Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wj69NnTKRRuXerBeTIaOK_5FgRc.roa
File: Wj69NnTKRRuXerBeTIaOK_5FgRc.roa (raw, json)
Hash identifier: R9bEqDddfCCqym8Ic1HyNYqzK+cTJ6lLrlDRLPzGJh0=
Subject key identifier: 5A:3E:BD:36:74:CA:45:1B:97:7A:B0:5E:4C:86:8E:2B:FE:45:81:17
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D0D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wj69NnTKRRuXerBeTIaOK_5FgRc.roa
Signing time: Tue 29 Sep 2020 09:54:07 +0000
ROA not before: Tue 29 Sep 2020 09:54:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3341 (0xd0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:07 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5A3EBD3674CA451B977AB05E4C868E2BFE458117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c2:45:1d:42:3d:0c:5c:ca:c6:71:4e:2e:96:
c8:a2:3c:d5:36:75:33:12:70:8a:d7:80:4a:bf:93:
3f:c0:43:9d:d8:61:04:02:b2:a7:dc:be:76:09:4f:
44:9b:2d:17:7b:81:c5:5c:4f:83:90:1b:3b:72:94:
81:cf:97:27:03:4e:9e:95:00:5e:d3:e6:25:50:7f:
97:b7:28:b9:92:3b:92:ff:b8:28:57:48:bb:64:d5:
bf:d7:00:fb:7f:44:a6:5c:0e:61:61:b3:4e:96:03:
40:53:1f:a7:b3:51:32:47:e3:67:b0:ac:d1:67:cb:
ff:4e:bf:27:f6:6a:f1:0b:f3:1f:17:d6:fd:db:49:
17:b7:4c:0f:f4:94:c1:75:2a:58:88:bd:7b:f1:12:
78:17:6f:31:5c:03:e8:d8:f3:f9:2d:9a:67:12:09:
4a:f4:68:60:95:78:ef:c2:cd:dc:e5:77:9a:b0:f2:
c8:2b:c2:46:5e:19:f6:37:0b:fc:4b:27:72:b2:55:
da:79:23:36:90:b4:e2:1e:e6:f0:09:e3:ab:4d:91:
4b:6b:8a:7d:65:7c:62:ec:67:2d:06:e2:e9:b0:f0:
68:22:89:f7:13:10:9f:0a:e3:71:95:53:e0:dc:57:
ec:e5:fc:f0:f9:77:b1:c9:e5:17:a1:40:96:d2:54:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3E:BD:36:74:CA:45:1B:97:7A:B0:5E:4C:86:8E:2B:FE:45:81:17
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wj69NnTKRRuXerBeTIaOK_5FgRc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:1e:14:b5:e3:73:e3:ae:53:0e:94:8a:85:2b:fe:92:99:67:
17:a9:8b:de:ea:a8:1b:d9:76:24:03:67:82:b6:49:b3:78:7c:
4e:83:85:9d:4d:d0:c5:5b:3f:6b:24:38:5d:24:cc:7f:3c:9f:
0c:03:d3:cf:b8:ca:b5:3f:16:15:b2:83:c6:4e:03:94:fb:00:
db:6c:8e:34:d4:1d:0b:10:e2:f9:39:da:53:04:81:f4:01:14:
e8:50:07:5e:5d:97:d2:95:7e:d1:d9:46:db:51:cb:20:4c:59:
25:da:d7:54:e9:6c:be:6d:2e:e3:ff:6d:03:6f:6f:25:ea:08:
94:83:36:d9:31:af:7f:b7:58:5c:f0:cb:cb:2e:53:3f:d7:94:
03:c9:af:50:f4:14:29:56:29:63:fc:1f:ee:ed:89:5b:de:bc:
39:3b:c3:d4:1a:c8:07:02:07:9b:5b:c5:2d:f6:9f:dc:dc:97:
f9:fa:41:64:a6:c5:f2:0a:52:98:d2:ba:4c:b8:9f:4e:a3:4c:
0d:97:80:3e:3e:4d:19:85:fc:b1:47:b0:1b:30:da:43:c0:86:
75:6e:91:ba:4e:19:05:a8:75:5c:27:ec:3a:64:9a:8c:21:bb:
51:29:0a:47:c3:9c:6b:67:68:62:02:73:09:6a:48:ac:67:7b:
a3:68:a8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org