Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z3SLI8aoYua0m7GLE6fHHFhYdXs.roa
File: Z3SLI8aoYua0m7GLE6fHHFhYdXs.roa (raw, json)
Hash identifier: 7r3wWSs7XhcU3yCIY0rE1EW1h35azxkw1rt/jJjKeu8=
Subject key identifier: 67:74:8B:23:C6:A8:62:E6:B4:9B:B1:8B:13:A7:C7:1C:58:58:75:7B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14E7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z3SLI8aoYua0m7GLE6fHHFhYdXs.roa
Signing time: Sun 07 Feb 2021 12:00:33 +0000
ROA not before: Sun 07 Feb 2021 12:00:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5351 (0x14e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:00:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=67748B23C6A862E6B49BB18B13A7C71C5858757B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1e:be:ee:8e:6d:7e:05:a9:8d:37:25:95:aa:
45:92:d4:46:1a:59:f7:3a:f8:af:95:53:1f:44:b9:
44:dd:a3:e7:60:30:97:1c:c3:da:f2:6d:8a:ef:4f:
73:1b:9e:2b:70:e2:82:e4:0f:72:41:f9:ca:02:6e:
eb:14:76:f8:be:40:50:1f:d8:2f:a2:cd:50:c1:f1:
0e:c4:7f:5e:56:5a:10:b2:93:d3:01:9c:ed:6c:4e:
6f:c4:b6:ff:84:66:ad:3d:e8:65:1c:8f:aa:c0:08:
66:fd:79:10:b3:75:83:7a:8d:2c:15:1e:82:72:be:
e0:83:be:5e:d7:16:0d:c6:e6:c4:46:98:4f:49:1b:
64:7a:a7:46:a5:4a:1b:ea:3d:65:9e:c1:50:23:e1:
98:0f:fb:29:8f:2b:21:55:44:83:dc:23:ae:6f:ef:
5d:e7:89:65:bb:9e:f6:54:ae:3a:8f:68:da:65:41:
e8:6b:ea:62:58:71:7b:a9:1e:4e:7b:79:dc:a0:50:
55:ea:47:6c:61:c7:45:b6:92:34:ec:eb:3d:f4:c2:
fe:af:57:84:e5:16:65:3c:45:93:1e:62:94:fd:7a:
44:82:4a:cb:15:cd:ba:36:18:40:58:65:91:e3:18:
a7:d0:28:28:f2:7a:ce:3f:cc:b2:5e:63:6c:dd:5e:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:74:8B:23:C6:A8:62:E6:B4:9B:B1:8B:13:A7:C7:1C:58:58:75:7B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z3SLI8aoYua0m7GLE6fHHFhYdXs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.165.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4a:43:90:33:a7:2c:3e:95:6b:1c:06:b0:a9:83:f7:35:0d:
64:c4:a4:b5:c2:87:66:03:bb:48:9a:bd:a5:45:b9:1c:1d:9e:
b1:1d:57:cf:80:c2:2e:91:81:4e:2d:cf:41:81:4e:31:fc:07:
68:02:14:78:76:ee:37:9b:9c:7d:9b:96:9a:fb:c9:73:13:39:
26:af:ba:59:f7:2e:2d:2e:2c:81:e9:64:78:fc:0a:0d:26:2d:
bf:6c:0c:ea:1e:d8:e6:f9:2e:12:03:5e:a0:d0:b9:60:e6:f2:
83:df:96:15:2e:e0:5c:c6:ea:3f:68:50:e8:9a:f2:7d:9f:76:
1a:83:76:82:f4:e6:4f:a4:dd:e3:05:71:5d:e6:48:0d:0a:dc:
d1:fc:c9:5f:62:b3:d9:90:b9:94:d7:79:9b:33:cb:58:f4:eb:
b7:35:bc:0c:fe:72:e2:62:0f:2c:7a:41:37:ad:88:c5:d0:72:
96:a7:60:c0:b3:66:36:77:df:fb:6f:f9:0e:76:a7:a7:a0:ec:
c7:3a:d9:ab:34:a9:bb:30:08:7d:de:4e:a9:7c:c7:8d:ad:46:
04:07:05:e4:3b:20:69:c1:32:5d:d0:84:1e:13:e3:fe:13:c9:
d1:f7:c3:90:78:7b:3b:cf:bf:5d:ac:d0:ad:65:c1:ae:16:f8:
8e:d5:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org