Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l2UJ86NEyZD7QclqXt1dYhqFni0.roa
File: l2UJ86NEyZD7QclqXt1dYhqFni0.roa (raw, json)
Hash identifier: K+xenXG84KR/PhIknocTYeuNhnS63jGAE2S6bUf/B6Q=
Subject key identifier: 97:65:09:F3:A3:44:C9:90:FB:41:C9:6A:5E:DD:5D:62:1A:85:9E:2D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1745
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l2UJ86NEyZD7QclqXt1dYhqFni0.roa
Signing time: Sun 07 Feb 2021 12:17:57 +0000
ROA not before: Sun 07 Feb 2021 12:17:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5957 (0x1745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:17:57 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=976509F3A344C990FB41C96A5EDD5D621A859E2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:fd:b4:15:b4:13:44:d4:4a:f7:79:75:9d:
91:5f:22:8f:0f:d4:ec:44:d3:3b:e0:ab:93:57:24:
e4:15:9c:ab:29:f4:9b:b4:97:e2:6b:df:16:71:2e:
b4:c3:91:1d:62:7c:70:95:37:c2:1d:a6:27:5d:12:
89:b0:a9:ee:47:ca:89:44:b3:f5:39:31:d6:09:c2:
a8:a4:96:4d:d5:51:c7:6d:a8:c9:f5:2b:76:38:96:
88:8f:68:10:69:81:05:69:5b:85:37:19:1c:e0:ca:
10:4b:32:83:26:f7:2f:56:9a:a6:8f:85:cf:2f:e9:
83:fa:22:dd:81:09:ca:8a:b3:13:33:b2:4d:c1:f0:
39:b2:4e:40:cf:18:f4:2d:1f:17:e1:b2:99:e1:89:
ff:c5:28:68:d0:18:22:d6:b4:3f:eb:ea:52:56:cc:
33:b1:06:78:d9:70:b3:70:c3:c8:05:3b:0c:e6:6f:
61:25:cc:29:a2:54:40:11:dc:c9:35:57:0b:75:1a:
dd:b1:d2:6a:25:43:7e:40:fc:c6:13:e3:5c:a9:48:
8e:cf:ec:1e:b9:c6:b0:08:53:21:30:5b:bc:fc:16:
85:ba:06:40:f5:9d:9d:a3:e1:c1:6b:07:8a:e0:93:
21:61:d6:53:a4:a3:9b:e7:cc:81:2c:f8:09:69:e6:
d9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:65:09:F3:A3:44:C9:90:FB:41:C9:6A:5E:DD:5D:62:1A:85:9E:2D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l2UJ86NEyZD7QclqXt1dYhqFni0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.12.0/24
Signature Algorithm: sha256WithRSAEncryption
42:de:a7:5b:ef:9c:01:ed:30:d9:55:17:4e:94:e4:a9:6d:cc:
01:be:1c:25:4d:ef:57:af:0a:51:67:fb:ca:d9:cb:2c:51:7b:
92:cb:ed:59:9f:3a:f7:ed:8a:fe:e3:e1:9c:bf:93:8f:2e:01:
c6:be:4b:71:6f:a0:b8:db:26:21:c8:7a:b0:28:10:7b:22:fa:
79:2b:c0:2d:03:62:fd:41:fa:89:5e:78:93:bd:8e:c5:80:3a:
a3:b5:dd:0e:fa:36:d1:e2:a8:ad:19:91:1e:a1:a6:97:33:2c:
90:c2:ce:22:92:1b:8f:3d:20:2a:59:60:d7:84:b7:a2:e9:7a:
39:24:5d:06:1d:a9:c3:20:fc:34:00:40:3c:66:5c:67:86:a8:
19:e9:f9:5f:50:5d:de:4b:a9:7f:82:8e:d3:60:86:c8:0c:3e:
d9:bd:34:ec:3e:51:c6:bf:a6:06:37:ea:e4:a9:fe:29:04:45:
a9:3c:a0:41:8e:6e:09:65:b5:00:9d:3a:e7:e7:e2:6b:0b:9f:
39:34:e8:a2:b3:68:93:8d:ee:c2:f3:15:27:f2:ba:cd:8b:c8:
04:f6:fd:1d:3f:78:99:82:03:9b:50:4a:fb:a1:fb:11:95:60:
6c:eb:aa:28:5f:39:4c:39:4e:ca:a7:ec:a7:f4:cc:29:0e:f5:
17:2b:7c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:39 2023 by rpki-client on console-fra.rpki-client.org