Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y1WPtmDS8e4Z-iJIooqDQvAdBi4.roa
File: Y1WPtmDS8e4Z-iJIooqDQvAdBi4.roa (raw, json)
Hash identifier: fpIG7snpN10ww0jr+iHBwjDky5ebxvmPHYgbGQRv060=
Subject key identifier: 63:55:8F:B6:60:D2:F1:EE:19:FA:22:48:A2:8A:83:42:F0:1D:06:2E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CB4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y1WPtmDS8e4Z-iJIooqDQvAdBi4.roa
Signing time: Wed 29 Sep 2021 02:48:04 +0000
ROA not before: Wed 29 Sep 2021 02:48:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.50.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7348 (0x1cb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=63558FB660D2F1EE19FA2248A28A8342F01D062E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3f:50:60:1d:c8:01:a7:22:b8:6d:47:31:38:
3a:28:1b:fb:33:ff:e6:cf:a0:38:12:9e:72:cf:b7:
a1:13:1c:f5:d8:cb:54:ef:76:6e:8c:47:de:2d:1f:
7e:7c:82:1a:d1:3e:9c:9c:db:08:e5:c5:aa:46:3b:
9f:e4:ac:b4:3a:6e:b8:ef:02:d8:2a:c9:57:9c:d0:
73:f3:b7:84:72:5d:18:ba:a4:1f:20:c8:4a:1f:3a:
d0:ad:4f:a1:28:16:e0:85:48:2c:7e:ba:f4:8a:ed:
7d:8a:d2:26:65:c6:de:73:8e:a7:dd:40:dc:f7:7f:
25:9a:18:2a:63:0d:5a:37:72:ea:ed:a2:da:c8:9f:
c7:58:7c:8c:06:d9:34:c7:37:e7:7d:2d:53:cc:c3:
7b:65:5e:b4:50:b0:78:d7:31:ac:ce:46:b6:79:7c:
f9:27:50:2e:9a:b6:6a:8b:cc:52:b6:48:16:c0:a4:
3a:ad:34:30:7e:16:01:73:42:ca:34:ed:d5:88:4d:
0c:67:d4:a6:c1:b8:02:ef:7a:e1:02:59:a7:65:8e:
1b:13:ce:1a:91:89:2b:0f:e9:05:9e:f2:82:77:75:
0d:b1:31:fc:7d:f4:d2:b9:ea:1d:bb:3a:f0:3f:1a:
e6:2e:25:9a:f8:37:8f:e3:73:c8:9d:21:3d:88:2f:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:55:8F:B6:60:D2:F1:EE:19:FA:22:48:A2:8A:83:42:F0:1D:06:2E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y1WPtmDS8e4Z-iJIooqDQvAdBi4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.50.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:d7:23:df:43:d1:ab:9d:e7:ee:f1:ce:25:f9:be:ad:7b:73:
12:fb:ca:1a:97:c9:09:9f:bc:3a:a9:18:51:dd:97:06:7c:6d:
a7:70:e4:75:b0:8a:28:36:15:7d:a6:54:5e:ef:cb:0f:c4:86:
68:7f:cc:69:3a:22:ff:a3:ee:a1:0b:80:a5:24:c1:3e:0e:4c:
85:b5:1f:c5:59:80:f9:d3:e4:ba:eb:df:c2:f0:cc:5c:2e:f8:
35:18:ef:65:c7:b5:f9:e6:64:60:54:b6:70:13:84:3f:09:6e:
28:5c:11:0c:25:26:5c:f5:c6:b1:94:15:25:4f:eb:85:a4:b6:
3e:0f:e2:bd:46:03:0b:75:e3:74:da:96:c7:5e:3f:8c:2f:fa:
2e:3a:52:9b:08:0e:01:70:2a:32:97:1e:3b:52:10:98:86:53:
67:10:42:e9:0e:f5:ba:5e:38:d4:89:64:ce:ab:20:8e:30:ed:
ef:fc:cf:4b:6a:d6:b8:2d:58:2b:1f:bb:a0:42:59:5b:d7:03:
06:94:6f:cc:69:03:d0:62:42:7f:04:c2:e1:ee:86:dd:1f:92:
9b:b5:8b:c7:50:fc:fd:5d:2e:df:88:50:75:32:eb:21:6f:3f:
49:5e:03:8f:44:82:53:ca:69:ec:a9:2e:f6:b4:ed:e4:52:de:
51:66:0b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org