Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aH7xi_gFjGa7Tk6xZGMXtbHpztc.roa
File: aH7xi_gFjGa7Tk6xZGMXtbHpztc.roa (raw, json)
Hash identifier: IM5cMzNwXP6MPNk3sQvT/3YlpJXArIw29+iNULkWrdk=
Subject key identifier: 68:7E:F1:8B:F8:05:8C:66:BB:4E:4E:B1:64:63:17:B5:B1:E9:CE:D7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 143B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aH7xi_gFjGa7Tk6xZGMXtbHpztc.roa
Signing time: Sun 07 Feb 2021 11:57:52 +0000
ROA not before: Sun 07 Feb 2021 11:57:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5179 (0x143b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:52 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=687EF18BF8058C66BB4E4EB1646317B5B1E9CED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:f3:05:cc:75:5c:5d:92:aa:ac:10:7d:23:
c0:52:63:e8:8a:de:73:17:f1:c0:00:ab:07:ea:56:
34:33:3c:5b:e3:e5:f3:d7:64:12:d3:6d:b4:4c:e4:
bf:df:d3:c1:06:37:4e:9b:9a:3f:45:b7:9e:88:05:
6e:fe:8b:f5:bc:fd:59:06:8a:c5:e4:56:73:e1:a6:
20:33:d8:75:c7:80:bd:f0:95:f0:db:79:0a:9d:17:
dd:1d:a8:2b:3c:09:05:f7:ec:e2:8a:e3:ec:96:a0:
74:57:ba:b7:8a:25:1a:72:77:b1:e1:6b:0e:9a:39:
ec:91:54:26:f3:6a:2c:b0:ea:e5:48:b7:09:8c:03:
dc:cd:31:da:2d:42:30:bc:b7:1a:53:e2:d8:2c:26:
84:ce:ef:f0:ba:64:1a:0b:88:e2:70:72:b0:2c:cb:
a6:fd:9c:1c:0e:b7:e3:6d:6e:aa:79:4e:0e:c7:78:
44:ae:eb:51:8e:41:ac:ae:94:e0:81:78:ed:20:7f:
ab:bc:69:db:f0:94:1b:f4:2d:1f:51:7d:16:96:69:
d7:ae:03:84:e3:c8:14:2f:69:36:fc:b4:65:80:7b:
54:da:50:b7:e7:8c:32:3a:25:89:b2:88:60:ee:db:
f5:86:b1:f2:b7:7d:61:17:99:6e:58:b1:b7:74:3a:
b4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7E:F1:8B:F8:05:8C:66:BB:4E:4E:B1:64:63:17:B5:B1:E9:CE:D7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aH7xi_gFjGa7Tk6xZGMXtbHpztc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.176.0/22
Signature Algorithm: sha256WithRSAEncryption
22:5e:b3:92:cb:3e:71:b5:a6:62:4f:68:1a:a6:5a:80:0f:21:
c3:99:0b:43:f0:b9:a3:ac:a6:40:30:d0:0e:85:33:83:12:aa:
31:89:c4:42:7f:8c:3a:a0:91:df:53:80:d0:f1:51:6e:9b:be:
75:01:4f:03:d1:a2:79:6f:85:51:ad:eb:75:85:22:02:d4:44:
3f:15:e7:4c:56:7e:8e:96:77:1f:27:cd:39:35:cb:9f:b2:52:
b3:1a:8e:fb:fe:af:b1:65:e2:74:28:98:03:cc:17:b3:28:d8:
6c:3c:49:ed:b1:c0:fb:02:df:b7:2c:69:7a:24:d5:10:88:a7:
c7:47:3d:d6:95:21:1d:bc:74:45:82:e8:5f:0d:95:77:d4:d8:
9c:ca:e4:1a:4c:1d:4d:38:61:0a:f0:4b:a5:9a:85:a6:07:f8:
79:7f:88:63:d1:14:61:75:a0:c2:ca:35:35:71:16:3e:cb:99:
23:06:04:c6:7f:47:7e:78:77:e0:42:61:f7:cb:37:34:a1:7e:
eb:76:02:b1:4d:12:c7:80:6b:26:65:14:b5:39:df:3c:c2:bc:
b8:6e:21:b8:ab:c9:8d:b4:5b:1e:c4:39:88:50:51:50:a8:02:
a7:c3:ce:1b:ee:4f:6a:9f:51:08:62:61:23:86:e8:23:59:9a:
e7:02:a4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:23 2023 by rpki-client on console-ams.rpki-client.org