Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XnWyGOzKoxRg81jhInhUgY15z18.roa
File: XnWyGOzKoxRg81jhInhUgY15z18.roa (raw, json)
Hash identifier: BqKFcwsB0AFvO0XFM3FxUWACQDTLtKbyS838oexDrhs=
Subject key identifier: 5E:75:B2:18:EC:CA:A3:14:60:F3:58:E1:22:78:54:81:8D:79:CF:5F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14EB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XnWyGOzKoxRg81jhInhUgY15z18.roa
Signing time: Sun 07 Feb 2021 12:00:38 +0000
ROA not before: Sun 07 Feb 2021 12:00:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5355 (0x14eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:00:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5E75B218ECCAA31460F358E1227854818D79CF5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:e2:e7:b7:bc:5d:c2:f1:8c:c6:cd:16:15:
5c:59:ef:7b:4a:45:b6:13:0e:2d:25:ab:6a:53:d0:
47:b5:5d:2f:29:05:17:cf:ed:6a:f8:44:1d:d9:0a:
cf:cb:83:91:fd:cc:68:18:f9:3c:30:fc:3c:06:85:
7e:3a:d7:5f:6b:0e:9d:8a:eb:27:b5:81:08:79:cf:
44:aa:ee:a0:6d:b0:c3:57:9d:91:e8:68:1b:25:b4:
58:c6:d1:3e:0b:dc:ea:2d:a4:52:a8:17:e0:a7:22:
ba:09:75:3b:02:ed:d0:32:aa:b1:aa:67:6d:dd:9e:
9a:89:f5:6c:18:4d:91:2f:9b:8c:fb:b6:36:0d:75:
3a:39:b3:b0:f5:59:09:91:5d:9e:5c:e6:3a:11:fa:
52:ff:63:16:0b:41:06:bd:5b:14:9b:b0:c4:a4:32:
02:e7:0a:07:1d:4e:ef:7c:05:db:99:ad:b5:ab:32:
4f:fc:0f:18:e8:4e:4f:bf:be:61:98:45:7e:8f:12:
23:04:79:29:b0:fa:97:f1:95:84:95:6e:5e:e7:03:
6a:21:01:95:86:20:fa:0e:0b:b8:ce:8f:c8:c9:45:
d4:1b:1a:c3:66:f7:71:c5:58:6f:20:ab:81:ef:2b:
48:41:b6:1f:ac:1a:23:78:06:e6:5c:89:78:37:5b:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:75:B2:18:EC:CA:A3:14:60:F3:58:E1:22:78:54:81:8D:79:CF:5F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XnWyGOzKoxRg81jhInhUgY15z18.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.167.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a5:e0:64:5e:1f:2d:49:50:e1:eb:f9:bb:b9:e5:6a:00:c0:
f3:9f:c6:6f:39:69:b8:0e:86:c8:a6:44:fb:65:b1:85:d3:c3:
96:7c:db:b0:d1:3e:29:a9:36:d3:ae:a2:03:0f:0b:69:93:07:
29:e4:9d:70:39:67:7e:b6:ad:1a:db:be:d3:9e:d5:9e:62:c4:
8f:1c:68:0d:11:89:d9:ef:57:93:74:1d:3f:be:81:b7:84:5c:
22:9b:94:77:90:76:56:99:ff:6c:73:07:12:eb:03:64:b0:30:
6f:89:f8:8f:b0:9c:bc:a7:06:4c:5c:8e:5a:58:35:7e:0e:71:
f8:b1:36:15:c4:bf:23:6c:c2:fa:11:d7:30:7c:a8:4a:c7:91:
99:b0:de:c6:61:c7:f9:61:4f:17:0e:85:79:7f:93:1b:4a:c6:
4f:9d:ef:72:7a:ba:5d:ca:80:0a:c1:e5:6f:67:53:b1:00:8a:
88:92:5e:5b:1f:7d:1f:21:70:a1:d6:71:c1:75:85:f4:37:67:
1b:ab:7c:c8:1c:6f:a4:4e:2b:61:18:d9:62:30:47:ce:7c:ff:
85:85:8a:4b:f9:12:a4:36:34:c0:38:f9:08:0b:69:66:82:73:
69:43:aa:a0:9b:b5:a0:6e:62:96:f1:48:2a:ae:f0:c1:48:3e:
a7:54:1b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:21 2023 by rpki-client on console-ams.rpki-client.org