Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RCSgrxNHvp-fdBwoTV837IgTEp8.roa
File: RCSgrxNHvp-fdBwoTV837IgTEp8.roa (raw, json)
Hash identifier: 1gV6pui6qMhIEoLASDHsb3gtMtCZ65tcwHioJ4C+7qA=
Subject key identifier: 44:24:A0:AF:13:47:BE:9F:9F:74:1C:28:4D:5F:37:EC:88:13:12:9F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 16DF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RCSgrxNHvp-fdBwoTV837IgTEp8.roa
Signing time: Sun 07 Feb 2021 12:14:58 +0000
ROA not before: Sun 07 Feb 2021 12:14:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5855 (0x16df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:14:58 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4424A0AF1347BE9F9F741C284D5F37EC8813129F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:99:43:f6:7c:c4:80:9c:68:fa:d4:6e:91:
c0:cb:b6:e1:ef:ba:ce:8e:94:99:26:a9:a6:67:df:
9d:27:9a:41:35:7b:a6:fc:93:17:6f:61:3e:9a:d0:
ad:e0:28:35:7d:b8:88:b9:5e:6c:31:42:07:d2:07:
b3:5f:aa:da:80:62:9b:62:fe:47:00:d5:e8:f2:6d:
fe:fa:bd:1e:c8:17:38:3d:cc:06:31:92:98:7a:cd:
60:ab:29:f4:ca:f3:66:68:23:53:12:5d:0c:6d:91:
97:fb:e2:20:0b:a7:24:a6:5d:a9:b2:c3:9f:1f:aa:
b0:23:6e:6e:e6:b4:66:84:29:00:a4:7b:ba:da:c2:
e4:0d:0f:17:66:97:00:e7:a8:1a:85:1b:dd:cf:a0:
38:5d:62:cb:5f:dc:e2:4b:cc:dc:a9:0a:0d:93:40:
8d:29:c2:9c:2d:63:2b:4e:09:b7:80:b7:6f:72:e6:
ca:58:79:21:e6:b2:36:c8:3a:b6:64:0d:9e:fc:b3:
f6:d9:5d:2b:9e:05:54:89:e5:57:77:b8:8b:14:ec:
fb:34:26:c4:18:37:19:76:53:9b:1f:85:36:c4:de:
7a:c1:00:9d:44:74:7a:e3:44:2b:02:34:8a:f0:65:
00:c3:38:32:22:16:e0:0c:c0:2b:55:e9:e7:c7:b1:
30:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:24:A0:AF:13:47:BE:9F:9F:74:1C:28:4D:5F:37:EC:88:13:12:9F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RCSgrxNHvp-fdBwoTV837IgTEp8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:9d:67:5e:ed:2d:4e:87:f0:94:49:e8:a2:42:b6:b7:df:c6:
92:78:4d:16:b9:38:b7:1b:de:e3:4f:b6:2f:96:d7:ea:c2:15:
60:53:d6:00:87:50:34:1c:e9:ce:e1:c5:3e:2d:7a:ab:ba:8d:
26:30:95:3a:3c:3b:18:61:f4:ba:99:3f:c5:01:99:d6:17:fe:
de:f2:80:91:56:a5:d9:96:7c:71:2b:0f:90:a4:a2:7f:dd:83:
58:e0:5e:b7:50:dc:4e:05:28:de:30:da:29:ff:3d:aa:f6:cc:
67:09:01:15:94:bf:6c:42:da:0d:6a:31:db:03:58:7c:ca:ac:
28:4a:b0:5e:70:6b:eb:75:96:68:78:02:66:28:45:33:08:0b:
80:79:47:96:2f:a1:f3:fc:6c:91:95:72:ab:24:e1:ec:91:ae:
84:f6:69:8b:8a:ee:75:c8:ff:2d:08:8f:4e:2b:27:fe:8a:d5:
29:6e:7d:76:3a:2d:8a:08:b6:83:d5:4e:7b:0a:31:10:b7:11:
0d:ed:1f:4c:a5:21:33:8f:cd:44:52:4f:2c:75:0f:fb:15:b8:
ee:a1:39:0f:a7:2f:7f:97:66:16:15:a7:37:4f:5e:bb:f8:9f:
69:9a:a7:89:c0:50:d5:11:14:36:d6:34:b9:92:9c:75:0d:62:
14:79:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org