Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tNR5dqDmJFIi7tSWZyp0xCKVSsc.roa
File: tNR5dqDmJFIi7tSWZyp0xCKVSsc.roa (raw, json)
Hash identifier: kfXrYmAnYSk0jIiDPxeWA0o8yTUgpMmjmZKN8CPydL8=
Subject key identifier: B4:D4:79:76:A0:E6:24:52:22:EE:D4:96:67:2A:74:C4:22:95:4A:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 16DD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tNR5dqDmJFIi7tSWZyp0xCKVSsc.roa
Signing time: Sun 07 Feb 2021 12:14:55 +0000
ROA not before: Sun 07 Feb 2021 12:14:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5853 (0x16dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:14:55 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B4D47976A0E6245222EED496672A74C422954AC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:76:77:a6:f8:fa:52:37:1c:c6:06:95:54:
77:48:42:40:95:ee:d6:0e:70:07:61:ef:62:ec:d9:
d8:c9:7a:f0:15:0b:16:be:9b:72:5f:b4:78:8a:07:
62:1e:2f:a1:16:90:5b:40:1e:82:d9:c0:30:0f:53:
e1:6c:ac:fd:fa:2a:5e:b7:e2:ac:8b:ee:3c:cf:48:
bc:f9:27:d2:3c:54:62:56:c0:e3:6a:21:79:10:b2:
86:5c:8f:68:6e:b3:63:a2:ed:13:9b:17:10:50:44:
f4:7d:1e:b4:e6:ee:fe:fb:f1:8f:0c:59:96:94:cf:
0c:b5:4f:77:78:4a:cd:8a:8a:85:ca:20:34:c1:98:
ef:cb:8b:71:82:89:e8:20:2f:db:c4:14:f6:89:12:
36:b8:ea:8a:06:e9:a5:b9:bb:3d:f7:cc:b3:1e:6b:
89:9a:86:b2:bb:9c:74:58:70:c3:dc:e9:b9:81:85:
ea:d6:bc:68:53:f4:fb:c6:3b:54:d2:e4:61:f9:8b:
71:21:c3:33:b6:38:fa:33:b8:0d:d1:af:24:b3:bb:
3a:45:8b:b1:ea:5d:af:7b:c8:6e:d8:f5:c5:36:4e:
01:85:2b:39:da:cc:61:bc:fe:cf:65:f0:15:58:77:
61:bf:52:56:01:b8:1e:f9:af:19:42:0e:95:fa:7c:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D4:79:76:A0:E6:24:52:22:EE:D4:96:67:2A:74:C4:22:95:4A:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tNR5dqDmJFIi7tSWZyp0xCKVSsc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.207.0/24
Signature Algorithm: sha256WithRSAEncryption
49:56:b9:06:22:9b:27:9a:85:4a:16:f4:09:fe:37:1f:36:0a:
ff:32:be:a5:ed:ce:8d:31:81:cf:6f:08:e7:cf:dc:e2:47:6d:
dc:d7:79:e9:55:5a:e9:92:5a:d9:e5:ac:f2:52:45:46:1d:5a:
01:13:da:c0:4b:ef:00:75:98:f6:d3:fc:df:6f:a0:2c:02:de:
84:57:60:e2:da:d5:c9:78:7a:fa:51:c9:56:ce:c9:a2:29:cf:
d8:eb:7c:1f:99:ee:7e:9d:11:48:22:74:eb:08:b5:00:29:79:
de:1c:52:f3:ed:09:86:0e:db:83:30:99:d1:f2:36:28:7e:e8:
f7:5a:94:fc:16:cb:54:d6:59:fe:0b:53:cb:9b:2d:db:16:e9:
42:52:6b:8d:78:90:10:4f:a2:03:56:16:2f:45:8b:03:b8:ba:
6e:f0:b8:09:b6:c1:a5:7f:0d:ec:61:52:50:e8:2d:66:80:c2:
2c:9c:7b:a6:13:9c:c5:07:33:1d:4a:55:2b:17:d4:8e:e8:41:
e7:74:b9:7b:8c:39:36:85:c8:e9:ef:c7:a9:ca:89:73:29:40:
e3:fb:cd:9c:b9:a6:34:22:ca:52:a7:a0:1f:66:16:fd:f5:b3:
1a:ca:83:0d:10:65:d1:a7:2d:bd:57:70:72:b6:de:2f:62:c0:
bc:1d:d8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:41 2023 by rpki-client on console-fra.rpki-client.org