Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pvIJxaohJGvNrVRBywW6YveNLag.roa
File: pvIJxaohJGvNrVRBywW6YveNLag.roa (raw, json)
Hash identifier: gX+eKLkzozODwjMYKTTR99bqJADwVWRCVlb/ObWmwK8=
Subject key identifier: A6:F2:09:C5:AA:21:24:6B:CD:AD:54:41:CB:05:BA:62:F7:8D:2D:A8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 227C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pvIJxaohJGvNrVRBywW6YveNLag.roa
Signing time: Fri 25 Nov 2022 04:41:14 +0000
ROA not before: Fri 25 Nov 2022 04:41:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8828 (0x227c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A6F209C5AA21246BCDAD5441CB05BA62F78D2DA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:a3:51:47:d2:63:8b:0d:c9:d2:8b:cd:05:
c8:11:39:f5:d2:d5:cd:29:7f:6c:a1:b3:0c:00:d3:
75:b5:a7:a5:1c:b3:bf:d6:5b:38:81:88:b5:60:35:
6a:59:06:bb:21:6f:c7:ca:89:ab:e9:4a:4e:d5:d3:
42:27:2a:b5:c5:08:dc:f6:93:49:d5:44:9a:59:a3:
32:d8:67:66:30:74:53:3e:fa:ff:2f:ca:a1:e4:3c:
82:20:b6:19:d1:15:7e:23:28:69:1a:c8:b6:44:d6:
d9:87:9e:b7:44:93:83:c8:2e:b4:f4:16:cc:69:b6:
c4:8e:10:37:d9:9e:09:d3:3e:f9:34:77:92:11:03:
6a:c4:2d:3f:d0:d5:69:33:30:bc:1b:55:7c:84:e8:
84:57:17:d4:45:a9:83:ee:aa:f8:3a:d3:54:72:21:
19:27:2c:b0:30:eb:fe:92:d6:cd:ae:24:69:e6:8f:
63:7e:8a:cd:c9:61:27:ce:30:c3:85:43:ad:32:c4:
bf:a1:bf:c3:91:11:c1:78:44:9d:c0:55:d0:5f:8f:
4c:17:9e:c0:00:3c:e1:8d:b8:9c:8f:c0:7f:79:89:
e1:4a:d7:f2:73:fc:cf:50:e7:c8:0b:f4:53:50:19:
02:dd:4b:e0:79:c0:1b:98:d3:ea:b0:81:c5:43:9a:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F2:09:C5:AA:21:24:6B:CD:AD:54:41:CB:05:BA:62:F7:8D:2D:A8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pvIJxaohJGvNrVRBywW6YveNLag.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.180.0/24
Signature Algorithm: sha256WithRSAEncryption
18:95:db:c7:03:c4:a9:fa:d4:a7:9b:17:67:02:b7:65:68:8d:
70:16:db:78:d3:0f:4d:9e:6a:f8:23:53:9c:c6:27:5b:14:50:
10:b1:2f:56:69:12:95:48:8f:c7:52:c4:4c:31:f6:99:1e:2a:
49:84:b1:18:a2:a4:96:2a:ca:a8:15:2e:00:b5:47:42:a3:49:
82:e3:59:93:c3:42:d8:88:93:98:02:5c:fe:ca:92:e8:eb:7e:
90:ad:8d:16:46:65:75:14:75:04:e2:7b:38:23:e1:b7:85:10:
17:c9:4b:c5:cd:ad:24:33:8c:d2:65:2b:60:c0:8b:82:0e:ec:
37:bd:40:10:30:f6:47:31:4f:2b:a7:9a:4f:f2:6e:6d:f3:46:
2b:d9:0a:6c:ab:bc:6d:46:b9:02:4e:eb:1a:11:c0:4a:4f:8b:
b3:c2:0c:8c:dc:19:0f:76:b5:16:c9:88:95:fe:82:a3:f7:37:
fd:7d:75:3a:b5:86:ab:68:2b:14:93:3e:ec:f2:55:6f:b8:d1:
e0:90:49:66:df:67:00:78:a3:9a:5a:97:9a:96:29:45:6a:4c:
c5:c6:ff:a1:91:86:6a:19:fb:9f:05:35:c2:52:52:eb:77:8f:
87:8b:db:28:7b:02:25:b4:55:b5:33:aa:4b:47:73:99:6b:85:
f5:2f:7b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org