Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nb9q9JnyB5qtz6GS3hX9IrvFWhM.roa
File: nb9q9JnyB5qtz6GS3hX9IrvFWhM.roa (raw, json)
Hash identifier: 3GebZUeDKc5llTE4V4YDutbM1km+QHk0ypdHVypLIa4=
Subject key identifier: 9D:BF:6A:F4:99:F2:07:9A:AD:CF:A1:92:DE:15:FD:22:BB:C5:5A:13
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17EB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nb9q9JnyB5qtz6GS3hX9IrvFWhM.roa
Signing time: Sun 07 Feb 2021 12:24:42 +0000
ROA not before: Sun 07 Feb 2021 12:24:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6123 (0x17eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:24:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9DBF6AF499F2079AADCFA192DE15FD22BBC55A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:59:e0:b3:2d:cd:b3:d3:17:d8:a5:58:d5:
94:53:45:6c:d1:b5:e9:ab:09:27:8c:8c:01:6e:40:
4b:80:a3:eb:5c:54:b4:81:a3:67:30:3f:39:bf:07:
d8:f2:66:21:36:20:60:7e:3a:0c:78:c6:de:12:ef:
0a:40:ec:f9:aa:52:2a:14:d8:57:e5:8d:24:d8:b7:
9e:18:c3:a7:9e:61:c0:4f:49:72:6d:90:ff:5c:7c:
03:df:41:61:0b:10:a9:a7:3b:5b:63:da:11:e5:90:
3e:b4:83:65:a2:2d:c5:c7:e4:9e:98:d3:88:ba:23:
b7:52:83:5f:66:9c:d3:c1:60:07:fb:e6:69:4d:8a:
d5:ee:0c:e0:5e:b3:c9:13:6f:24:86:f8:4c:d1:0f:
6c:0e:1c:e2:fa:6e:87:6b:5d:4b:b6:f1:27:df:b7:
18:84:05:0c:76:f6:66:95:c0:62:e7:63:c1:06:8d:
45:21:56:70:42:a2:19:fa:40:9c:93:8c:5c:bf:aa:
22:17:66:f7:98:a8:b9:03:0a:b9:9d:65:84:de:67:
6b:95:28:13:49:c3:3e:62:32:10:cf:42:7c:f6:18:
35:53:56:c4:d8:e3:20:6b:92:f2:4b:d0:80:41:37:
3e:f7:ff:6d:52:9a:87:8e:2d:30:86:dd:6a:d9:e3:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BF:6A:F4:99:F2:07:9A:AD:CF:A1:92:DE:15:FD:22:BB:C5:5A:13
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nb9q9JnyB5qtz6GS3hX9IrvFWhM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.130.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c0:7d:84:5c:d9:ab:2a:db:26:c3:4f:ba:94:9f:c8:9b:6e:
c6:8d:e0:53:2e:6d:18:4b:36:5b:d1:c0:01:a9:1b:a7:12:f4:
17:c7:a4:3d:33:a4:5f:22:80:8a:4c:a9:47:f0:0b:56:4f:11:
97:fa:fc:b9:79:9d:89:6d:d4:b3:01:c3:5f:73:17:23:fc:2c:
97:69:3a:a5:5c:e6:22:4c:6a:68:d7:c4:ab:f3:42:62:9f:54:
62:18:71:f9:a1:d5:e8:b3:f5:cd:73:fb:d6:42:45:fb:80:69:
89:29:42:e5:ae:01:f6:83:28:96:43:e9:bc:49:33:9c:e5:21:
e1:e6:b9:86:56:2e:03:18:19:63:d4:a6:fe:31:9d:42:80:f3:
5e:1f:ac:07:9f:ad:a8:37:b6:81:76:f7:4b:e8:8d:b3:05:c2:
03:f8:08:9e:04:68:1c:d1:0c:13:f6:ec:b0:87:82:34:e4:6e:
21:5a:58:d0:ad:20:54:90:ee:a6:9f:cc:4d:eb:48:cc:ae:eb:
ab:93:3e:b7:df:6c:67:cd:8b:ce:b2:be:d5:04:69:93:c6:94:
12:be:8d:a2:77:ed:de:11:bb:01:24:2b:42:8d:95:c9:bb:5d:
d2:ea:e0:3e:a9:99:32:23:0f:6d:7c:de:d1:4e:fd:1b:83:56:
d8:85:63:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org