Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k8YMNLcdxCima6We49aF5IopGfk.roa
File: k8YMNLcdxCima6We49aF5IopGfk.roa (raw, json)
Hash identifier: Tn57Nyyu/n+s4OG3cRgtetDeRL0SaU69f3HWVtP572Y=
Subject key identifier: 93:C6:0C:34:B7:1D:C4:28:A6:6B:A5:9E:E3:D6:85:E4:8A:29:19:F9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1805
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k8YMNLcdxCima6We49aF5IopGfk.roa
Signing time: Sun 07 Feb 2021 12:25:34 +0000
ROA not before: Sun 07 Feb 2021 12:25:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6149 (0x1805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:25:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=93C60C34B71DC428A66BA59EE3D685E48A2919F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3f:cf:7b:98:0c:e9:ca:17:c9:49:c5:95:f1:
d3:ee:09:f4:b7:12:e9:51:0d:53:f0:4f:11:0f:eb:
1a:04:8b:8d:a1:87:56:b6:06:6f:1f:a5:f3:59:a4:
1d:5f:7c:37:fd:9c:a8:a8:fa:d9:04:1f:01:ac:0d:
83:e9:2d:26:0f:85:a6:c1:36:1b:38:72:f9:43:a9:
04:8a:96:54:e1:01:50:65:7d:5e:44:f9:c0:d4:70:
c9:78:b8:85:22:ab:e8:9f:cc:de:3c:f8:6f:72:90:
0c:d5:b9:6d:2a:85:ea:0a:4f:e7:8f:d7:ee:f8:f7:
48:14:be:bf:c5:f0:e3:23:b8:18:01:75:95:b0:7b:
6f:5d:c4:8c:a2:e0:3d:6c:d6:92:0e:98:34:84:f8:
9c:d7:37:4e:08:25:c6:47:c0:be:fa:ae:cf:8b:35:
3c:06:a4:f2:b4:2e:bd:14:5d:b0:e8:fe:54:d2:02:
48:f0:be:0a:69:37:83:fe:28:9b:63:ca:f2:a7:f0:
be:11:b2:60:50:a1:51:58:c6:1c:6a:d3:c9:5c:53:
bb:6b:d5:c4:8a:a1:c7:07:dd:f9:83:dd:bf:0f:b0:
5f:c7:45:c7:c0:f5:59:8a:ab:83:df:d0:cb:54:d3:
34:62:e0:c1:4c:d5:d2:85:ad:be:fe:82:4d:24:3b:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C6:0C:34:B7:1D:C4:28:A6:6B:A5:9E:E3:D6:85:E4:8A:29:19:F9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k8YMNLcdxCima6We49aF5IopGfk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.143.0/24
Signature Algorithm: sha256WithRSAEncryption
35:56:a3:b2:ec:01:49:ab:86:47:2b:da:f5:b3:62:e4:32:82:
49:9d:e7:5c:14:4e:7c:a6:ba:8c:41:a7:3d:4e:83:8a:51:26:
17:64:e8:f8:a2:b7:f7:af:b9:88:6d:6e:8b:ab:ea:8e:76:9f:
76:c5:dd:61:c7:bf:ab:aa:eb:c0:dc:9d:be:3e:a6:23:62:8a:
53:06:06:69:be:1d:1b:de:2a:58:db:11:a7:8a:04:9d:7d:6e:
5e:dd:8f:2d:08:2e:bc:31:a7:0c:d7:b3:bc:bc:67:82:1e:ac:
ba:6c:24:b9:ee:49:46:b8:0c:b3:20:4f:b3:73:12:20:51:5c:
b6:a6:a3:c6:f8:ad:15:f1:85:6d:d5:91:df:50:9c:8d:cd:b4:
2c:88:0d:09:5b:86:98:5f:37:79:9b:d0:0d:ed:cd:8a:b0:b0:
f0:c5:fc:59:eb:77:98:93:6b:dc:d4:f6:4f:cb:60:97:05:e3:
f0:97:9d:8f:32:fc:a2:31:f9:12:19:9f:8b:4a:24:77:e6:14:
7e:be:b5:37:b2:49:70:02:80:76:31:f4:b1:0e:5a:7a:e2:fa:
2c:10:37:89:55:6e:b4:63:1a:30:3c:28:02:19:06:74:60:03:
6e:c9:99:ee:f4:29:fb:86:48:49:2c:5a:bf:b2:2b:c7:a8:b5:
45:36:e7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org