Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lqBwiI_QHcwIbA_AUhM4e4fIapg.roa
File: lqBwiI_QHcwIbA_AUhM4e4fIapg.roa (raw, json)
Hash identifier: gc/RY2vf3o5J2wRqvW87TX4pZL4E+fTNptQGD/J1ma0=
Subject key identifier: 96:A0:70:88:8F:D0:1D:CC:08:6C:0F:C0:52:13:38:7B:87:C8:6A:98
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 175D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lqBwiI_QHcwIbA_AUhM4e4fIapg.roa
Signing time: Sun 07 Feb 2021 12:18:40 +0000
ROA not before: Sun 07 Feb 2021 12:18:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5981 (0x175d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:18:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=96A070888FD01DCC086C0FC05213387B87C86A98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:b5:6d:2c:33:39:b2:2c:c4:85:c1:e9:0c:
f4:8e:3e:4b:08:ca:a8:d9:3b:13:72:95:d4:24:39:
a6:a5:b0:89:32:2d:f3:8b:66:6c:d0:49:fe:1b:08:
8e:22:03:65:31:f3:5d:54:f3:98:f9:79:b1:96:bc:
45:cc:fb:55:85:de:98:15:e5:78:e1:37:c0:89:e8:
90:f7:d5:4e:9d:b5:fb:58:42:2a:b5:19:2b:ce:ab:
d0:1f:fc:60:7a:68:ed:92:5f:f9:e2:94:c3:b8:e5:
01:da:29:45:88:32:aa:a1:91:39:b4:03:64:8b:03:
50:99:63:3a:d7:1f:95:1b:f1:7d:fb:24:55:a7:8a:
d6:5b:a2:3a:11:ca:39:f7:80:0f:12:6b:df:e3:c4:
1f:8a:cd:6a:64:de:80:df:08:32:a2:cf:36:5b:8f:
e8:03:9e:3f:61:18:de:4c:4a:d8:43:6d:fd:dd:ad:
26:66:19:a6:f4:70:e5:f4:a3:0c:ed:81:4c:9b:c8:
8b:16:c0:80:e0:02:a6:1b:cc:7c:4d:5a:11:55:1b:
5b:9a:0c:71:91:37:5f:01:8f:0a:09:8f:1c:e5:5b:
b7:00:f3:ff:13:e6:0e:4a:4b:7f:fd:ca:6a:c0:a1:
d8:5f:59:f8:3c:6e:f2:85:6c:8b:a1:e7:f9:44:2e:
71:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A0:70:88:8F:D0:1D:CC:08:6C:0F:C0:52:13:38:7B:87:C8:6A:98
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lqBwiI_QHcwIbA_AUhM4e4fIapg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.80.0/21
Signature Algorithm: sha256WithRSAEncryption
15:6b:d6:62:52:33:69:ee:8e:42:c7:5a:24:ee:5e:8f:ac:57:
a8:74:3a:9f:26:e9:06:22:64:19:31:7b:f2:ad:6c:49:86:9a:
51:ac:08:85:bf:86:ed:0a:c5:2c:0c:ef:3a:44:3f:b9:ce:b3:
1a:5b:43:d6:b5:4a:7b:fc:1e:79:87:d8:3b:e4:df:74:8f:24:
e8:f9:a2:ae:24:8d:01:8f:b5:7c:d2:36:c0:41:03:fb:14:8e:
18:81:b8:15:ec:e9:f7:ad:6c:c4:27:28:27:e7:1f:ca:88:4e:
57:a8:d0:b5:b0:7c:e6:f2:6e:dd:45:3b:f5:fa:cd:40:24:72:
93:42:d1:c0:ae:47:f4:8e:d1:22:cc:b9:c8:ee:65:ec:19:3a:
b3:92:02:3f:6a:a4:56:e1:11:1e:f6:e7:ee:a8:dc:1c:7a:8a:
01:bc:b0:52:d9:16:c2:e4:dc:2f:af:86:b2:24:c7:49:ee:7c:
cd:14:71:eb:74:43:4d:7c:11:e9:5c:5c:3b:0e:2f:c0:21:12:
bc:94:d9:bd:49:e7:24:0f:6d:91:3f:56:c5:b8:c4:e3:66:94:
e5:9a:22:c5:47:de:cb:f3:a2:42:a0:e1:d6:4a:59:6b:b6:4d:
ba:c0:2f:77:ff:fb:be:d2:ab:f5:aa:8b:ac:d7:0d:8c:60:32:
2c:59:d2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org