Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cJudyTIrf6Lfm9NhK1x-2ZrfJr0.roa
File: cJudyTIrf6Lfm9NhK1x-2ZrfJr0.roa (raw, json)
Hash identifier: AytfiHUFcuUngmoKipghMwGPVh0sRf1nDiWL5NhfSUs=
Subject key identifier: 70:9B:9D:C9:32:2B:7F:A2:DF:9B:D3:61:2B:5C:7E:D9:9A:DF:26:BD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14E5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cJudyTIrf6Lfm9NhK1x-2ZrfJr0.roa
Signing time: Sun 07 Feb 2021 12:00:31 +0000
ROA not before: Sun 07 Feb 2021 12:00:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5349 (0x14e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:00:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=709B9DC9322B7FA2DF9BD3612B5C7ED99ADF26BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:71:21:04:82:b0:ce:c8:02:c2:e1:15:64:
b6:65:ef:d3:6f:1d:31:6d:28:2d:95:88:6d:6d:c4:
b7:b1:d2:73:41:ac:b2:86:37:7d:a3:54:7a:2a:f8:
69:7d:b3:ec:f4:53:c9:35:c6:96:1d:5c:d5:53:3c:
11:ed:d4:d2:95:ea:a0:12:6e:bf:aa:ec:65:97:d2:
92:ae:42:54:1d:bf:3f:16:d9:de:53:0d:9b:0d:03:
4f:63:6a:bf:72:05:50:72:51:12:71:f2:5b:44:3b:
42:f5:58:d1:e9:97:51:0e:e2:93:a2:51:8d:a9:34:
2f:40:a2:b8:d9:1d:6d:d8:f1:26:6e:51:ca:f7:41:
44:bd:7d:86:35:4c:60:d6:21:17:3f:fc:23:2a:3c:
00:7d:9e:53:83:8f:3f:23:5c:e4:68:0c:9d:06:aa:
35:e8:06:36:0b:27:f7:ec:88:45:52:30:a8:3c:dc:
18:1e:23:4a:9b:5c:50:1e:a6:9c:58:c5:14:1f:ee:
02:50:11:5e:0c:ae:c4:a9:7c:ac:91:3e:5c:3b:f0:
01:36:bc:ac:c4:f4:cc:e0:04:e8:7b:cd:f0:31:e2:
e0:3a:db:ae:6b:5d:64:84:7a:6d:98:b0:85:2c:64:
62:63:e6:28:29:f4:07:ea:95:42:81:72:0d:91:78:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9B:9D:C9:32:2B:7F:A2:DF:9B:D3:61:2B:5C:7E:D9:9A:DF:26:BD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cJudyTIrf6Lfm9NhK1x-2ZrfJr0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.151.0/24
Signature Algorithm: sha256WithRSAEncryption
15:12:10:36:38:d3:68:a9:a8:a9:3e:f4:1d:62:de:bd:3b:e9:
ea:4f:99:6a:7c:4a:b7:98:ea:d5:62:66:7d:de:f3:e6:c7:89:
9b:76:85:24:5e:67:a8:4f:15:fa:98:d5:5d:72:d9:c4:6a:63:
ab:07:5b:52:8b:d0:65:d6:cf:5f:5c:bc:10:93:3c:e7:de:a6:
20:39:61:95:2e:0d:5b:28:14:f0:e7:4c:72:47:60:36:f3:c5:
cd:00:84:d2:77:ba:06:58:d7:58:dd:66:b0:a5:c6:9d:09:89:
e2:bb:39:37:26:74:75:6d:11:21:59:2e:a4:9f:b8:f0:8b:f7:
c3:3a:13:91:31:2a:50:a8:7f:06:8f:b0:53:34:8a:fc:3f:26:
f2:1d:fb:26:97:fe:db:ab:06:72:cd:c1:2c:06:aa:17:b8:62:
37:18:f3:af:e3:fd:cb:ff:e4:37:a0:46:db:09:31:d8:d0:cc:
68:34:4b:57:2d:9a:19:eb:97:78:1a:dc:03:bc:cb:5c:8f:dc:
82:55:16:90:2c:d1:9e:04:7b:15:46:0e:7d:e4:84:77:97:c7:
ce:9e:cf:5c:62:6a:01:71:be:58:8d:88:bc:aa:d5:ab:f4:90:
ca:98:b3:a8:af:e3:6e:33:da:a1:bc:31:51:d0:ce:12:7b:c4:
94:59:4c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org