Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tVhZQOJGJkGprdiYD5qiKuzpKVk.roa
File: tVhZQOJGJkGprdiYD5qiKuzpKVk.roa (raw, json)
Hash identifier: viIomcpVoGyzjYuLz13MqeZ3j2cPdXlNcPMbimKi20s=
Subject key identifier: B5:58:59:40:E2:46:26:41:A9:AD:D8:98:0F:9A:A2:2A:EC:E9:29:59
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CB3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tVhZQOJGJkGprdiYD5qiKuzpKVk.roa
Signing time: Wed 29 Sep 2021 02:48:04 +0000
ROA not before: Wed 29 Sep 2021 02:48:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.48.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7347 (0x1cb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B5585940E2462641A9ADD8980F9AA22AECE92959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:22:58:98:37:24:b0:6e:9d:5c:6c:d7:8e:
6e:fd:37:f4:c7:17:48:cb:4c:78:83:0e:60:34:d9:
99:37:f6:32:ae:40:b4:e7:ec:51:b1:04:10:f1:19:
e5:e9:b7:46:09:0f:73:87:96:d7:60:e9:91:cd:dd:
f0:22:10:ae:14:06:66:c5:4c:02:95:3e:c8:e3:9f:
bb:a0:4f:8c:49:77:d5:78:13:fd:4d:7c:d3:10:10:
1d:22:95:91:cb:ee:69:28:da:ea:c1:99:d2:13:21:
b9:0b:18:8c:03:e2:4b:0c:f2:83:19:43:27:a8:2b:
ad:7d:e9:5c:98:09:51:86:ce:8d:1b:a1:61:69:25:
9f:24:7d:af:75:71:70:60:0e:d2:21:4c:a4:67:b3:
00:ec:ac:e9:e9:99:99:ca:66:7b:6e:8c:2e:60:21:
65:b8:f3:0b:3c:e5:51:a9:e2:54:ab:64:4b:71:c0:
96:16:71:37:d3:58:06:72:f8:61:5b:79:4c:93:e1:
f9:d6:77:bc:cc:68:5a:0d:24:f9:77:2d:d3:e3:c9:
6f:e9:8e:fa:40:34:7e:b7:a4:be:a5:c5:5c:6a:83:
88:d9:86:b2:da:ba:e2:ff:9f:fe:d5:5c:b7:8e:63:
4f:90:57:8f:be:eb:e4:67:b2:3a:2c:ef:bd:0c:4c:
5b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:58:59:40:E2:46:26:41:A9:AD:D8:98:0F:9A:A2:2A:EC:E9:29:59
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tVhZQOJGJkGprdiYD5qiKuzpKVk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.48.0/23
Signature Algorithm: sha256WithRSAEncryption
19:2d:6b:92:bd:19:3f:69:d1:94:43:65:dc:02:95:76:36:a4:
99:13:13:ae:6e:97:6e:9d:30:65:d8:cf:f1:f4:84:1d:df:77:
d5:49:1a:ff:c0:83:e4:56:1a:02:c2:8e:cd:82:a2:05:d2:f2:
21:6e:c1:ee:66:91:dd:62:5e:e7:9b:fb:5c:d6:0a:77:69:c2:
83:f7:8e:87:01:e8:0d:f8:9c:30:c5:8b:5d:43:fd:6e:ec:e3:
34:a8:3f:e6:30:f9:11:c7:5a:a6:30:c6:94:f2:1c:c4:da:3d:
7d:59:67:52:65:03:84:6b:ff:f9:02:a6:f3:98:bd:4b:93:64:
c0:06:7c:1d:2c:52:45:6e:62:2b:89:e0:3d:77:61:fc:61:e4:
37:71:4e:6b:4d:83:06:f2:56:ee:a7:c3:06:64:51:e8:99:15:
e6:3f:e0:e3:46:94:2e:23:1c:20:b0:54:5e:a7:d8:00:ef:00:
84:c7:29:f9:42:63:d4:16:1d:77:89:d9:fa:c8:1e:45:18:c7:
a9:c8:cd:7a:7c:e2:c7:fe:dd:0b:ad:01:bd:00:11:67:e5:26:
aa:5e:2e:dc:fc:62:ed:7d:c1:ba:b2:cd:ca:de:c9:c9:06:21:
e0:06:d3:e7:f3:cd:54:8d:d2:73:ca:ab:20:17:de:3c:78:fd:
a1:a7:0f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:30 2023 by rpki-client on console-ams.rpki-client.org