Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/niZil5koNGsP1DUBHZNpTttlnpg.roa
File: niZil5koNGsP1DUBHZNpTttlnpg.roa (raw, json)
Hash identifier: 2d24jyoW0Vp9Por/72f5GcSEpCptXjGm76+FFIFyZso=
Subject key identifier: 9E:26:62:97:99:28:34:6B:0F:D4:35:01:1D:93:69:4E:DB:65:9E:98
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DAD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/niZil5koNGsP1DUBHZNpTttlnpg.roa
Signing time: Tue 29 Sep 2020 09:54:50 +0000
ROA not before: Tue 29 Sep 2020 09:54:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3501 (0xdad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9E2662979928346B0FD435011D93694EDB659E98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:a6:98:dc:c3:4d:2f:91:fc:d4:5f:a6:44:
ce:ac:10:76:3c:fd:3d:f1:eb:9d:b1:3d:e1:72:76:
77:b2:6c:24:9c:22:b7:ef:21:0f:4b:7c:54:88:dd:
ea:d2:71:a5:54:28:74:95:0e:29:f8:dc:db:17:5e:
40:a0:b3:57:42:ac:86:c0:a7:e1:89:ed:39:cc:8b:
59:34:be:7b:d9:28:85:93:51:5c:fb:8c:3f:12:d6:
71:38:f8:e8:14:4a:ec:e2:70:96:95:4b:f3:08:2a:
24:48:ea:96:07:64:c9:db:cf:e8:fc:53:50:9c:39:
d8:e7:94:92:5b:cd:ca:7c:1e:c8:de:cf:0c:f1:69:
34:2a:0f:b4:5f:e1:3e:44:06:6e:74:5f:5c:16:f2:
4a:22:49:5c:5a:a6:f2:b2:d5:da:cb:63:6d:5e:dc:
63:4e:95:08:45:e7:25:5d:a1:00:89:7f:d2:e0:81:
79:ec:2f:6a:09:e9:5b:24:b5:b0:d9:06:f4:05:c0:
55:72:61:f0:6b:33:16:af:21:88:56:85:c5:16:80:
90:ca:10:b8:95:68:f7:05:82:82:fc:45:9b:58:f8:
37:12:80:3f:dc:68:4c:57:fc:be:4e:f7:23:92:4e:
5e:7e:98:fd:aa:7e:80:3d:38:28:4c:9a:2d:fe:72:
a4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:26:62:97:99:28:34:6B:0F:D4:35:01:1D:93:69:4E:DB:65:9E:98
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/niZil5koNGsP1DUBHZNpTttlnpg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.13.0/24
Signature Algorithm: sha256WithRSAEncryption
91:07:00:ac:6d:b1:41:93:73:a8:ff:5e:5c:c8:01:0c:3c:ad:
1f:eb:08:30:f0:48:db:30:d3:45:c3:6d:f1:e0:0e:e9:9a:15:
62:a4:ae:12:1c:ce:4a:24:a3:55:a8:4d:3b:cc:c2:d6:69:82:
81:0c:15:15:8c:22:69:5c:9c:2b:4a:51:47:02:74:04:5c:0e:
96:d0:6c:ff:32:04:13:35:c3:1a:79:17:13:6a:9d:94:66:2f:
84:a0:60:da:0d:72:b9:cd:82:52:b7:79:68:b0:61:ee:db:0c:
a0:2c:f3:d1:54:5d:15:0b:b4:be:1e:53:dd:7e:75:1d:fa:1d:
72:16:d4:7f:35:ee:aa:ea:7a:57:b7:3a:f7:01:c1:d6:e6:29:
ee:68:67:43:49:f4:35:96:3d:09:02:13:11:51:08:74:ea:35:
a6:06:4a:ef:54:ab:fd:ac:33:66:03:b6:85:d1:27:be:fa:50:
08:1f:73:57:f3:c4:e3:5b:2a:5b:7b:00:24:22:76:10:50:d1:
f1:af:ea:e8:ec:26:73:79:95:cb:5f:96:ad:15:1e:14:72:02:
12:4c:31:a2:5c:d2:7e:7d:22:30:c9:6d:f6:c9:11:f8:c8:4f:
f0:0a:c5:59:07:94:12:a3:67:19:00:b6:11:72:8d:bc:b5:8b:
47:96:1f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org