Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SpFJrhYMOcwjY7f1rZ29DwbYTPE.roa
File: SpFJrhYMOcwjY7f1rZ29DwbYTPE.roa (raw, json)
Hash identifier: IOudm1mGK7eJ0Ct3B7bFFfJosFdTlCme/TSyl2dMo+Y=
Subject key identifier: 4A:91:49:AE:16:0C:39:CC:23:63:B7:F5:AD:9D:BD:0F:06:D8:4C:F1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 209A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SpFJrhYMOcwjY7f1rZ29DwbYTPE.roa
Signing time: Fri 25 Nov 2022 04:38:54 +0000
ROA not before: Fri 25 Nov 2022 04:38:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8346 (0x209a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4A9149AE160C39CC2363B7F5AD9DBD0F06D84CF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4f:2c:8f:21:9b:7e:1b:8c:92:cd:4c:0c:4d:
91:da:31:03:0b:49:a9:92:af:75:e0:aa:9f:e6:e9:
2e:a9:c5:3f:74:45:28:f1:79:33:6a:4a:4a:2e:50:
09:d4:1e:ba:d5:11:50:8f:eb:53:72:1e:ba:b8:75:
cb:20:06:ce:b0:8b:99:01:68:7e:d2:63:cc:1f:98:
b4:c1:7d:af:50:1f:5d:80:c6:e4:61:32:08:a5:5e:
28:c4:96:83:5c:2d:95:c0:92:b6:e4:a2:62:e2:42:
0d:d9:ca:b9:0b:d9:4b:35:68:53:25:5e:67:1b:1d:
ca:cb:1e:70:92:b7:c3:40:3a:60:95:04:12:79:db:
dd:86:e8:33:79:15:23:22:53:55:ef:64:83:9a:6e:
98:3f:84:ce:4a:45:0d:c4:2f:8e:c9:d4:da:71:02:
3e:f4:31:7a:a5:cd:7f:53:3b:de:2a:38:4b:e1:59:
11:98:ca:f1:a8:4b:46:a9:89:78:69:d5:07:56:ec:
42:f3:de:c4:92:d2:76:bf:8b:eb:33:06:2e:39:1e:
8c:5c:0e:17:06:ea:b6:78:26:a8:d8:b5:d8:92:1d:
c3:61:4a:19:de:78:7e:57:f5:e6:0b:7a:96:4b:11:
93:2a:86:a7:18:ab:11:f1:1d:b8:00:51:d8:c0:db:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:91:49:AE:16:0C:39:CC:23:63:B7:F5:AD:9D:BD:0F:06:D8:4C:F1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SpFJrhYMOcwjY7f1rZ29DwbYTPE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a6:f0:6c:85:45:09:06:48:1d:15:1c:96:6a:1d:60:ce:ba:
12:f3:4a:a4:cb:ed:ad:a0:69:d5:8c:02:99:ce:23:80:59:5a:
09:4c:16:46:ab:9d:54:a5:96:5d:1d:69:e6:2c:14:02:9d:6b:
b3:a8:4f:1a:e8:91:3f:be:01:50:13:96:ef:b5:92:2f:72:37:
b5:99:ba:9f:dc:59:b8:41:66:e7:91:e8:d8:a5:96:26:d0:39:
19:83:d2:85:db:da:ff:b2:8b:ed:8a:bf:37:46:f4:ca:48:28:
e6:08:8c:e1:a6:fc:75:33:32:83:fa:f9:74:7b:77:62:17:9b:
71:b8:57:b6:7f:d9:72:cc:2a:37:af:73:49:0d:33:5b:3d:5c:
f8:b7:4d:bf:98:ca:72:d6:24:48:6e:4c:86:95:f8:92:ac:f6:
62:2d:ba:f8:cc:75:bf:4a:83:5e:a7:47:31:93:c7:64:02:3e:
86:4f:0e:7e:08:70:b1:f4:d9:8c:cc:6c:5d:94:d0:66:dc:3a:
0d:6f:27:10:68:58:48:36:18:fd:c7:bd:99:2e:78:62:6a:21:
f4:c9:2f:1d:fa:b5:17:71:79:10:0e:cc:09:9e:78:84:86:bf:
20:41:47:d8:e7:47:a9:2e:ee:d0:0b:67:7b:3f:43:3d:59:b6:
49:52:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org