Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jWO7AxIWFzv6pLS2t1gkTp05Ta8.roa
File: jWO7AxIWFzv6pLS2t1gkTp05Ta8.roa (raw, json)
Hash identifier: dMjojShmg9Cu3gRC6aDET9fYkbaVKbqSZ3VYZpgbE/c=
Subject key identifier: 8D:63:BB:03:12:16:17:3B:FA:A4:B4:B6:B7:58:24:4E:9D:39:4D:AF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1643
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jWO7AxIWFzv6pLS2t1gkTp05Ta8.roa
Signing time: Sun 07 Feb 2021 12:09:19 +0000
ROA not before: Sun 07 Feb 2021 12:09:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5699 (0x1643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:09:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8D63BB031216173BFAA4B4B6B758244E9D394DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:65:fc:8a:df:26:4e:9f:48:36:19:ba:44:
d4:4c:ec:0e:3d:98:c0:36:87:ed:2c:16:83:b7:a3:
99:30:8d:a2:a0:1a:cf:db:30:70:b7:18:26:af:97:
53:94:54:5e:cd:aa:63:79:b4:65:16:5e:da:4e:36:
f3:7c:d6:57:cb:76:d3:21:3f:4b:43:63:07:13:50:
bd:a6:19:d4:3b:7d:5e:f3:65:db:17:5e:5b:2f:28:
09:6f:42:07:7b:e2:b8:77:f4:51:59:e8:d0:23:84:
ba:b3:7c:35:64:b1:e0:2b:39:a0:81:8b:51:87:e0:
f4:f5:bd:54:1b:91:65:e2:1f:3f:b3:ac:7c:64:05:
0f:8c:43:dd:d7:06:f8:b5:01:a3:66:8a:4b:f8:90:
a4:bc:a5:50:01:56:25:5b:6f:c6:3e:64:7b:56:8d:
d8:b7:ba:98:9d:e0:a3:4e:e4:a3:f8:98:49:e7:36:
3d:46:52:f5:ec:15:a7:cf:34:bd:2a:f2:a9:10:99:
f5:27:5a:7f:4a:de:92:d5:4e:e9:fb:93:7b:02:d9:
f5:db:70:61:4a:54:9e:0e:fc:e6:2e:00:95:53:35:
ed:61:1a:7e:d3:cc:28:97:c3:48:4f:da:6f:38:a4:
e7:93:46:40:59:82:14:7b:e7:39:12:57:86:45:97:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:63:BB:03:12:16:17:3B:FA:A4:B4:B6:B7:58:24:4E:9D:39:4D:AF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jWO7AxIWFzv6pLS2t1gkTp05Ta8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.221.0/24
Signature Algorithm: sha256WithRSAEncryption
03:15:41:89:85:68:31:ee:35:a1:f4:c9:dc:e2:bd:12:f9:e6:
c6:41:80:64:3e:e0:26:81:7c:8d:3a:9a:94:39:ab:68:76:d6:
9c:08:66:1d:2c:1f:1c:0e:53:77:a4:1f:b8:e1:91:71:28:ad:
de:00:c7:13:78:53:ed:8b:53:9c:77:49:3b:51:85:43:21:e1:
67:22:60:d8:3c:09:a6:7c:d5:6a:a8:9e:60:af:c8:e0:03:55:
2b:05:bd:d5:53:1c:70:36:3c:ce:e7:d0:56:2f:59:df:2f:41:
d3:ab:47:64:a6:98:8e:9c:4a:7f:4d:09:ed:8c:19:80:d3:f4:
dd:3d:52:f4:cb:75:01:53:69:68:c9:ef:11:91:4f:8f:52:c7:
5b:a7:d1:ba:e4:71:88:28:b1:a1:62:72:db:e1:ef:49:9b:89:
c7:a5:14:9b:7c:6c:80:f8:5b:b8:60:bd:87:d3:dc:2c:93:67:
2d:c8:6c:8d:c0:ee:05:75:3c:ee:66:f3:f2:1d:1f:5d:59:dd:
78:47:24:11:31:30:d1:c9:f0:ea:81:aa:da:4c:1b:d5:c7:a3:
cd:2d:93:9c:31:f4:b9:f9:d7:9a:c6:84:1e:82:c0:6b:91:f7:
e5:4c:a0:ab:ae:7c:5a:49:3c:bf:d9:af:10:4d:71:3e:4a:6e:
7b:ae:75:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org