Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/koIcny0u4Fe_tPZMCCpcwIlRv4o.roa
File: koIcny0u4Fe_tPZMCCpcwIlRv4o.roa (raw, json)
Hash identifier: x9il4V2l1uNii3qK+yLitKvkMZy1flod3gU/xCH9Fhw=
Subject key identifier: 92:82:1C:9F:2D:2E:E0:57:BF:B4:F6:4C:08:2A:5C:C0:89:51:BF:8A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1821
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/koIcny0u4Fe_tPZMCCpcwIlRv4o.roa
Signing time: Sun 07 Feb 2021 12:26:33 +0000
ROA not before: Sun 07 Feb 2021 12:26:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6177 (0x1821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:26:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=92821C9F2D2EE057BFB4F64C082A5CC08951BF8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:b9:9b:00:58:1a:70:94:55:4a:2a:ad:73:
a0:10:be:07:1c:52:ad:2e:62:df:0b:65:d8:d2:db:
ab:c4:cb:84:7a:81:a8:17:af:fa:0f:70:9f:89:da:
80:f7:46:9a:e9:6d:08:21:ae:e9:0c:f5:87:94:14:
42:3a:19:05:45:b5:90:f3:e4:d0:f5:be:a4:bb:2b:
0c:01:98:43:fa:32:21:b1:c7:be:2d:0c:81:a2:4c:
bb:76:5d:20:d1:3b:4e:6d:9a:eb:31:f2:dd:1d:9f:
1f:47:ce:f6:d2:fb:e6:86:31:cd:19:09:d9:8d:01:
87:1b:a4:d6:2f:12:0c:27:37:ab:c9:44:13:bb:3c:
5b:8a:e7:3a:1f:71:12:71:0a:6e:7d:86:ed:be:7f:
73:6b:cb:fc:c8:11:87:a9:72:1d:ff:06:79:31:04:
59:af:0d:59:4e:d5:75:33:2d:ce:bd:e5:13:db:7f:
d2:7c:91:bc:f3:1c:bc:04:9f:3a:c8:11:96:79:b7:
04:cc:80:a2:1c:86:e9:29:9e:9e:ca:93:22:f5:52:
cd:b3:44:9c:ef:cf:61:2e:3f:27:b2:92:0a:20:41:
65:ac:3c:cd:03:6e:cf:1a:25:69:ae:ec:82:88:1d:
14:d4:54:d4:09:ef:52:06:ce:10:71:30:ab:52:86:
48:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:82:1C:9F:2D:2E:E0:57:BF:B4:F6:4C:08:2A:5C:C0:89:51:BF:8A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/koIcny0u4Fe_tPZMCCpcwIlRv4o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.56.0/22
Signature Algorithm: sha256WithRSAEncryption
39:26:63:17:dd:04:17:24:3a:55:af:b4:4c:94:3b:ea:f0:e7:
05:a2:2b:48:94:41:db:5f:21:b7:74:05:b0:60:b9:f6:0e:0c:
a7:2d:48:a8:77:a2:b4:28:72:9d:2f:33:27:5b:89:cd:8d:37:
35:03:25:18:14:6a:8f:1c:60:b7:e5:f5:32:c1:2a:8c:48:81:
3d:f6:2f:4e:bd:47:f9:ea:c0:a9:6f:bc:18:57:d1:10:5f:df:
ee:a1:36:66:cf:a7:dc:35:8b:05:e7:ff:ae:0e:16:47:33:db:
c3:5a:5b:2f:a4:f4:c1:ec:81:74:d1:33:11:b1:69:e8:6d:cc:
98:d4:0f:0d:c5:87:85:d0:3b:90:b0:f0:d6:08:69:67:9e:49:
2b:e4:cd:16:56:b9:9a:05:2d:05:27:fc:c9:08:6b:a7:d8:c7:
90:2e:c7:e0:d1:29:f4:b5:d1:c0:3a:03:40:6f:0a:6a:dc:52:
20:1e:e9:1e:7d:8e:fe:6e:9b:a8:89:4e:8f:b0:4b:86:3c:ed:
4e:37:5f:49:b0:e0:97:b5:84:21:02:67:f0:4d:44:c5:fa:10:
43:4a:fc:01:62:e6:4a:d9:41:31:b2:2b:ed:6b:b0:91:dd:de:
c8:0d:59:83:13:f8:d7:cb:f3:0a:61:80:02:95:e9:22:14:eb:
98:56:7c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-fra.rpki-client.org