Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SZ2b8HAfpHYyYKIzrPYBlsALUSs.roa
File: SZ2b8HAfpHYyYKIzrPYBlsALUSs.roa (raw, json)
Hash identifier: sVM9qqBKJLjp8Sia31aH5SKKU487OMQh/4NWuM7DMi8=
Subject key identifier: 49:9D:9B:F0:70:1F:A4:76:32:60:A2:33:AC:F6:01:96:C0:0B:51:2B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BCA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SZ2b8HAfpHYyYKIzrPYBlsALUSs.roa
Signing time: Wed 29 Sep 2021 02:47:00 +0000
ROA not before: Wed 29 Sep 2021 02:47:00 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7114 (0x1bca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:00 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=499D9BF0701FA4763260A233ACF60196C00B512B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:75:41:36:04:45:23:5d:9f:ea:69:b9:3c:
8f:d3:4a:9c:08:8a:8a:32:98:62:03:fa:29:8d:23:
1e:4b:c1:dd:6e:13:69:2a:aa:d5:39:7e:4b:bf:55:
78:31:aa:2b:95:77:56:c0:25:52:ce:c9:be:bc:54:
ba:bc:2d:4c:df:30:2d:c3:6c:f8:24:f1:c9:70:90:
83:30:f9:ae:22:b8:c4:ba:12:01:c9:b5:7d:94:01:
3c:3f:33:e4:b9:4a:a2:1b:5b:67:3a:94:cc:d6:65:
9d:24:bb:e2:06:a1:16:5f:ac:51:35:5f:ff:7f:a0:
5e:44:92:f4:bd:b6:58:05:3c:6a:04:7a:75:41:f1:
fa:1c:3c:5a:6f:85:a0:35:9a:b7:0b:59:b2:8c:fb:
ec:81:c1:1d:5f:ed:db:34:d8:84:dc:6e:6e:7f:8b:
b6:ce:84:f6:b5:34:76:7d:17:57:14:8b:9b:50:50:
4a:80:c5:44:ee:50:8b:6c:9a:c9:ad:35:af:e5:e8:
f0:77:d2:dc:c6:cb:7c:71:e4:4f:94:74:77:29:55:
ef:e7:82:91:39:d7:e1:be:52:d0:62:34:ee:81:5a:
8f:35:cc:96:d0:ca:57:5d:db:24:b3:7e:f0:eb:5b:
e7:9f:b0:bb:29:ca:4f:4d:21:5e:93:c6:37:28:dc:
ab:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9D:9B:F0:70:1F:A4:76:32:60:A2:33:AC:F6:01:96:C0:0B:51:2B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SZ2b8HAfpHYyYKIzrPYBlsALUSs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.221.0/24
Signature Algorithm: sha256WithRSAEncryption
17:55:9d:ad:a2:1c:91:a1:20:f6:4c:42:66:b9:48:84:91:dd:
71:ce:08:91:06:ba:c3:90:f2:b0:d5:ce:22:21:0e:f0:01:e9:
05:1d:03:f6:99:8c:80:8d:2a:a7:47:7e:66:91:81:c2:87:de:
68:66:d0:03:15:44:d6:21:4f:c9:03:39:00:7a:a5:8d:9e:7a:
26:11:3d:74:2c:0c:a4:0a:ec:18:b9:2e:49:00:8f:69:e8:c5:
d5:dd:60:d3:6a:b0:60:69:ac:c6:a9:06:dc:a2:ef:44:d1:83:
1e:9e:e6:58:0d:0d:f7:3b:ab:eb:92:ba:6a:0f:e5:f7:77:86:
07:78:f9:fb:23:82:3d:2f:41:ad:19:a2:33:e3:78:d9:66:43:
75:aa:3f:bf:be:10:9a:04:bb:94:6a:d4:e0:c5:cc:78:67:fc:
a0:da:a2:b9:3f:ff:c3:75:9e:85:e0:bb:d6:d9:40:ab:a1:92:
be:f4:26:c8:24:95:d6:e8:5f:6e:91:c6:83:2c:3b:9d:e0:15:
c3:57:5c:bf:42:45:32:6a:c9:03:0d:8e:80:cb:c7:8b:eb:3d:
69:01:ae:dc:79:06:40:57:03:d2:9b:91:4e:2d:a3:b4:d6:d8:
6d:1f:eb:04:de:8c:0e:ea:5c:61:cc:9d:e1:2b:d7:0e:79:84:
fe:d6:e7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org