Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hN8TVFNP1iGYxOHakciCnteAwWU.roa
File: hN8TVFNP1iGYxOHakciCnteAwWU.roa (raw, json)
Hash identifier: 6DRE+UD/ji6xBanZp14Oz4O2ORVxJFepbeCT/EPdPUM=
Subject key identifier: 84:DF:13:54:53:4F:D6:21:98:C4:E1:DA:91:C8:82:9E:D7:80:C1:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A87
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hN8TVFNP1iGYxOHakciCnteAwWU.roa
Signing time: Wed 29 Sep 2021 02:45:27 +0000
ROA not before: Wed 29 Sep 2021 02:45:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6791 (0x1a87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:27 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=84DF1354534FD62198C4E1DA91C8829ED780C165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:e9:eb:75:c5:55:6a:dc:95:93:3a:6d:c3:
d5:70:62:af:1e:15:c7:ad:c7:5b:f3:a4:b4:c0:00:
88:bd:95:30:18:9e:3c:2a:99:37:f3:a4:48:23:19:
80:29:ce:3d:5c:0b:e4:6f:5d:ba:1d:cd:49:2f:df:
13:62:33:4d:fe:23:ed:f3:d4:2d:35:7c:a5:f8:c6:
87:f9:c7:87:e5:78:68:5f:6f:12:cd:4b:08:f2:bc:
80:86:aa:4b:a7:15:d2:1d:22:72:a5:9f:c5:e9:9c:
fa:49:bf:88:df:e8:7b:da:6e:b8:b1:75:d9:3a:72:
25:a1:41:7d:a3:dc:8d:b1:d1:3d:ab:3f:94:60:94:
64:69:9f:3e:7a:db:ba:85:11:0f:4d:82:49:00:dc:
16:21:44:48:e3:bf:fa:2f:20:8f:43:1e:e4:c3:e7:
4d:40:f4:ef:7a:78:19:cb:a3:92:f5:7c:90:01:e4:
a5:b6:a0:e9:5e:95:46:9e:31:2e:f9:26:f9:72:a2:
70:48:be:1a:d3:82:06:d3:8a:aa:d0:a7:6b:c2:06:
83:6b:f0:40:5e:de:93:b8:28:54:b2:78:1a:28:a5:
91:b0:63:21:f0:08:da:f4:cd:c6:d5:ff:0b:af:1c:
c9:10:4a:31:bd:d2:e1:da:9c:9a:85:7f:1b:4f:38:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DF:13:54:53:4F:D6:21:98:C4:E1:DA:91:C8:82:9E:D7:80:C1:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hN8TVFNP1iGYxOHakciCnteAwWU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.99.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7a:89:28:bc:55:f9:43:81:b6:41:94:32:cf:d2:5e:78:96:
30:99:41:cb:06:f6:df:83:ed:53:3c:b7:27:da:57:5f:cd:26:
54:e6:58:01:bb:9f:fa:42:db:75:de:86:fa:dc:65:5c:2e:51:
50:08:dc:33:ce:85:d4:28:7f:e9:ee:78:e5:bb:5a:b4:84:15:
43:80:2e:20:53:e1:b1:6e:a1:53:02:a9:ad:c1:fc:99:95:0b:
98:e3:70:56:8e:de:92:d6:c4:07:dc:07:da:3f:21:80:42:be:
75:d9:0d:96:cc:49:b7:4d:74:23:b5:6c:f5:f9:21:8b:35:45:
7e:0e:83:b9:72:10:fe:56:60:a6:20:65:db:4f:4b:7f:b6:b6:
85:b3:ca:74:87:86:c4:41:fe:f2:dc:9d:37:6e:87:0e:c3:5c:
98:00:89:e7:a1:20:7b:66:6f:63:6f:30:c2:14:2e:f0:41:49:
ef:51:54:14:e3:a9:72:46:29:3c:f9:15:bd:2c:1a:3c:36:48:
dd:a3:56:e8:1c:be:d2:02:c3:0a:7a:a5:c6:d2:32:a0:f4:8b:
04:f3:27:04:cb:e0:e1:35:0d:1c:64:fd:fd:b3:a9:cd:c0:c2:
6e:1a:97:55:8a:fa:9e:e5:a7:7a:f1:e6:c0:7d:30:20:39:21:
c8:7b:17:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org