Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SbMCxZAl9bPBuie-ROABCElt9tg.roa
File: SbMCxZAl9bPBuie-ROABCElt9tg.roa (raw, json)
Hash identifier: HISHaNvBbkbZlg+nsqQo+qzjNi03V92aC3ginatBPKY=
Subject key identifier: 49:B3:02:C5:90:25:F5:B3:C1:BA:27:BE:44:E0:01:08:49:6D:F6:D8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1F96
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SbMCxZAl9bPBuie-ROABCElt9tg.roa
Signing time: Thu 08 Sep 2022 10:10:06 +0000
ROA not before: Thu 08 Sep 2022 10:10:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.206.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8086 (0x1f96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 8 10:10:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=49B302C59025F5B3C1BA27BE44E00108496DF6D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:23:08:57:a4:4a:30:40:10:ef:18:5d:d4:
0f:91:ab:2b:29:bd:2c:f4:09:f6:f5:43:3a:fc:5e:
49:7b:b7:58:a9:2f:12:72:90:2a:c9:95:d7:7d:c9:
ad:ec:36:a7:37:e6:e6:98:bc:42:e0:be:ad:8d:bf:
ff:6f:d3:09:19:2a:fd:d3:8b:cb:04:ec:85:3d:6a:
ec:49:78:ba:71:da:f2:c5:13:fd:ca:d2:ed:93:72:
10:1a:ad:37:ee:4b:86:a9:bc:ab:cf:81:a7:5e:d8:
b3:2d:ae:31:68:51:7d:a6:7e:a4:24:cf:7b:a4:f6:
60:2b:a1:b2:88:5b:17:6e:4a:57:c9:a3:aa:97:d7:
b6:ba:9f:85:ef:d2:6d:34:78:07:6c:03:00:1c:7f:
69:77:54:9b:1a:1e:4e:da:03:c9:6e:a4:eb:0e:e2:
69:17:cc:43:ec:a4:28:81:c7:b9:17:4e:de:6f:fe:
c0:69:42:5d:02:e9:b1:16:a1:b0:fc:2d:c5:c4:e4:
dc:63:14:a7:3e:b6:c1:cc:2c:56:86:e3:c3:b2:73:
95:a6:96:e4:53:4a:29:7b:f3:54:05:07:8c:ba:36:
60:41:51:7b:26:21:65:34:7a:74:91:46:67:09:fc:
b9:81:d0:d5:21:5c:7a:de:cc:04:6d:a8:2e:2e:39:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B3:02:C5:90:25:F5:B3:C1:BA:27:BE:44:E0:01:08:49:6D:F6:D8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SbMCxZAl9bPBuie-ROABCElt9tg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.206.0/23
Signature Algorithm: sha256WithRSAEncryption
52:57:0b:10:c8:89:be:d3:13:a8:30:7a:28:d7:82:1e:0b:c2:
fa:f3:4f:43:c1:22:5c:de:51:b9:30:e5:d9:85:52:52:ca:d7:
7a:ac:d9:8a:30:15:22:f3:56:90:43:46:8f:fa:6f:6d:cf:0a:
d7:b5:fa:40:fd:0b:4a:41:88:21:1e:54:e9:7a:e7:c0:48:5d:
8e:52:5b:b1:67:ac:72:aa:ef:04:81:99:85:4b:6a:3e:0c:86:
0a:08:f1:72:cb:7f:66:d4:83:1b:a2:54:42:4d:0e:91:03:fb:
ed:19:27:d6:c0:0d:82:6e:6d:59:5f:5b:1a:91:97:ae:02:7d:
b4:07:22:74:74:e3:e0:8c:5a:cb:42:62:60:ef:29:e1:a2:70:
ef:32:d5:7e:40:78:e2:e6:84:86:42:ab:c8:3c:f2:95:72:a6:
5b:f2:3b:cb:a6:f0:5a:5e:5d:6a:60:aa:5a:a4:cf:b2:d8:f8:
37:98:6d:1c:48:0d:c0:cd:d9:19:52:f7:80:33:bd:a0:94:f0:
da:b5:1b:24:e7:42:5b:45:07:a3:58:25:04:4c:9d:1d:ba:b8:
39:cc:a5:b4:13:aa:3b:14:c2:25:d0:e5:66:ef:7b:ec:ea:41:
f2:68:c0:60:de:88:8a:57:5b:22:f3:97:81:29:f6:d3:72:50:
83:10:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org