Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hJQ2JKmA0_1RrkLUlukUKHoMycg.roa
File: hJQ2JKmA0_1RrkLUlukUKHoMycg.roa (raw, json)
Hash identifier: /wQC93z9crOBw2ETzy9A2qC7LsCeldrECrIJCKIkErs=
Subject key identifier: 84:94:36:24:A9:80:D3:FD:51:AE:42:D4:96:E9:14:28:7A:0C:C9:C8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F57
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hJQ2JKmA0_1RrkLUlukUKHoMycg.roa
Signing time: Tue 29 Sep 2020 09:56:50 +0000
ROA not before: Tue 29 Sep 2020 09:56:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3927 (0xf57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:49 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=84943624A980D3FD51AE42D496E914287A0CC9C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:da:fd:1b:9a:ab:cf:7d:51:b9:72:ec:62:
22:35:f5:6f:14:f0:8e:18:7d:5f:1a:e8:9e:32:bd:
99:42:70:64:d4:5c:1f:19:b7:21:68:1d:2d:6b:5b:
ec:0c:b9:ce:31:f2:6a:cc:6f:f4:8f:b6:91:72:e1:
44:41:ed:49:ad:6e:b3:58:25:f1:4a:6a:a6:d0:9e:
77:b5:6f:dc:57:67:bb:87:b4:0d:29:04:c6:e2:98:
76:8c:b2:63:ce:35:77:3d:ca:86:d1:a2:23:08:1c:
70:5b:7d:3f:14:ad:5b:7a:06:41:3c:b6:62:03:cf:
aa:dd:5f:f7:69:51:ef:3b:12:de:e6:ac:2f:68:75:
3f:5a:a4:2d:b4:15:ea:a5:4f:6a:f5:df:71:27:5b:
93:53:8e:59:3a:9a:38:0d:94:4a:ba:5e:f4:31:69:
5b:c1:c9:86:d8:da:cd:13:10:47:71:13:57:e1:23:
19:37:29:c8:ff:b4:e3:4b:e3:23:00:d4:88:36:1e:
42:b1:59:6a:4e:75:60:91:6e:81:76:fe:95:81:b8:
e8:2a:90:4b:5d:ed:15:b9:24:66:3e:da:e9:56:c4:
14:42:85:c2:9e:54:e6:4d:cb:14:d0:97:54:1f:b4:
44:c4:f2:20:9b:2d:f9:0f:70:77:f6:18:1a:e0:76:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:94:36:24:A9:80:D3:FD:51:AE:42:D4:96:E9:14:28:7A:0C:C9:C8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hJQ2JKmA0_1RrkLUlukUKHoMycg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:a3:b1:9c:75:47:de:83:80:1e:d3:df:1b:b1:49:e8:0c:61:
be:8d:db:e5:f1:1c:d6:f8:53:c7:c2:0a:c6:58:2d:2a:4b:7d:
4d:2c:17:c1:4f:8e:22:38:ac:29:46:e9:48:bc:e0:46:c7:40:
b0:99:45:6b:99:9e:08:cd:f7:36:bf:85:62:1a:2a:a6:36:80:
4b:72:87:21:30:64:9d:35:1d:ae:43:1a:bf:46:69:38:5d:f2:
9b:75:05:7d:86:69:f3:46:50:73:ce:a3:b4:ea:c8:4d:5d:6f:
31:72:a6:63:d4:93:06:ef:d6:fa:a8:b7:64:c7:85:68:a8:19:
fc:db:aa:ed:ed:65:06:44:df:d5:83:7d:90:9f:f7:a8:71:4f:
4f:b6:ce:1b:61:72:86:93:d1:c9:10:f9:b5:00:e8:e5:43:cf:
e5:c4:87:f7:a0:95:5d:af:d7:58:17:ef:b4:e0:6d:91:b7:13:
eb:34:af:d4:f3:22:93:72:8c:29:3d:d8:1d:1e:7d:33:a0:0c:
b3:ba:61:e2:9b:02:35:2f:7e:c9:4a:e7:11:38:ea:bb:07:65:
a5:60:b8:eb:22:a9:e9:15:ec:b1:76:3c:53:b5:55:07:f5:5b:
eb:57:1a:a3:53:d7:c0:1a:67:6e:39:c8:9a:18:d4:f2:99:da:
04:6d:83:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org