Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lbR3UWmP0KT1jn8iiiPE7b8Tdxo.roa
File: lbR3UWmP0KT1jn8iiiPE7b8Tdxo.roa (raw, json)
Hash identifier: hv/w+iiav2dsaAAzx3Bzv2ev5cMP+tFJEJjsBpXjkUE=
Subject key identifier: 95:B4:77:51:69:8F:D0:A4:F5:8E:7F:22:8A:23:C4:ED:BF:13:77:1A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lbR3UWmP0KT1jn8iiiPE7b8Tdxo.roa
Signing time: Thu 15 Sep 2022 02:56:07 +0000
ROA not before: Thu 15 Sep 2022 02:56:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8100 (0x1fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:56:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=95B47751698FD0A4F58E7F228A23C4EDBF13771A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:b2:51:85:e7:29:5f:25:aa:5c:88:94:aa:
c8:bc:35:eb:cc:d3:ef:fa:ea:96:b2:cb:7c:3e:98:
be:31:7f:a3:7f:c8:c9:cb:a1:92:1c:1b:10:4f:87:
c9:0f:96:60:cf:4e:60:f3:2e:8b:f7:5d:a4:c0:bb:
8b:b6:d0:8b:a3:2e:2a:f5:05:dc:ef:c9:50:5f:52:
6a:5e:e7:c5:54:73:14:42:89:98:67:61:a4:68:26:
52:17:75:6c:38:80:25:e2:5c:13:f8:57:c1:6d:50:
c3:69:c0:2e:ac:a0:92:e7:b7:af:43:2e:ce:7a:25:
f4:21:84:fc:db:87:d2:ac:9e:e7:b0:21:8d:54:db:
5e:19:7e:cd:9b:78:84:df:b1:e4:62:5a:bb:9d:84:
c6:49:8e:95:44:67:38:81:97:bb:a2:b8:62:c2:e0:
1a:15:f1:68:2d:5c:19:d3:01:a5:ce:8b:ae:d6:f9:
8d:d3:59:7f:70:32:61:54:75:d0:1b:b9:1e:56:a7:
43:10:4e:34:49:26:91:72:43:5d:39:e6:68:b3:64:
3d:4c:62:cd:5c:c5:66:1a:9e:dc:0e:0a:b5:72:ff:
c1:12:6b:67:33:30:10:70:6b:4b:c8:3e:58:59:d5:
44:dd:80:85:f7:98:e3:29:88:b6:08:ab:d1:cc:d2:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B4:77:51:69:8F:D0:A4:F5:8E:7F:22:8A:23:C4:ED:BF:13:77:1A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lbR3UWmP0KT1jn8iiiPE7b8Tdxo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.222.0/24
Signature Algorithm: sha256WithRSAEncryption
62:11:3d:7f:95:b4:a6:5d:dd:29:66:39:73:d3:43:5e:e3:8d:
7d:db:d2:a4:aa:65:c8:4a:75:47:7e:91:aa:29:e3:6c:54:1e:
d6:c7:75:a1:cb:ca:0d:f1:29:7b:4b:4e:e6:35:ff:fd:66:e0:
e8:e1:39:a4:c1:1d:f5:2a:d4:c2:92:c5:d3:f2:7b:68:6c:d5:
ae:7c:d3:df:3e:ba:a6:bd:1e:af:fb:e8:8f:61:84:d8:4c:e4:
45:23:e3:eb:60:36:25:fc:49:af:7d:66:ee:6e:42:86:cf:70:
d4:1b:1b:47:85:bf:a2:05:f0:c9:c1:52:0e:91:f6:24:15:ea:
00:53:8e:7a:cb:d3:b9:be:5c:4e:c8:07:e1:d7:4f:e7:9a:5d:
ce:52:53:80:f2:5e:6e:20:a6:b7:49:84:f8:1c:ef:98:45:41:
e3:1a:8f:da:1e:4e:ca:19:54:2c:8c:fa:29:9f:0a:53:6a:8a:
a9:2a:52:eb:18:fa:ad:9f:c0:b6:db:ac:57:41:b1:87:e9:1d:
ce:3a:5c:03:87:d6:a8:8b:ac:ea:10:10:ad:88:4b:63:a6:89:
72:e9:e3:09:5b:09:4d:e0:7f:f5:65:64:5b:04:f1:0f:50:0d:
3d:0a:77:28:4d:67:a9:19:f8:6d:5c:99:ef:4a:4b:3b:0d:dd:
1a:eb:b2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org