Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SrUI_D31RyXXnMrsrVmp7RSLuDE.roa
File: SrUI_D31RyXXnMrsrVmp7RSLuDE.roa (raw, json)
Hash identifier: mA/XZLRaJoaXK+7ARqhHu8bM4U+QEdocwHqGSwQEWOw=
Subject key identifier: 4A:B5:08:FC:3D:F5:47:25:D7:9C:CA:EC:AD:59:A9:ED:14:8B:B8:31
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17F7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SrUI_D31RyXXnMrsrVmp7RSLuDE.roa
Signing time: Sun 07 Feb 2021 12:25:06 +0000
ROA not before: Sun 07 Feb 2021 12:25:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6135 (0x17f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:25:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4AB508FC3DF54725D79CCAECAD59A9ED148BB831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:45:48:a3:4c:b4:2c:e1:77:98:65:90:db:cb:
fd:97:11:6b:6c:73:03:66:34:e5:ef:64:51:8b:15:
1f:79:8e:90:a7:42:eb:aa:59:aa:d8:f4:ef:ca:f3:
55:ae:a8:f9:4b:77:14:03:1b:8a:f2:a4:60:ca:58:
0a:da:9a:45:87:9c:d5:45:68:61:85:57:06:32:70:
0d:7e:da:b6:02:fc:d2:cb:3c:59:6c:1f:cf:59:3d:
a9:a6:b1:22:bf:24:9d:f4:b9:ca:cc:46:c8:11:f4:
43:ab:d0:ca:b6:7b:c9:c0:47:82:34:fa:21:4f:35:
96:fe:bf:c2:4d:04:5d:f6:85:c0:3a:c6:41:22:6a:
2f:b1:eb:53:b2:74:43:f1:70:75:bc:43:39:eb:96:
71:f3:cc:23:f4:09:28:da:0e:96:91:c8:59:1d:39:
f4:1f:89:aa:8b:f6:36:75:32:d5:f3:9d:72:04:ab:
7b:07:ad:ed:cf:85:ab:6f:3c:05:f5:64:a1:89:db:
04:0a:bf:77:aa:30:ea:92:6c:c6:b5:15:49:d1:fb:
7c:15:4a:dc:e2:cf:70:46:a8:96:fa:a9:64:c4:04:
5e:54:68:e0:18:d1:31:a9:1f:d3:e0:08:13:fa:d7:
e1:df:b5:0f:4c:2a:cf:82:51:78:37:ee:93:a0:e8:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B5:08:FC:3D:F5:47:25:D7:9C:CA:EC:AD:59:A9:ED:14:8B:B8:31
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SrUI_D31RyXXnMrsrVmp7RSLuDE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.136.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:76:d2:92:05:e6:50:91:56:44:f6:f1:8b:03:a4:68:68:ae:
8e:8f:f6:e5:80:8e:85:d2:2c:3b:6d:da:d8:ac:79:d5:7b:32:
42:2b:87:a2:d2:ec:48:fc:42:2e:cc:77:76:3b:db:88:4c:ea:
5e:ea:a3:32:8b:f6:68:33:3f:99:fb:6e:a6:bf:74:5d:1d:63:
55:26:6b:78:0c:95:51:69:fb:12:61:e1:1d:d2:bf:10:70:55:
bb:61:54:0e:3c:9d:ce:da:be:37:5f:f7:6a:f4:60:42:52:d9:
74:1c:48:47:ee:b6:7e:d1:c0:7b:14:24:38:ae:72:4c:ec:03:
81:1f:76:6a:b6:33:d7:f4:c2:2f:66:c9:55:84:3f:39:89:c4:
84:02:6c:3e:06:0c:5f:6c:e3:29:35:29:57:45:b5:ce:b9:79:
4f:dd:5d:81:da:a8:db:23:7b:aa:d3:0c:d9:f1:70:09:37:bb:
94:a9:5d:25:63:4c:14:14:5a:e9:2d:8d:ec:7e:0a:d4:dc:53:
43:e4:ee:b2:7a:b4:19:77:9f:9c:80:3c:fc:86:4a:4e:44:96:
0f:e2:8c:ae:98:0b:2f:01:d9:33:1b:49:96:b2:bc:d3:71:d4:
45:c2:88:6f:70:ad:64:0a:a9:5b:63:ab:73:14:36:e2:a7:eb:
69:62:c2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:20 2023 by rpki-client on console-ams.rpki-client.org