Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nw7X0mPXcqxvdKSYXH5qjrGfCjo.roa
File: nw7X0mPXcqxvdKSYXH5qjrGfCjo.roa (raw, json)
Hash identifier: fT6v5ADw+KmzRDMoMX+HKpsUB5kCxXngGF03pFFE0eA=
Subject key identifier: 9F:0E:D7:D2:63:D7:72:AC:6F:74:A4:98:5C:7E:6A:8E:B1:9F:0A:3A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1747
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nw7X0mPXcqxvdKSYXH5qjrGfCjo.roa
Signing time: Sun 07 Feb 2021 12:18:01 +0000
ROA not before: Sun 07 Feb 2021 12:18:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5959 (0x1747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:18:01 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9F0ED7D263D772AC6F74A4985C7E6A8EB19F0A3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:fc:82:ac:be:8f:8f:a1:c6:c4:b3:6e:e6:e4:
32:13:dc:b1:6e:44:d2:1a:f0:43:2f:e6:58:6a:0a:
62:fc:43:38:ff:27:53:32:51:d8:7c:70:4d:fe:50:
68:e1:11:ae:c3:66:55:3f:46:91:47:32:79:ef:e1:
c0:25:65:38:17:e6:e1:04:16:fb:78:5b:b2:91:34:
87:2f:48:17:01:13:fe:08:d8:17:10:9f:44:f7:31:
6c:65:93:5e:5c:aa:d4:85:67:e7:39:c5:b7:ef:6b:
8f:2d:d4:fb:c1:0b:8b:ec:a0:ab:6b:b8:d4:19:30:
78:fc:0b:fc:b0:e4:a7:bb:30:cf:76:a7:80:69:f6:
90:cf:46:0f:d5:30:fb:4b:43:ac:ef:03:5b:d0:e0:
7d:92:d9:73:e0:bb:fa:c5:9b:ba:73:5c:bc:72:8c:
ac:57:7b:97:e7:08:b3:44:d7:33:8f:90:97:c6:3c:
80:1a:69:5e:0e:2d:8c:db:d7:57:37:a3:0e:0c:d7:
ea:86:e1:f5:cd:f8:cd:d2:92:3b:df:06:1b:d2:e6:
ce:c8:5c:28:0f:c1:f4:f9:c9:45:7b:7b:36:17:3d:
08:10:d6:1f:87:0a:3b:ee:3d:27:55:b9:b0:bb:30:
84:05:08:6a:e7:dc:64:f4:90:03:d5:14:53:3d:b3:
54:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0E:D7:D2:63:D7:72:AC:6F:74:A4:98:5C:7E:6A:8E:B1:9F:0A:3A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nw7X0mPXcqxvdKSYXH5qjrGfCjo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.13.0/24
Signature Algorithm: sha256WithRSAEncryption
94:77:bc:31:88:f6:6c:83:77:92:f4:69:5b:ee:79:09:c8:c9:
61:8f:f2:e6:73:80:e0:5e:a6:43:12:ad:2d:7a:01:5f:b1:b9:
69:77:2a:91:b6:8b:9a:36:ed:0e:46:49:c4:e0:60:6d:c6:65:
c9:83:72:ab:96:b0:47:ad:aa:d2:39:d8:b2:59:06:0a:c3:fe:
bf:fa:d9:d0:98:31:d2:b1:b6:62:9e:86:e9:d7:54:2c:41:08:
ca:f4:40:be:12:36:3b:3a:44:6f:0e:6e:56:58:09:c9:a5:ba:
1e:87:67:b5:76:88:5d:8d:96:bf:2c:0a:6a:f9:b4:8a:2c:47:
7b:45:ea:f5:72:9f:cc:56:54:06:91:e8:fb:be:b0:f6:ef:92:
ab:8a:64:49:79:68:1b:45:33:cd:5e:62:51:15:47:83:22:bf:
f3:50:1a:d3:be:de:3e:b2:1c:9e:6a:13:10:1e:44:ea:9e:90:
03:47:52:ce:bd:fa:76:d5:3a:38:12:1c:0e:0f:f6:84:c5:73:
72:c1:ad:8c:0c:2e:27:08:ff:41:cc:89:8a:d5:e9:a5:10:ca:
0d:36:f7:88:ed:f7:e0:e1:bf:68:62:62:ec:f6:28:a6:c5:7c:
e8:9c:00:be:fb:3c:4d:cf:da:ad:10:d6:0e:2d:83:4a:c4:ba:
f5:d7:d7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org