Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qoQ58iVnEPQfBIvHj5jekNy531s.roa
File: qoQ58iVnEPQfBIvHj5jekNy531s.roa (raw, json)
Hash identifier: NHfsfcpJ+4pgOofDb8/4554DIQODgNpobSTfftYA0Os=
Subject key identifier: AA:84:39:F2:25:67:10:F4:1F:04:8B:C7:8F:98:DE:90:DC:B9:DF:5B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15F7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qoQ58iVnEPQfBIvHj5jekNy531s.roa
Signing time: Sun 07 Feb 2021 12:07:32 +0000
ROA not before: Sun 07 Feb 2021 12:07:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5623 (0x15f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:07:32 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AA8439F2256710F41F048BC78F98DE90DCB9DF5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:8e:8c:d9:96:e9:6d:16:7e:0b:63:dc:ee:
11:16:b1:93:6f:9d:a8:53:ec:72:a2:61:7c:44:14:
b9:30:8d:d7:26:c1:78:fc:2f:e6:70:06:cf:f1:d7:
a3:e2:0e:6e:0d:5b:3c:c3:ff:cd:19:51:af:86:69:
78:b1:65:ac:f1:72:97:7a:65:82:51:58:23:68:6a:
d1:ad:fc:f4:62:30:b9:8e:0b:f2:8c:cd:e9:d0:6d:
eb:06:cd:d0:18:61:81:7a:93:8d:43:4a:83:dd:e3:
a9:3a:d2:6b:ca:bf:71:7d:8f:46:2c:29:d0:40:b7:
31:a1:65:48:a5:a9:89:8a:11:09:3d:9e:b4:cb:7f:
fe:55:55:c5:4e:31:27:df:19:1d:fe:a1:9e:90:ac:
5e:68:80:d4:bb:21:cd:22:cc:0f:c4:12:15:b9:ed:
d2:23:4c:30:17:25:cc:52:73:e3:b3:7b:d0:39:e1:
a0:3b:84:c7:4e:df:40:a6:59:72:77:f8:b3:88:62:
c2:36:f5:5d:68:a5:d0:de:99:95:33:e4:86:7e:92:
4a:e9:8e:0a:6c:94:d0:1f:c3:ff:eb:b5:c7:18:3f:
17:ef:28:cd:0f:3f:a9:a9:79:6f:25:02:91:e5:75:
aa:20:0b:72:be:c0:e6:5f:8d:b0:c2:6a:90:81:f1:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:84:39:F2:25:67:10:F4:1F:04:8B:C7:8F:98:DE:90:DC:B9:DF:5B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qoQ58iVnEPQfBIvHj5jekNy531s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.92.0/22
Signature Algorithm: sha256WithRSAEncryption
04:2e:d6:d3:bb:5b:03:47:90:ce:0e:e9:37:19:31:b9:82:3b:
62:11:af:eb:2f:f4:59:d3:c8:ff:f5:e4:80:fa:56:2c:81:ba:
5f:b4:85:74:d2:30:87:f0:09:c6:4c:3d:ad:a5:74:2c:ae:93:
5c:0a:dc:f9:ab:02:9d:10:7b:4a:51:03:18:00:ae:2c:62:57:
e1:55:b2:38:fa:4e:a0:de:1f:14:d6:44:90:ba:4b:84:c8:bf:
58:e3:f2:9c:2a:8b:d9:77:d8:c3:15:10:ad:a7:30:d1:66:18:
2a:b9:0c:34:49:62:11:32:42:b2:56:8c:1f:66:c4:87:f5:a3:
fa:15:ce:89:c2:a0:c2:d0:9c:f0:5e:9f:e7:4b:9b:2d:65:06:
a9:bc:18:dd:0d:c5:f5:17:7b:ee:4e:fc:92:e0:90:c1:92:55:
ef:14:38:df:cd:51:b2:e8:41:23:b7:b0:28:0c:7f:78:45:dc:
09:fb:e2:d0:ba:76:61:93:f0:74:c7:dc:20:33:2b:be:f8:da:
75:1d:05:a7:b6:7a:e8:f9:1b:1e:c7:c9:ee:17:48:03:1e:4a:
40:38:97:2b:6a:46:f7:5c:a5:33:36:9d:45:40:e6:23:51:9e:
14:b9:d1:ed:13:42:a2:98:4e:4e:62:74:43:62:96:6d:65:3e:
5a:30:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org