Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bdquIPNRmm6Hp_F21HJ0MgbZugM.roa
File: bdquIPNRmm6Hp_F21HJ0MgbZugM.roa (raw, json)
Hash identifier: djGceLR+aHB2DBx2+PtKUaR5zWal/FHEFJMvlqj1sF8=
Subject key identifier: 6D:DA:AE:20:F3:51:9A:6E:87:A7:F1:76:D4:72:74:32:06:D9:BA:03
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bdquIPNRmm6Hp_F21HJ0MgbZugM.roa
Signing time: Thu 15 Sep 2022 02:45:50 +0000
ROA not before: Thu 15 Sep 2022 02:45:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6DDAAE20F3519A6E87A7F176D472743206D9BA03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:1b:2e:96:0c:57:16:18:76:b4:f1:ac:0e:
a8:6e:3f:8a:69:ee:cd:af:82:5a:55:e6:6d:97:44:
57:d0:03:fc:e7:35:83:71:35:61:a1:4d:71:ed:9b:
6d:bb:9f:eb:d7:6c:89:12:4f:b8:35:e0:b0:34:cd:
9b:94:dc:72:23:a2:40:0d:61:4f:b8:39:36:15:69:
07:47:7d:20:0c:dc:8d:05:af:a0:00:1b:b8:34:50:
09:fb:5f:1c:38:3a:f7:25:a5:23:f8:08:fd:95:97:
37:f9:68:75:6e:8e:20:7d:60:d1:43:be:58:d3:d3:
09:45:88:f0:2d:75:1d:c3:95:88:04:d6:c2:78:d2:
53:4a:d4:2b:bd:4d:a8:28:e7:50:af:63:03:52:04:
17:c9:d7:e0:6b:f1:3d:a5:6c:b8:6f:a3:dd:83:c1:
39:9f:64:d4:90:f6:d9:89:6c:cc:21:8e:b2:2e:1d:
cb:7b:cb:02:94:03:ce:f8:69:71:df:fb:e4:4f:b4:
7b:ad:6d:e8:d1:0d:14:06:a8:74:19:45:5e:28:cd:
6c:2d:42:dd:a5:2c:23:72:73:34:0c:84:52:39:c3:
b5:28:9f:39:d2:ad:19:a9:fe:f6:49:4c:f2:11:34:
a4:9c:84:fd:77:c6:c4:63:bf:3c:e1:66:34:74:2d:
01:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DA:AE:20:F3:51:9A:6E:87:A7:F1:76:D4:72:74:32:06:D9:BA:03
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bdquIPNRmm6Hp_F21HJ0MgbZugM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.98.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f2:ab:80:e7:f7:7a:60:d5:02:b6:fd:98:0a:9b:0b:08:7f:
4b:4b:16:75:19:43:20:a1:8f:d2:a7:8a:e1:03:c8:34:ac:0a:
31:31:82:c2:f9:f2:3d:8f:8d:7e:86:c5:d5:ae:da:d7:25:b0:
0a:55:8f:87:f1:3b:4f:21:fe:5b:ad:cc:41:4b:bb:01:f5:ec:
a6:83:57:cc:64:14:31:a7:1d:c3:37:29:ac:dd:26:b6:98:e3:
cd:8c:6b:45:9a:7d:9b:8c:17:5e:dc:d0:bd:0d:cf:62:99:62:
26:59:ce:59:48:04:d1:eb:36:50:9a:33:0e:2a:20:58:89:4d:
c8:13:bd:80:63:32:e4:65:b6:5a:54:27:c0:5b:6a:18:8b:cc:
df:23:4e:12:80:06:b5:13:8f:81:2a:05:64:74:52:8e:d7:95:
34:8f:eb:01:0d:f8:2f:c2:1c:4f:ca:21:26:85:a3:21:98:92:
e9:ed:53:9c:b1:e8:b1:bf:e8:49:94:1a:e5:32:05:84:98:61:
a5:7a:1b:45:14:4f:59:a0:f1:42:19:60:b0:7b:ab:18:ef:3e:
09:af:b6:19:a2:2b:16:52:48:2e:11:1a:cd:a2:91:a2:32:9f:
5d:7b:76:4e:9a:af:7c:55:cc:9a:d8:ab:f0:bf:29:89:bb:ad:
ab:62:56:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org