Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mbzmnYAlXbVot-aABxT_R_zwAiA.roa
File: mbzmnYAlXbVot-aABxT_R_zwAiA.roa (raw, json)
Hash identifier: 3Kk3N16KVriDToIwmFaYnc5NnIzCjplBE/cPU8nHcZ4=
Subject key identifier: 99:BC:E6:9D:80:25:5D:B5:68:B7:E6:80:07:14:FF:47:FC:F0:02:20
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 180F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mbzmnYAlXbVot-aABxT_R_zwAiA.roa
Signing time: Sun 07 Feb 2021 12:25:55 +0000
ROA not before: Sun 07 Feb 2021 12:25:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6159 (0x180f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:25:55 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=99BCE69D80255DB568B7E6800714FF47FCF00220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:0e:c1:55:42:e3:c3:1a:c2:8a:22:8a:a5:
d3:31:28:77:f1:c0:18:b1:09:8f:65:7d:27:b1:c4:
1d:d4:d8:03:0a:5a:b7:ee:6d:30:57:f3:08:f6:a1:
5e:fc:37:f9:16:63:ac:89:70:ee:93:72:07:f4:10:
d9:fa:96:9e:31:6b:cf:26:42:ec:42:e9:76:97:a1:
90:3e:3e:6a:e6:92:e4:93:16:5a:63:82:41:49:34:
28:42:eb:08:f5:ef:bd:da:34:9c:1c:e8:04:be:5d:
81:73:9e:65:6f:38:39:66:5c:0d:a0:f0:56:04:f6:
a4:bd:f0:96:a4:52:de:07:6d:51:4e:49:9c:e2:fb:
b0:4d:3c:c1:07:d7:72:81:52:3a:31:d1:63:6c:d4:
c5:da:9a:65:ab:bd:8d:d2:dc:e4:4a:4c:72:ec:1b:
3c:4b:35:0a:1f:bb:e3:1a:05:81:56:1a:25:de:1f:
7a:25:01:3d:b4:f5:c2:7f:cb:27:2f:88:f9:63:f3:
c3:3f:04:8e:53:32:09:b4:df:fe:3e:f2:43:71:2e:
ba:b5:d1:4c:1a:62:24:75:7f:1f:98:df:91:a2:b1:
8e:b6:50:3f:2f:a4:f1:3f:6d:cc:d3:45:61:69:b7:
47:9a:d5:96:8c:cc:2a:f9:0f:fc:11:eb:e5:2b:fe:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BC:E6:9D:80:25:5D:B5:68:B7:E6:80:07:14:FF:47:FC:F0:02:20
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mbzmnYAlXbVot-aABxT_R_zwAiA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.152.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:6e:53:0d:90:b8:cd:5d:d5:60:d1:a6:d0:07:8d:23:41:1c:
03:b4:34:de:63:4f:f9:b0:62:1c:d3:51:fe:ec:12:24:0b:f3:
d3:45:54:51:e5:cb:dd:9f:e5:c6:eb:a9:43:b2:29:aa:bd:07:
cc:8b:24:01:2c:e4:67:cd:63:33:1c:14:32:9b:93:91:ab:a8:
95:58:6f:95:10:2a:18:24:a5:9c:6a:28:d3:78:00:2c:da:a3:
8b:6a:e4:3e:19:0c:cd:4e:f8:90:89:50:7a:64:08:6f:e6:50:
05:25:5f:63:0d:16:a0:6b:11:75:de:a6:68:2c:9d:0d:c2:d5:
c0:92:60:65:bb:23:a5:d7:ef:54:3d:60:22:e0:4c:c3:4e:c3:
78:ed:10:75:0e:24:e8:27:ee:eb:28:72:c3:4a:44:26:1a:1d:
c9:a9:57:e3:63:e7:7f:30:17:7d:2f:43:f4:39:8b:4b:ef:cb:
5d:37:ba:0c:e6:bd:f7:9b:27:60:f3:5c:b6:47:a7:31:3a:79:
a8:56:ff:f5:af:9e:c3:6d:88:bc:ee:35:0b:94:9b:93:af:b5:
47:86:8b:6c:5f:17:1c:77:3f:55:fe:3f:85:e7:b0:f2:78:6c:
24:4e:49:ff:9f:15:76:23:c7:c9:5d:9d:83:be:b8:2a:1d:d2:
41:47:57:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:39 2023 by rpki-client on console-fra.rpki-client.org