Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o1131tTMkhd-JUK20JAqKbTgfW0.roa
File: o1131tTMkhd-JUK20JAqKbTgfW0.roa (raw, json)
Hash identifier: wSqFS4JP5fWBw45I986pRGNEba5S5oWDRJBhCAvdSqM=
Subject key identifier: A3:5D:77:D6:D4:CC:92:17:7E:25:42:B6:D0:90:2A:29:B4:E0:7D:6D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BA3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o1131tTMkhd-JUK20JAqKbTgfW0.roa
Signing time: Wed 29 Sep 2021 02:46:49 +0000
ROA not before: Wed 29 Sep 2021 02:46:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7075 (0x1ba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:49 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A35D77D6D4CC92177E2542B6D0902A29B4E07D6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:38:c6:27:60:ff:ec:bb:87:ee:c8:d8:ed:
15:a1:d2:40:25:0e:c9:81:2b:40:0d:90:8a:2a:a7:
c9:e6:e8:b9:f8:49:e0:0a:b7:d6:4d:44:bb:f0:f3:
51:90:ad:5e:86:31:59:46:21:b7:a1:d6:26:9d:cb:
ca:cb:9a:2a:34:fd:03:34:c0:2f:2f:5c:ed:85:a5:
09:e0:42:67:90:55:3b:10:8b:71:e5:1a:75:f1:f9:
2f:ee:21:95:f8:00:bb:db:63:37:eb:dd:92:0f:1f:
d9:b7:92:09:38:bf:34:2e:e5:ab:b7:83:2a:f1:63:
e9:53:88:96:4d:93:95:f2:2d:c7:b0:2c:81:5e:ea:
cb:30:6d:a1:24:de:81:a1:6f:66:a5:bb:f6:9f:7e:
72:ba:6f:cd:68:1c:c9:bc:47:2a:11:a8:4d:14:3f:
c8:5b:9a:c9:91:e1:00:db:02:6e:42:9f:f7:ea:a8:
8d:58:1e:cd:67:65:38:91:80:51:8e:94:28:56:1d:
d2:cf:fa:30:b5:22:5a:63:94:6a:74:36:36:aa:61:
f0:01:56:c6:55:30:e4:4d:58:c0:cd:9a:3b:78:b8:
f9:ff:84:9e:6e:05:72:19:d8:31:e4:d8:ab:4a:70:
1a:87:3c:bf:62:ec:76:15:70:ba:8e:d2:02:a4:71:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5D:77:D6:D4:CC:92:17:7E:25:42:B6:D0:90:2A:29:B4:E0:7D:6D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o1131tTMkhd-JUK20JAqKbTgfW0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.88.0/22
Signature Algorithm: sha256WithRSAEncryption
60:b5:b8:fe:6c:5d:02:e9:60:1c:3c:d8:db:74:ab:87:d9:7a:
de:46:46:81:1b:fe:92:3b:96:32:7a:f6:7c:f7:29:59:81:47:
2e:1d:4f:11:da:d2:c9:cf:33:60:40:f4:0a:3f:1c:bc:c6:cf:
4a:48:b7:08:95:04:3b:68:b9:ff:14:ce:ff:eb:27:f7:1f:c1:
0a:3c:96:1b:64:63:c7:61:26:1e:a3:68:d6:ee:af:6e:95:b6:
10:30:c6:cd:92:1a:31:46:0c:61:94:ed:a3:fd:d2:00:c3:d3:
65:0a:5f:4a:50:a5:07:e2:51:14:be:c8:18:51:65:d3:f5:e7:
8a:13:4f:b9:b9:d9:fc:2d:96:23:c5:45:0a:64:1f:38:f7:a5:
7b:88:53:39:3e:95:7f:03:24:89:45:0f:39:09:ce:80:93:1e:
48:46:74:eb:f6:71:1c:f2:01:5e:31:b5:f7:72:d4:3c:1e:38:
b4:41:6a:29:e1:79:c7:67:62:bf:3c:9a:f2:dd:2d:d3:55:f9:
a8:a1:63:4f:25:43:e8:1b:40:40:e7:61:34:d7:89:60:51:ca:
e9:cc:c2:1c:c5:c8:e2:05:f2:5b:8e:d8:07:80:63:f7:25:76:
1e:d9:76:e7:a2:22:1b:28:59:4e:bf:7e:2b:bf:97:a6:97:10:
88:33:ab:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org