Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/muj5WvjmIRPm6Vjl1CXPg3bW_e4.roa
File: muj5WvjmIRPm6Vjl1CXPg3bW_e4.roa (raw, json)
Hash identifier: jJJ1cMi39aXLwDnVzm/qfsNsmeVhlv1WedfPnzOdLTU=
Subject key identifier: 9A:E8:F9:5A:F8:E6:21:13:E6:E9:58:E5:D4:25:CF:83:76:D6:FD:EE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2292
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/muj5WvjmIRPm6Vjl1CXPg3bW_e4.roa
Signing time: Fri 25 Nov 2022 04:41:21 +0000
ROA not before: Fri 25 Nov 2022 04:41:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8850 (0x2292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9AE8F95AF8E62113E6E958E5D425CF8376D6FDEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:73:08:bd:6b:b2:56:1a:52:80:8b:ef:66:
2c:b0:ce:5e:de:97:9b:31:ae:96:5c:b6:54:b7:38:
c9:09:3b:da:ba:2f:28:36:6d:57:4e:c7:29:e1:b3:
b2:ca:6e:04:bb:bb:8e:40:ea:a8:9e:fb:b3:a1:01:
08:61:fc:4f:f8:b0:e2:8b:aa:b6:1d:5e:2a:13:96:
a3:e1:ee:72:64:4b:7f:71:60:f6:fb:ae:a2:ee:fe:
9d:26:8a:19:79:c1:00:f6:2e:e7:08:03:bd:e1:0b:
0a:af:db:ae:4f:d0:03:fc:b5:32:f6:ad:57:8d:25:
09:c4:4e:c3:62:17:a7:fd:ef:6f:95:f3:47:4e:9a:
e1:7a:56:6d:f1:98:b9:31:22:1c:46:23:59:20:0b:
64:9b:ef:4d:ba:b5:ab:94:f4:f3:63:b7:85:76:4a:
38:14:19:e3:5a:ac:e5:48:73:31:5d:8b:2c:c9:0f:
50:85:99:02:26:da:94:51:a2:eb:63:9d:bb:2d:80:
72:db:2f:07:b7:3b:a7:a6:4f:ea:c1:97:16:11:19:
fd:3c:a6:14:73:2c:f1:27:33:12:85:d4:af:ab:1c:
f8:fc:48:e0:4a:97:29:53:a4:ae:a5:d3:5e:b0:14:
54:ac:a5:5c:03:83:aa:80:7c:c6:c5:58:c0:b4:e9:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E8:F9:5A:F8:E6:21:13:E6:E9:58:E5:D4:25:CF:83:76:D6:FD:EE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/muj5WvjmIRPm6Vjl1CXPg3bW_e4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.128.0/22
Signature Algorithm: sha256WithRSAEncryption
37:1b:82:6a:48:43:91:5c:3c:0e:cd:88:81:0c:f7:0b:14:25:
c7:b3:61:d8:93:59:3b:76:83:b7:70:de:9b:25:7c:74:8e:0a:
7a:ef:d5:f5:6c:7d:7a:a4:d4:b0:bc:84:b9:98:b8:d6:49:76:
3d:be:f2:b3:02:cd:42:ea:f8:7a:00:1c:f1:b1:19:80:30:28:
07:e9:59:19:95:ec:27:72:75:46:ba:7f:96:3c:f5:41:8e:21:
30:50:d0:82:dc:53:25:18:5b:09:2f:58:39:39:13:fb:d5:39:
fd:f3:2d:c9:96:2a:5b:a7:9a:99:bf:1c:54:c5:bb:e6:bd:e2:
10:2d:2a:7b:e3:a5:3a:81:32:61:cf:05:95:07:5e:de:c7:80:
d2:73:a3:5f:a8:b1:52:9f:86:f6:98:5e:09:83:a5:79:6c:af:
37:04:ab:7d:5a:09:47:d1:9c:5c:b8:35:96:6e:37:f5:44:f8:
8d:9b:82:27:72:f7:9e:6f:7a:3b:f7:44:2f:e5:66:1d:ea:f2:
be:62:03:23:11:36:50:6e:e3:dc:55:f4:8e:4c:55:01:db:28:
ca:a3:bd:cc:5d:3f:26:07:60:16:28:bf:4b:fc:ef:a8:a6:b6:
0f:82:fb:da:28:ee:d8:6d:a8:e8:96:de:5b:a5:9c:71:e6:fa:
28:36:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org