Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i5S1wr5y3kF-AnwSq45MqcvX4Sk.roa
File: i5S1wr5y3kF-AnwSq45MqcvX4Sk.roa (raw, json)
Hash identifier: jkhx3NM1O7xiqmuYbeV6wSPXwHvnnYfOnkxGUftE188=
Subject key identifier: 8B:94:B5:C2:BE:72:DE:41:7E:02:7C:12:AB:8E:4C:A9:CB:D7:E1:29
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17E7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i5S1wr5y3kF-AnwSq45MqcvX4Sk.roa
Signing time: Sun 07 Feb 2021 12:24:34 +0000
ROA not before: Sun 07 Feb 2021 12:24:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6119 (0x17e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:24:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8B94B5C2BE72DE417E027C12AB8E4CA9CBD7E129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:b1:22:3f:22:49:2c:96:cf:53:28:23:e3:
18:a4:b9:0a:0f:c1:74:bc:a6:fb:7e:db:36:36:62:
fc:28:6e:94:a8:25:4e:0a:56:23:f7:14:db:c5:2a:
97:2d:b4:9c:2e:46:b7:81:95:81:2e:fe:e1:cc:b0:
7c:2a:65:22:07:9c:00:9e:35:8e:f2:8e:16:ec:07:
1e:30:0e:1a:27:6f:99:1c:f0:92:1d:bc:91:67:a7:
59:05:8f:4e:69:2e:7d:98:38:c1:10:00:ba:40:c8:
03:cf:31:0b:dd:81:c0:24:b5:74:35:0f:3f:dd:ae:
32:4e:e9:75:a5:25:3a:ac:5b:af:ae:c1:a7:7c:11:
97:fd:42:1c:5a:f4:61:90:08:6b:89:94:96:6b:77:
a8:38:83:9a:58:8c:c3:ae:c8:f7:1b:7c:00:c3:23:
f2:ee:c8:42:f6:4f:93:d4:09:48:4c:49:6c:8d:76:
bc:fe:22:66:28:a4:e7:d4:46:11:13:e2:e7:63:03:
90:6d:18:02:3d:2f:ff:21:50:a7:e2:dc:96:d0:ff:
7e:bf:b9:aa:5c:38:34:55:26:2e:34:ca:25:42:25:
2b:4d:f7:1e:b4:a9:d2:83:6b:1c:3a:99:d7:17:31:
db:43:62:c8:7b:0f:1a:e0:f3:a3:34:df:bf:d1:39:
b6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:94:B5:C2:BE:72:DE:41:7E:02:7C:12:AB:8E:4C:A9:CB:D7:E1:29
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i5S1wr5y3kF-AnwSq45MqcvX4Sk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.128.0/24
Signature Algorithm: sha256WithRSAEncryption
95:cb:8d:00:8e:3c:98:f2:2e:67:cc:4f:bb:f0:2f:25:c6:34:
8b:a1:76:fd:6e:56:c8:e8:c9:d9:13:b4:03:fe:6e:21:c1:4a:
21:5b:03:6d:11:47:56:0c:94:ee:36:d7:32:f1:f9:6f:5f:f4:
31:12:0c:8b:6b:ca:73:8c:3e:23:ab:8a:22:f5:f3:6b:06:82:
e0:a9:39:d7:34:f1:50:28:93:71:45:d9:6c:c8:a7:47:af:3b:
d5:17:17:95:8a:0d:eb:24:d3:b0:0a:a1:c2:7c:2c:4b:64:86:
96:42:9a:ad:28:4c:3a:2b:03:48:3b:e0:23:1e:d8:e2:44:e3:
c1:87:03:97:cc:dc:9f:7e:b6:08:49:1e:8a:23:fd:d2:d6:d8:
b3:02:31:70:7f:46:ba:29:9d:f6:6c:62:d3:20:44:ca:44:0b:
af:d0:65:ce:97:ac:f6:e1:eb:9b:3c:1f:81:fb:af:d2:de:8e:
e4:53:00:07:6a:18:c8:07:0f:ed:97:bb:48:1b:bc:a3:16:02:
10:25:c9:ea:7c:46:c4:07:9b:5a:c2:f4:0d:31:95:9b:d7:6d:
96:e9:f0:47:ba:00:1d:ad:50:02:b4:9f:a8:13:d7:43:e6:4a:
f3:9f:46:53:fd:f2:e1:8f:e6:aa:73:3d:d4:db:cc:07:60:19:
b0:a6:2e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org