Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZQhoZ2dDQ4BEoUCmrT4xR3CNRgQ.roa
File: ZQhoZ2dDQ4BEoUCmrT4xR3CNRgQ.roa (raw, json)
Hash identifier: lzp39+yIHpzyGjz+RIl7ZWGACu71FgikR63M2u8aMf0=
Subject key identifier: 65:08:68:67:67:43:43:80:44:A1:40:A6:AD:3E:31:47:70:8D:46:04
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZQhoZ2dDQ4BEoUCmrT4xR3CNRgQ.roa
Signing time: Thu 15 Sep 2022 02:44:40 +0000
ROA not before: Thu 15 Sep 2022 02:44:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.148.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=650868676743438044A140A6AD3E3147708D4604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:19:d0:d3:b3:d9:ad:dd:ff:f4:e1:6d:ee:
7a:22:84:b0:87:0c:ca:97:b0:30:f2:28:c9:91:f1:
ea:d3:0c:fc:63:50:56:e3:68:0f:c4:05:79:6e:ba:
2b:04:0a:fc:de:18:05:76:dd:bf:06:ec:54:c8:19:
09:d9:2e:53:04:b6:10:1f:65:c6:cf:cf:7c:01:09:
81:03:62:93:47:0e:15:42:30:66:38:ff:5c:f3:63:
87:cd:b8:74:56:75:dc:58:3c:80:ce:8d:a5:ef:e9:
55:6d:de:b4:f5:60:2d:5a:54:98:53:40:bf:29:76:
b2:d8:e0:d1:19:1b:27:fb:ee:5f:bc:4b:f6:0e:b5:
78:f4:1a:6f:e7:c2:3b:5c:30:7d:ff:d9:d3:6c:5c:
c5:19:4b:0f:15:b6:3a:6a:20:ce:93:09:df:29:78:
c7:ed:e5:96:52:ea:b8:01:44:89:3e:2c:3f:dc:7f:
b4:cd:4b:cc:d6:ad:57:56:aa:39:bd:07:73:9c:b5:
7c:1c:f6:e3:33:58:63:74:ef:a7:d8:71:78:5f:5f:
d1:fa:41:d0:21:4e:d7:ec:35:ff:19:2b:84:6f:a6:
af:f5:b3:62:be:91:7c:a2:8c:2f:19:17:d9:7c:24:
f2:90:1c:38:ae:00:4a:f2:34:07:77:e5:ec:bb:92:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:68:67:67:43:43:80:44:A1:40:A6:AD:3E:31:47:70:8D:46:04
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZQhoZ2dDQ4BEoUCmrT4xR3CNRgQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.148.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:a6:f5:86:8c:96:9f:78:7d:18:a9:88:00:eb:d2:70:c4:c9:
ce:f2:3b:bc:fa:08:f0:5a:0d:a1:f7:16:8f:ea:24:6f:ae:94:
1f:1f:9e:0b:06:63:82:6c:8e:ff:6d:7e:57:52:e8:79:c3:a3:
3a:f0:c0:72:c4:73:0f:39:07:76:74:1a:6d:66:01:ae:15:73:
67:23:a2:e5:c8:2a:3b:1b:98:d7:a7:59:a3:97:7e:57:5e:19:
69:1e:63:91:d6:7e:43:02:5f:48:92:2c:49:9b:41:15:ae:3a:
bb:c6:c9:f2:3a:49:c6:7c:97:0c:26:5f:5e:eb:f8:5c:95:7a:
3c:62:b9:c0:58:20:27:f1:60:55:1e:2f:16:34:59:f8:1c:8b:
c5:6f:1c:49:44:ad:84:5d:55:88:89:b1:5c:de:de:b5:37:cf:
6b:af:70:27:32:f4:c8:f7:28:e7:8f:e6:68:2a:a4:22:35:29:
f0:64:cb:ed:02:4c:20:b9:d6:97:b0:ce:b5:84:4c:e6:46:35:
0b:9e:8b:3a:a0:18:4b:e7:4f:e9:2e:a3:9b:e9:27:ee:6f:d1:
19:54:ca:90:98:1b:1a:3a:6e:8d:f8:4e:86:66:19:47:8f:c2:
8a:e4:81:91:38:30:e4:0c:e4:7b:cd:e3:fb:ef:2d:39:18:3f:
8a:e3:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org