Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ba3KWc7jYrUMtnwkpQsJh5vUDdA.roa
File: ba3KWc7jYrUMtnwkpQsJh5vUDdA.roa (raw, json)
Hash identifier: 1G7pSeemepNqoHswiC4yYTIUryQYysosC0w8Vl6p284=
Subject key identifier: 6D:AD:CA:59:CE:E3:62:B5:0C:B6:7C:24:A5:0B:09:87:9B:D4:0D:D0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 180B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ba3KWc7jYrUMtnwkpQsJh5vUDdA.roa
Signing time: Sun 07 Feb 2021 12:25:47 +0000
ROA not before: Sun 07 Feb 2021 12:25:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.146.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6155 (0x180b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:25:47 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6DADCA59CEE362B50CB67C24A50B09879BD40DD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:5a:c9:06:b6:06:57:f8:ab:87:f1:c1:68:
80:34:ec:3f:95:54:91:2c:bd:9e:b5:2c:14:13:47:
7b:1d:70:05:81:60:35:c4:48:59:ff:68:be:3d:d3:
d5:d3:20:23:fc:55:5c:d0:58:76:c7:ce:62:36:c7:
11:58:13:61:aa:32:d5:5e:0d:d2:e4:d2:25:e6:d4:
79:f6:7b:b7:19:06:03:e2:14:32:11:c5:e8:79:3a:
11:3d:3a:42:ac:19:66:cc:2f:75:ff:78:48:43:17:
bd:ff:d0:83:6b:6f:71:a4:62:ad:b4:f8:bf:08:c0:
97:0e:34:b5:72:82:2b:0a:c3:48:ab:77:83:b2:ad:
8f:b4:5e:80:e6:08:8c:71:e3:dd:a5:bd:38:25:38:
61:47:a4:99:f7:2e:bd:58:f9:1e:99:aa:13:38:f8:
af:bc:ef:6b:18:a1:28:4a:25:a0:67:77:de:56:7b:
12:3c:55:db:30:34:87:11:aa:f9:be:ce:f7:9e:e5:
d4:c0:a1:62:8b:05:d7:e1:5e:99:7b:8e:8b:fb:b4:
4d:a7:d4:2c:58:43:a8:aa:a2:16:a0:69:11:b4:85:
d4:9f:47:c1:b9:11:23:43:c2:81:91:8b:f8:19:c6:
a1:14:dd:97:97:c0:47:7a:14:5c:07:7d:a2:f0:9e:
1a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AD:CA:59:CE:E3:62:B5:0C:B6:7C:24:A5:0B:09:87:9B:D4:0D:D0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ba3KWc7jYrUMtnwkpQsJh5vUDdA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.146.0/23
Signature Algorithm: sha256WithRSAEncryption
74:43:28:33:c6:02:e4:61:09:5b:88:d7:fe:05:64:a0:ff:c7:
a9:f6:ad:39:e4:bc:f0:a4:9e:a1:ca:b3:b7:50:02:04:d5:fc:
13:f0:bb:fe:4a:2a:8c:92:93:a3:4f:1e:5e:fd:97:d5:ed:bb:
84:93:df:97:40:aa:6b:83:4b:12:ac:26:9f:60:d7:d7:9e:ce:
dd:98:3f:17:51:2a:60:62:bf:af:16:89:a3:9b:03:49:b3:9c:
28:82:56:88:a8:12:f0:64:e1:f7:5e:e5:89:16:1e:0e:6d:53:
72:7c:3b:28:9c:a0:2d:cb:55:1e:d2:57:a4:aa:f6:fd:85:28:
95:ef:6a:e5:0c:d5:72:ae:fd:fa:97:a1:4f:82:2f:67:9c:24:
05:dc:09:58:fd:e8:c6:56:29:d4:b3:13:0d:e0:b4:c3:63:d9:
d8:a3:5e:7d:9d:dc:74:55:2e:50:e2:de:b6:20:ad:d0:1b:cd:
4b:2c:09:d1:34:9b:87:8d:0d:36:62:f6:86:c8:e3:60:08:15:
12:db:52:45:ac:20:0e:7a:0b:f5:5f:c8:4c:3e:df:ff:6f:73:
0f:c8:6a:cf:44:e5:eb:f7:7c:00:c5:20:70:c4:7d:2d:d0:50:
60:76:a4:fe:b2:65:9a:a8:8a:7c:78:8e:ae:76:01:c1:c1:2c:
ad:fa:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org