Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QwU1dy40JKRc8OGUZwcTp2Q2VOk.roa
File: QwU1dy40JKRc8OGUZwcTp2Q2VOk.roa (raw, json)
Hash identifier: xgqj+0mJQVJ+gFPv0pdRhvIZQhwMXRW77emIHY4+DS4=
Subject key identifier: 43:05:35:77:2E:34:24:A4:5C:F0:E1:94:67:07:13:A7:64:36:54:E9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QwU1dy40JKRc8OGUZwcTp2Q2VOk.roa
Signing time: Thu 15 Sep 2022 02:46:12 +0000
ROA not before: Thu 15 Sep 2022 02:46:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 106.1.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=430535772E3424A45CF0E194670713A7643654E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c6:ad:69:14:2e:3d:98:5f:e5:a6:43:c4:aa:
a7:cf:26:ab:6d:71:03:cf:09:fd:39:39:b2:ea:de:
0f:0a:cf:c9:8a:cf:d1:e5:2c:81:60:4d:00:55:ac:
26:2f:ad:c8:54:48:81:1d:cc:b2:d0:8f:07:1f:56:
09:13:d7:20:5a:78:c4:d6:25:9e:bd:89:69:37:2c:
61:c3:98:88:c0:dc:38:3c:e1:e2:78:a9:4c:cf:ae:
93:1c:00:78:61:c0:d7:83:ce:42:8c:57:c6:37:18:
89:84:ae:24:3b:ce:81:65:2b:37:44:db:c2:54:53:
e0:98:ec:b9:a8:74:a0:3b:ea:35:0b:4f:27:18:93:
5e:ca:94:f9:82:c5:c3:b4:32:ca:35:3a:bf:de:c8:
ac:c4:f5:7b:e1:a7:4e:57:2d:70:5c:24:4a:8b:09:
e0:a8:9a:e3:16:98:be:bd:31:b4:c6:1c:63:80:e1:
84:21:fa:60:cd:a9:47:b9:aa:97:24:b1:c5:19:4d:
f2:c4:d9:4c:30:b5:fd:f1:6f:d8:bf:72:02:8a:d6:
04:1b:6d:4d:59:3a:88:25:a0:1f:19:2a:01:b1:87:
83:1f:e3:b7:bb:e4:eb:0f:9d:2e:6e:b5:b7:0b:4d:
a9:7e:58:bf:f8:21:f2:57:b2:da:dc:2b:21:fc:8b:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:05:35:77:2E:34:24:A4:5C:F0:E1:94:67:07:13:A7:64:36:54:E9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QwU1dy40JKRc8OGUZwcTp2Q2VOk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:c1:24:c3:42:5f:47:0c:64:61:f1:59:08:0e:02:18:ea:52:
46:66:9c:6e:4e:2a:0f:95:79:3f:d4:a0:d6:04:dd:fd:b6:e6:
ed:ac:20:61:27:2b:d3:57:0d:f5:fa:06:0b:d1:e1:02:b1:4b:
fe:e1:73:9c:23:43:56:31:ec:b5:99:06:ef:6e:f1:b6:2a:6a:
cb:e8:bc:c8:4e:a7:d4:b6:2b:81:9e:e4:6d:26:a3:db:7f:e8:
c9:c7:94:7d:a6:ee:bf:07:74:f2:5a:d5:5e:72:fd:fb:6e:b9:
e7:00:3f:ee:93:bf:3a:b2:48:58:11:4d:af:52:c4:e3:53:6f:
76:ad:bb:38:be:3c:b8:67:02:ee:a1:09:80:5d:68:90:07:08:
a0:71:fa:bc:c7:99:06:af:db:4d:15:e0:0d:97:59:d9:11:01:
e8:40:64:95:47:46:25:00:72:7b:fb:2b:08:79:7c:a5:e6:4f:
3c:63:4c:2c:c5:06:97:65:5e:82:90:a2:c4:a8:f5:13:32:d1:
37:66:84:8d:42:9c:17:5b:9d:e2:30:47:db:93:c4:10:32:25:
5b:19:32:e4:b8:e4:8c:ef:78:29:38:fe:c6:02:54:fb:74:54:
b8:b9:5f:69:d8:98:ae:33:b9:76:b2:a6:34:40:5a:41:7f:d1:
55:81:e8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org