Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ckm8brnOPMhaPYZa7En23uwS-cM.roa
File: ckm8brnOPMhaPYZa7En23uwS-cM.roa (raw, json)
Hash identifier: zlkxO1FKlQNbvYaFdVpqcfZBsL6A7Z6Xjz68H4FWfKM=
Subject key identifier: 72:49:BC:6E:B9:CE:3C:C8:5A:3D:86:5A:EC:49:F6:DE:EC:12:F9:C3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15F1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ckm8brnOPMhaPYZa7En23uwS-cM.roa
Signing time: Sun 07 Feb 2021 12:07:23 +0000
ROA not before: Sun 07 Feb 2021 12:07:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5617 (0x15f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:07:23 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7249BC6EB9CE3CC85A3D865AEC49F6DEEC12F9C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:db:fe:af:b7:9d:fe:25:e3:4b:bf:a0:c1:
4b:f8:fc:7a:31:a1:09:f8:5f:62:c3:2f:22:98:8e:
4e:e5:bb:d7:b5:ee:df:f9:bd:92:09:12:f7:a9:bd:
68:a1:32:a9:d9:4c:6a:12:a6:e7:8e:fc:c2:50:58:
b6:9a:3a:e1:49:e7:e6:4d:98:2c:97:96:86:2e:87:
6c:fc:ac:9d:41:9c:d8:a2:0a:ae:94:23:d4:88:f2:
25:56:97:4c:ff:21:28:59:27:a6:ef:1a:53:38:b0:
ae:91:35:29:41:3f:96:79:08:98:e8:29:76:ba:e3:
a5:d0:21:31:5d:74:0e:05:95:8f:3d:d8:c4:2a:7f:
21:ce:f3:89:d5:66:22:33:bb:b5:ee:2f:34:e5:3d:
4d:a7:e4:1a:3d:b5:f2:fa:cd:83:47:68:ad:34:3f:
27:84:68:31:3d:55:34:c4:23:a8:3a:e6:82:71:78:
86:d2:51:ec:d2:95:3f:a8:f7:af:3d:f5:b2:a5:16:
53:56:8c:86:08:bd:f0:f0:42:8f:2b:c9:ac:c3:af:
8d:72:e5:1b:aa:25:cf:2f:61:b9:f6:f4:44:65:4f:
b8:14:aa:21:39:a1:e5:49:a6:d0:a4:0d:de:df:c0:
2e:68:75:7c:7d:d0:95:1b:73:05:b4:62:2b:7f:f6:
b2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:49:BC:6E:B9:CE:3C:C8:5A:3D:86:5A:EC:49:F6:DE:EC:12:F9:C3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ckm8brnOPMhaPYZa7En23uwS-cM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:dd:3a:3f:23:5d:36:10:fa:2f:c0:e1:7b:97:0d:8a:99:76:
fb:c4:96:3d:5e:3f:e0:0c:40:8c:a6:8f:cf:1b:31:00:78:57:
fb:9a:18:26:ff:1b:7e:7e:41:5e:7d:ee:e9:1a:1e:b0:49:d4:
5e:9a:21:eb:3f:f7:5b:8b:7b:68:67:55:28:06:e1:c6:d5:3c:
67:77:c9:13:a0:07:95:59:f6:72:58:34:b1:ed:97:54:fc:4b:
9f:6a:69:83:c5:ac:a6:bc:e1:d3:80:46:d8:27:a8:fe:4d:98:
e5:8f:46:fb:6d:86:5f:b7:92:05:ce:96:4f:8a:ef:7c:fd:17:
48:7d:50:7c:ce:8c:14:a5:db:b7:d7:b6:87:03:c9:8b:09:cd:
7c:b0:88:36:38:75:aa:8a:b2:72:a6:b4:e9:2b:ac:56:00:22:
b3:c5:71:c0:4e:5b:a0:00:9f:0a:60:b6:cd:5e:ad:de:4d:66:
82:5e:94:32:bb:62:af:b3:83:e5:72:54:f1:48:6a:2f:f8:77:
fe:6f:b4:04:bd:48:5a:99:0c:a2:41:1f:20:fa:ff:69:44:cf:
1c:59:6f:35:bb:06:45:94:c6:61:cf:2f:24:92:43:aa:95:97:
fa:ec:ae:a5:bc:15:65:81:e8:08:be:bb:41:6b:87:9f:a1:87:
ba:55:d5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org