Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XgIakAWhM3fyjDKR0aKSJjX3pow.roa
File: XgIakAWhM3fyjDKR0aKSJjX3pow.roa (raw, json)
Hash identifier: Q1alJFjHRgYcIz8bbT7j8UO1yfMkheYJYyupDs2kd94=
Subject key identifier: 5E:02:1A:90:05:A1:33:77:F2:8C:32:91:D1:A2:92:26:35:F7:A6:8C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 16DB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XgIakAWhM3fyjDKR0aKSJjX3pow.roa
Signing time: Sun 07 Feb 2021 12:14:51 +0000
ROA not before: Sun 07 Feb 2021 12:14:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5851 (0x16db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:14:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5E021A9005A13377F28C3291D1A2922635F7A68C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:25:ab:a9:19:aa:aa:f3:08:55:f8:7b:7a:
15:a9:60:62:b4:be:82:a6:64:69:de:0d:e4:7c:38:
d7:57:7c:85:cb:c1:d3:0e:18:28:a4:7b:7a:0b:9b:
10:7d:f1:ce:79:53:aa:97:60:97:64:e3:59:bd:57:
ba:5d:41:fa:95:db:1c:15:a6:7d:fc:54:6c:99:59:
65:df:9f:1a:d4:7b:1c:72:6b:1f:fc:67:dc:51:ca:
7b:a4:c3:83:b1:52:38:c7:e0:a6:67:33:26:f3:60:
f0:79:ce:15:b1:81:60:ec:15:40:00:22:bd:db:e1:
a4:69:44:23:76:0d:12:90:d8:64:1f:6c:d9:d3:b5:
e7:f1:c7:be:7f:d5:77:99:f1:96:9a:34:b5:46:d1:
0f:f5:c8:a2:8d:7e:fc:64:b8:fc:ec:b5:ce:81:77:
4f:9d:a9:39:fa:84:e4:64:04:f6:54:fd:f2:8f:c5:
02:65:19:1c:bf:16:39:5b:e2:9d:39:a4:ee:e0:fe:
11:81:21:40:ef:f3:e0:75:ff:75:6c:05:03:12:f4:
ae:0a:e1:be:6c:32:bd:6f:e7:19:69:b4:d0:40:5e:
1d:43:af:af:f6:1d:4c:5d:d3:56:6b:73:ef:4c:c2:
4c:d4:c9:94:1e:17:c7:9c:fd:c9:54:7c:ce:73:b4:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:02:1A:90:05:A1:33:77:F2:8C:32:91:D1:A2:92:26:35:F7:A6:8C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XgIakAWhM3fyjDKR0aKSJjX3pow.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f1:9a:87:a2:2a:81:99:8a:01:e1:29:7b:85:7e:b2:4a:01:
88:86:c4:f6:5e:6d:86:48:3c:f7:b2:5b:6b:31:60:93:a2:26:
12:69:22:f4:14:ea:27:4f:23:cb:9a:b3:c3:16:b3:4b:48:94:
d5:29:b6:1e:84:de:bd:7c:9f:70:f7:b6:5f:5d:36:50:1b:0b:
b4:e5:75:5a:9e:0f:aa:3f:c0:19:2b:45:4e:ec:e3:98:86:60:
e5:cc:06:e4:e9:d7:12:ea:8e:9b:cd:cc:24:3d:71:d4:b1:11:
54:24:ec:50:01:c5:cb:d1:a2:a1:c9:a0:02:90:48:52:62:10:
79:9d:3c:b2:87:12:63:1d:6f:0f:56:f3:8e:5a:67:be:09:ea:
2f:09:ee:78:c3:e6:ed:e5:b6:ec:ee:20:42:c5:3f:d4:bd:da:
d3:7d:ae:81:58:fe:a5:2e:72:7a:64:6e:6c:1e:77:79:e3:6b:
5d:31:23:53:24:22:e9:fb:cb:5e:aa:ab:ae:7e:87:f1:94:93:
67:1b:ce:3a:53:17:84:a7:3d:09:20:fb:7a:45:93:49:6f:64:
97:6a:82:a0:17:a2:2c:89:0a:ab:a0:a7:30:45:2a:cb:e4:1b:
f0:08:90:c7:3f:24:00:33:e9:01:e4:26:3d:b3:fc:4f:21:9c:
b5:e9:50:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org