Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bzVlxreSP5LGdUWc3mgt4JFPNlM.roa
File: bzVlxreSP5LGdUWc3mgt4JFPNlM.roa (raw, json)
Hash identifier: HyA/0Mm2UuNcJ3aBx9zUK1QGqCnEVNq6ufwZxkKVVto=
Subject key identifier: 6F:35:65:C6:B7:92:3F:92:C6:75:45:9C:DE:68:2D:E0:91:4F:36:53
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1753
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bzVlxreSP5LGdUWc3mgt4JFPNlM.roa
Signing time: Sun 07 Feb 2021 12:18:23 +0000
ROA not before: Sun 07 Feb 2021 12:18:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5971 (0x1753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:18:23 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6F3565C6B7923F92C675459CDE682DE0914F3653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fa:15:60:b6:f2:b3:02:58:99:94:21:76:ba:
74:ef:ad:2e:50:9f:c9:13:5f:b5:e5:84:04:51:0c:
b5:ea:84:6d:60:e4:22:d7:96:81:3c:98:7c:5d:0d:
f9:41:2b:2b:4f:f3:01:b3:76:61:72:e2:d8:66:26:
69:ca:c7:dc:4c:28:1d:c8:ee:72:8f:27:66:52:3d:
4a:e7:15:10:7a:14:e4:61:6a:69:cb:8b:5e:8a:e5:
20:ab:81:b1:2f:db:f3:98:d8:41:6d:62:ec:6c:de:
fc:1b:88:b6:0a:fa:cb:b1:de:85:f6:f0:5a:fc:f2:
5b:dd:a2:f4:29:ba:e6:26:a5:78:b9:ed:e4:77:61:
2f:f8:cd:12:85:b9:2c:26:5a:0e:05:e8:82:e2:ed:
84:6c:38:37:83:f1:a3:79:71:ab:09:29:da:e1:fa:
dd:6f:47:27:6b:31:4f:03:27:06:ba:09:d9:0b:8b:
db:a2:75:cb:1f:27:03:21:61:33:8e:62:d0:6c:0c:
a8:1f:a3:6e:38:a4:7a:6b:06:ca:2c:cc:f8:47:b3:
7d:89:ef:e7:6b:97:eb:a1:d0:d1:1f:de:52:4c:37:
fa:a0:45:20:a1:77:4d:0c:78:f4:dd:88:77:b7:c9:
ff:ec:35:1e:8f:f2:0f:8d:fa:7a:18:87:af:cf:aa:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:35:65:C6:B7:92:3F:92:C6:75:45:9C:DE:68:2D:E0:91:4F:36:53
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bzVlxreSP5LGdUWc3mgt4JFPNlM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.36.0/22
Signature Algorithm: sha256WithRSAEncryption
85:4d:22:c1:71:89:f7:79:18:2c:f5:f2:1f:e5:41:6d:15:c8:
4a:bd:6c:80:b8:90:0e:85:f2:30:d3:4e:05:29:7c:32:5a:71:
c6:64:94:34:8b:dd:5c:4e:5c:25:cc:9f:b6:01:18:aa:c5:2e:
d3:e8:76:c6:86:55:b6:64:3f:14:26:3f:4d:9a:0a:73:68:e0:
64:85:e7:09:53:bf:96:59:10:1b:d6:c8:23:27:32:95:d7:93:
8a:b6:36:13:99:a3:3a:da:1b:ee:c0:7b:32:0c:2f:15:f8:02:
76:20:99:f3:29:68:b9:82:71:4b:1a:ee:ba:4d:31:dc:52:07:
6a:b3:25:6e:35:8d:ea:bb:18:9d:96:6c:b2:dc:a0:ae:0e:a5:
a7:13:c7:3a:97:ec:54:cb:2d:27:b2:53:3b:cc:36:ed:d4:53:
5a:f8:1d:54:d2:05:94:f9:d7:4c:ea:c0:c1:16:53:e9:07:3e:
97:d4:4b:66:f8:4d:f2:62:64:ac:c5:ed:5a:98:8f:ec:fc:80:
39:18:38:a4:9b:fd:be:32:65:5f:a6:de:3e:c3:db:43:71:e0:
3a:93:d7:23:1d:fb:28:45:e9:4a:f1:6b:e5:53:57:4f:9c:05:
47:2a:1a:cc:c2:00:d8:a8:ef:3a:6a:fb:02:e8:a9:93:bb:a3:
ac:a2:ce:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org