5e:3f:0a:5a:47:bf:91:48:e3:7f:a9:7d:16:2c:
a8:ec:5b:34:c9:41:f1:28:89:f0:81:ff:54:1d:61:03:68:b9:
33:2b:1b:0c:a8:de:b9:eb:ca:0c:08:3e:b3:7b:43:fb:29:22:
51:f7:98:ec:2d:b1:36:6f:02:f4:6e:2c:7b:08:f1:4d:09:31:
f7:fd:ed:8b:70:21:32:2a:2d:f7:d1:c9:0e:84:5f:9f:21:a3:
45:59:bc:08:9d:24:2d:6c:bc:e3:b3:83:10:8f:e2:5e:b7:83:
c3:86:51:35:19:96:5b:fe:4b:55:ae:87:a9:83:42:f1:96:af:
de:86:2c:04:f2:3f:71:92:ab:1b:7b:09:e8:1b:2d:b2:e5:c5:
0c:db:a0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:30 2024 by rpki-client on console-ams.rpki-client.org