Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwWGFpRv8rQ10SHp7aDhSZ5xks8.roa
File: cwWGFpRv8rQ10SHp7aDhSZ5xks8.roa (raw, json)
Hash identifier: GvF7rbyf8PiCUo+NB6JXXdFzJ8ySy5zLn0gXK167W/w=
Subject key identifier: 73:05:86:16:94:6F:F2:B4:35:D1:21:E9:ED:A0:E1:49:9E:71:92:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1F79
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwWGFpRv8rQ10SHp7aDhSZ5xks8.roa
Signing time: Thu 08 Sep 2022 02:48:11 +0000
ROA not before: Thu 08 Sep 2022 02:48:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8057 (0x1f79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 8 02:48:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=73058616946FF2B435D121E9EDA0E1499E7192CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:0a:86:89:fe:9b:57:e4:9d:4e:c4:df:b0:
14:bc:2b:93:c0:e7:87:36:8d:48:46:0d:47:d3:dc:
b5:79:a3:d9:5b:f0:78:d5:4f:de:f6:04:46:75:98:
6d:33:10:d7:71:48:8b:61:c0:dc:b2:c7:45:d3:90:
c4:d3:09:84:f6:5b:63:27:ee:5c:d3:3a:14:96:93:
6a:1d:8f:36:a9:03:24:19:18:24:55:dd:1b:43:b0:
ec:48:9d:fb:a0:cd:3d:3f:ca:d3:40:02:27:10:65:
05:17:ad:52:23:61:8c:4e:c0:d7:3a:34:7e:ae:02:
f3:05:2f:da:99:96:09:d5:39:4e:72:8c:45:0b:c9:
31:b2:20:9b:98:39:08:12:6e:4a:b2:7e:64:b5:55:
76:95:d1:5f:8a:60:0d:c2:47:0e:b8:1b:27:3a:06:
51:c7:38:93:6b:b5:ca:7f:df:95:3f:0d:c7:39:5f:
65:b3:41:22:69:1e:65:c4:5c:13:08:df:e9:a8:be:
55:06:ce:34:32:c7:32:1a:69:c8:19:bd:d9:09:90:
5b:d9:40:e3:16:6c:8f:c6:f2:c6:47:ce:6c:44:d3:
ed:e0:10:f2:f2:67:64:b9:19:4b:77:82:17:61:30:
d4:7f:95:0b:37:30:e4:71:40:c4:a4:e2:d5:94:82:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:05:86:16:94:6F:F2:B4:35:D1:21:E9:ED:A0:E1:49:9E:71:92:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwWGFpRv8rQ10SHp7aDhSZ5xks8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.136.0/22
Signature Algorithm: sha256WithRSAEncryption
03:f3:15:8b:5d:c6:3e:0e:b8:24:4a:af:3a:de:83:eb:ee:6c:
65:bc:1d:04:23:f6:69:77:d2:a1:98:15:b4:04:06:8f:5b:db:
39:41:9b:d1:84:f0:6d:c6:aa:63:9e:96:b8:cc:ea:b8:d6:b6:
95:7e:f8:39:07:26:f2:83:ca:e2:42:49:fd:fe:0f:ab:5e:bf:
ae:ed:f8:2e:bb:6e:3f:70:d4:9c:99:ac:77:a2:5b:50:8b:aa:
8d:c1:42:ab:6b:c5:cd:9e:96:b7:e3:1c:a8:4b:a9:aa:99:4b:
39:84:36:27:9d:42:0c:81:17:96:32:81:c9:fc:04:4b:4b:b3:
23:29:69:8e:1b:56:e4:97:fd:09:af:52:4d:b3:31:a4:73:e9:
f9:e9:38:83:9b:98:9a:06:75:3e:dc:59:c5:3f:ce:4e:0d:d1:
d5:8a:0d:19:6a:d6:4e:e1:e0:d8:bf:ed:e3:f1:61:e3:10:5b:
c6:c1:8e:88:fd:c7:24:dd:f0:32:d5:e9:05:60:83:c1:e8:ae:
0e:53:af:20:a9:96:d1:d3:b3:ff:78:2c:b6:78:8e:9e:cd:24:
99:ce:31:7a:45:f4:54:29:bf:5e:76:9e:9c:c7:15:36:3f:37:
d6:85:f3:c9:88:b4:b1:35:e6:92:5c:14:d1:64:3e:12:03:4e:
b6:04:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org