Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dFvMRuSofwYBMUaWGziA3io01U0.roa
File: dFvMRuSofwYBMUaWGziA3io01U0.roa (raw, json)
Hash identifier: vlc7I4YPNy16SSxvSUChJKbiWDBdXS1NxSLcDHbU41E=
Subject key identifier: 74:5B:CC:46:E4:A8:7F:06:01:31:46:96:1B:38:80:DE:2A:34:D5:4D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1897
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dFvMRuSofwYBMUaWGziA3io01U0.roa
Signing time: Sun 07 Feb 2021 12:47:35 +0000
ROA not before: Sun 07 Feb 2021 12:47:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6295 (0x1897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:47:35 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=745BCC46E4A87F06013146961B3880DE2A34D54D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:8b:3b:01:09:a9:27:a8:4c:f6:81:61:bc:
54:e8:21:5f:5b:c6:c9:1e:ce:56:b2:0b:8f:c4:6f:
1c:9e:ee:64:e2:7a:e9:37:e4:ac:f5:7b:3c:96:93:
52:b9:bd:51:b6:cb:bd:15:8b:44:f6:7f:24:85:ec:
7b:78:93:7c:0a:aa:37:f4:35:4a:24:dd:7b:2d:3e:
38:c7:15:4c:f8:3e:34:6c:84:5f:ea:ed:54:55:b5:
87:54:91:fe:e5:00:bd:3f:0b:0a:7c:64:3f:fa:d0:
6b:29:ef:c8:0f:51:76:85:6c:3c:18:39:4f:c7:88:
78:a6:c0:df:fb:29:71:35:20:7d:f8:f0:6e:2b:96:
ce:1c:c7:70:4d:aa:f1:7b:52:56:16:42:75:17:04:
36:7a:c4:af:ed:77:7a:0c:2a:e5:23:a9:13:64:66:
17:03:6e:f3:71:75:22:56:61:f9:f8:c5:24:ce:90:
f2:04:bc:f6:fe:16:56:c7:21:e7:a5:4d:22:f0:db:
8f:6b:f3:a7:b4:8a:79:bc:ca:7d:4b:90:89:b4:4a:
36:b2:0d:60:2a:71:50:ff:65:94:50:2b:21:24:b7:
49:01:51:fa:4d:fe:d9:97:7f:2d:18:f7:9a:f2:ef:
7b:cb:bb:e7:4d:77:ed:94:c4:6a:9b:10:8a:70:97:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5B:CC:46:E4:A8:7F:06:01:31:46:96:1B:38:80:DE:2A:34:D5:4D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dFvMRuSofwYBMUaWGziA3io01U0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.101.0/24
Signature Algorithm: sha256WithRSAEncryption
24:46:57:90:63:7b:ba:a1:22:c6:e9:1e:31:1f:8b:e0:5e:03:
cc:20:4a:f9:46:8f:31:c8:6a:d7:5f:d1:9e:e9:ab:b4:e4:3a:
69:50:03:12:11:b5:88:d5:74:87:7c:df:e3:68:67:fd:3b:31:
af:e4:d0:24:fe:d0:13:ab:8f:e8:26:7e:66:b5:54:af:60:94:
ab:f0:b3:a7:95:93:14:ff:19:bc:fd:b5:ef:f2:ec:ec:53:04:
b3:0c:8f:35:4e:d6:77:db:04:6e:82:18:b0:ef:78:5f:e2:50:
26:4f:50:55:06:df:6d:05:5b:89:bd:09:a5:fe:1f:bf:18:e1:
18:93:f3:50:fd:aa:8b:2a:e7:1f:4b:f6:d1:b7:4b:c1:d7:2a:
bb:68:2e:7f:52:e4:d1:ec:5d:49:9f:cd:55:bc:55:35:22:a3:
2d:ce:fa:e5:43:fb:80:77:68:fb:a4:76:1c:93:f8:88:1b:a8:
ab:af:2f:89:51:23:fa:e8:37:77:69:d2:1b:cc:33:7d:5b:c2:
34:67:d5:23:a2:83:7d:d4:f3:14:7c:83:8f:1d:40:0f:de:2d:
4e:0c:be:f0:70:9a:21:ce:c0:61:95:5d:28:02:7f:c7:5c:b8:
57:76:6c:c0:19:1d:fa:12:7b:85:97:b9:9e:e2:e2:da:e2:fa:
44:a6:5e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org