Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SdCSATkTwr4kS0ajYC7A3ElRBRo.roa
File: SdCSATkTwr4kS0ajYC7A3ElRBRo.roa (raw, json)
Hash identifier: drKqquZ0ilwnX/aKULhx/SD6mCDwl+h30XmoPBdQ49E=
Subject key identifier: 49:D0:92:01:39:13:C2:BE:24:4B:46:A3:60:2E:C0:DC:49:51:05:1A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2268
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SdCSATkTwr4kS0ajYC7A3ElRBRo.roa
Signing time: Fri 25 Nov 2022 04:41:07 +0000
ROA not before: Fri 25 Nov 2022 04:41:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8808 (0x2268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=49D092013913C2BE244B46A3602EC0DC4951051A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1e:d8:c2:6d:64:d7:3e:c2:a0:71:ea:b7:00:
23:dd:a9:f7:cc:29:08:0c:c1:22:36:e1:d7:86:26:
92:29:72:17:b8:07:2d:2e:73:be:32:3c:ec:c0:5d:
14:3c:33:be:2c:48:f9:6e:73:27:7d:a6:2d:82:39:
ef:ce:fe:60:56:8c:ea:b8:28:f4:4d:aa:e0:c4:d4:
60:01:1b:17:2a:e8:2c:fa:59:7a:68:64:fc:87:3d:
95:84:af:7d:84:aa:7d:eb:d3:85:9b:d0:5d:d0:e1:
24:12:b6:bb:3b:57:69:bb:28:eb:5c:eb:2a:0b:e1:
13:29:2a:0c:d6:ca:c9:40:42:fb:65:0c:92:59:67:
4d:5a:05:9b:78:c9:cb:fc:5a:97:a3:b4:e3:02:2f:
97:ae:23:0c:6d:00:e4:14:3e:87:19:a2:dd:b0:0a:
74:7c:64:83:fa:e6:4d:0f:9f:d6:a1:30:6d:4a:af:
7c:68:27:81:6a:7b:26:fb:9d:7a:08:64:37:45:c9:
07:72:97:f4:a1:d6:38:19:b3:75:7d:e4:6b:e0:90:
a3:f8:5d:6d:f5:6b:02:40:61:79:3e:8c:fd:d0:5c:
73:01:76:fd:04:5b:2d:b7:06:9e:c8:c3:73:01:8c:
61:11:f9:b5:9a:32:74:06:aa:b6:f9:23:24:c9:bc:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D0:92:01:39:13:C2:BE:24:4B:46:A3:60:2E:C0:DC:49:51:05:1A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SdCSATkTwr4kS0ajYC7A3ElRBRo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.152.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:9a:6b:d9:2b:cd:31:24:46:45:d8:85:ed:7b:4a:80:b8:34:
63:df:c6:76:c3:ae:9e:58:32:8b:02:42:8f:82:51:44:c8:13:
b4:c4:3a:2f:97:b8:a6:12:4b:53:b4:de:8a:78:dc:a9:d3:af:
a6:89:7c:f4:28:b3:ad:db:42:86:ee:5c:90:7a:ce:7c:d5:f7:
1c:e9:78:33:73:04:68:46:58:9f:b2:24:ae:0a:73:82:85:22:
bd:40:d1:d1:58:2f:0a:af:f2:66:ac:69:87:aa:9f:30:e2:e3:
b8:dd:0f:5e:ad:a8:8b:17:40:ab:a9:5d:a7:b9:16:ed:da:7b:
9d:73:8c:88:32:85:3b:31:f1:9d:56:81:00:9c:6b:8b:8d:1d:
81:e1:a6:95:19:1a:3f:c7:a2:17:dd:e7:f3:00:b1:58:50:2d:
a2:49:20:b8:db:ba:3a:bf:71:18:d3:53:66:41:af:5b:f8:e0:
37:38:e3:d3:42:9b:3d:14:ac:12:ed:6a:5b:2b:d0:a6:cc:78:
e4:cd:c5:fc:61:a1:f5:04:c0:a1:da:73:a2:35:e7:2f:89:8d:
1c:3d:db:42:bf:47:41:66:1f:ce:03:3b:74:1c:6f:f0:ea:15:
e6:49:72:77:1d:83:bb:89:68:91:28:b0:09:2c:d1:b8:7a:d6:
d6:8a:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org