Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/izHtp0TflM4BoZsvi0L6oVAMStc.roa
File: izHtp0TflM4BoZsvi0L6oVAMStc.roa (raw, json)
Hash identifier: SDY295iU+UWzqK49PcnEs4UGJ4Sw5kPeQQzUMfqrdJs=
Subject key identifier: 8B:31:ED:A7:44:DF:94:CE:01:A1:9B:2F:8B:42:FA:A1:50:0C:4A:D7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E05
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/izHtp0TflM4BoZsvi0L6oVAMStc.roa
Signing time: Tue 29 Sep 2020 09:55:14 +0000
ROA not before: Tue 29 Sep 2020 09:55:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3589 (0xe05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:14 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8B31EDA744DF94CE01A19B2F8B42FAA1500C4AD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4e:fd:01:d9:38:a5:ef:96:02:59:56:9c:16:
2f:18:d8:67:ff:e6:32:3c:ed:4c:96:c3:a6:16:b8:
19:ff:df:59:da:41:ca:0b:ce:92:8b:7a:ac:c7:23:
19:40:fd:63:67:4d:b3:ae:a4:7f:12:a3:b9:d1:54:
c5:70:57:32:48:26:8a:41:10:f0:22:4a:ab:ad:1d:
51:9c:6e:4d:92:b0:f2:b7:6f:5a:93:30:e4:5e:5e:
4e:8d:54:92:5f:d0:13:a3:99:07:d4:8e:ec:90:52:
7e:cd:d4:3f:bb:cd:be:9f:4e:c1:2e:97:73:e7:6c:
a0:ae:3b:e9:bf:5f:53:aa:3e:bc:9a:43:9d:90:e6:
e3:62:bb:e5:07:63:51:dc:d9:0a:e9:fb:1b:99:18:
c4:00:d2:7f:81:3a:7a:43:f1:6d:e9:ce:e9:cb:db:
0b:be:33:7b:ac:d2:95:c8:0f:a5:83:d9:e9:ae:f2:
16:37:6e:92:23:fa:fc:50:f9:96:45:35:01:20:75:
47:38:6b:2e:d3:7e:19:b4:1c:e9:f3:d5:20:e0:c9:
2a:e2:09:9a:4e:5b:b4:a7:35:42:90:84:ed:50:a2:
72:1d:c4:30:c6:80:65:29:02:54:e1:9d:c8:30:36:
be:de:b0:0a:9b:0e:88:92:6d:87:21:7e:eb:8b:84:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:31:ED:A7:44:DF:94:CE:01:A1:9B:2F:8B:42:FA:A1:50:0C:4A:D7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/izHtp0TflM4BoZsvi0L6oVAMStc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.188.0/22
Signature Algorithm: sha256WithRSAEncryption
77:2f:cf:ab:e1:b1:60:c3:9d:69:45:0a:11:45:ac:3a:d2:2d:
a0:48:71:0d:4a:f1:72:b7:c2:2e:90:be:8a:bd:93:3e:31:5e:
c9:de:27:4c:49:77:45:09:78:32:83:74:01:23:22:8d:1d:39:
bc:ff:d4:b7:31:4b:73:fc:a7:55:f6:cd:08:a4:4b:98:9c:49:
6b:5b:5a:2d:a1:03:2c:c3:ae:23:09:88:3d:8c:9d:66:ee:9a:
1f:4a:67:08:1e:b0:92:79:ae:08:ec:5e:a1:e3:3f:5a:46:a7:
d1:06:bd:5d:ed:01:5c:42:40:b3:ea:1e:6b:1b:3f:6e:b1:d7:
ee:4a:b3:4e:ee:58:be:20:e3:27:d9:61:cb:c8:db:20:f9:95:
01:d1:f8:10:63:81:98:90:d6:52:42:ca:94:95:54:89:82:1a:
66:1c:07:ac:b3:e3:07:dd:38:d7:5e:96:0d:b1:b2:fd:e2:b7:
ae:08:42:dd:1f:5a:1e:a3:a5:9c:3c:e9:7e:e0:be:21:2d:b6:
81:57:f5:11:30:d2:fd:86:bd:4f:c6:10:93:0d:1e:07:9b:8f:
b2:53:19:8d:c2:b5:1b:96:39:17:01:07:1d:d6:74:9c:4a:6b:
24:5b:8e:75:72:02:dc:d4:83:7b:ad:e7:8b:d5:05:fd:0a:62:
66:c0:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org