Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uEyZuP7t58T-8-Zpf8OwhL5h0L8.roa
File: uEyZuP7t58T-8-Zpf8OwhL5h0L8.roa (raw, json)
Hash identifier: 1xnCcOeHIwRiNgTo/eXlfDGxper7RQfgzQZR+Rxc1Gc=
Subject key identifier: B8:4C:99:B8:FE:ED:E7:C4:FE:F3:E6:69:7F:C3:B0:84:BE:61:D0:BF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F25
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uEyZuP7t58T-8-Zpf8OwhL5h0L8.roa
Signing time: Tue 29 Sep 2020 09:56:33 +0000
ROA not before: Tue 29 Sep 2020 09:56:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3877 (0xf25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:33 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B84C99B8FEEDE7C4FEF3E6697FC3B084BE61D0BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:57:bf:3e:3f:7b:e8:7e:5d:9e:a4:8a:4e:
02:a3:20:bf:5a:54:0a:23:50:99:28:68:2f:ae:6e:
9e:16:c2:27:93:1f:73:28:b6:59:c3:40:6b:22:ef:
fb:fb:07:37:ba:ae:ea:0a:54:d9:53:82:91:74:09:
33:f8:6d:26:85:34:64:83:17:8b:cd:31:2f:30:ac:
51:dc:b7:74:52:f3:b0:8b:a1:66:d2:24:34:d0:f4:
d3:fd:9f:9e:41:7c:63:cd:21:7f:a3:e3:09:d0:be:
de:df:59:f4:ff:1e:96:2b:e2:1c:f7:5f:7e:76:10:
8e:27:5e:72:3c:c9:46:38:55:86:a8:4e:69:8c:92:
87:92:2e:b8:e8:1c:c3:f1:65:ad:16:b6:c9:6b:19:
8b:0b:22:69:29:20:b1:ef:84:e1:21:49:7a:de:00:
7e:22:eb:47:b4:18:29:17:2d:d5:6f:32:b5:06:1c:
7f:95:cd:55:2d:1e:f8:ac:74:0d:b6:a0:af:cb:af:
bc:37:33:b3:03:61:cf:f7:e6:bb:9d:da:9f:a6:10:
4f:3e:98:c6:3b:dd:e8:c7:c8:70:68:2d:39:15:d1:
3f:be:84:0f:8e:d0:a1:6c:00:ff:5d:5b:58:ae:19:
4e:a2:1c:79:56:2e:ba:1f:6b:52:7d:33:52:54:84:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4C:99:B8:FE:ED:E7:C4:FE:F3:E6:69:7F:C3:B0:84:BE:61:D0:BF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uEyZuP7t58T-8-Zpf8OwhL5h0L8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:11:06:b0:09:38:4d:9a:5e:fb:46:12:d9:85:04:3e:7d:e4:
93:ac:c4:d9:df:b4:fb:b6:c9:43:bd:28:02:91:95:ff:9a:39:
78:66:64:d1:3e:db:c7:5d:18:c4:21:86:6c:c5:20:b2:e8:81:
a3:43:7d:ec:55:f2:88:1b:8e:52:60:3b:21:ea:51:2d:eb:26:
c0:34:39:ac:62:3c:96:d4:08:0f:48:e7:ef:7c:5b:92:b9:7a:
e1:b2:64:ec:c2:27:94:a5:62:3f:00:54:b2:8f:4f:61:5f:3e:
d1:dd:2c:52:ab:f5:d5:df:dd:eb:42:05:ff:1a:ad:c5:cf:2d:
a2:f5:b8:82:4f:83:2f:e7:e5:f0:2c:e8:73:42:23:17:64:7c:
21:3c:eb:ec:2d:d4:43:41:08:cf:39:3f:dc:7f:d2:32:d2:24:
73:93:28:d8:3e:7d:e5:fb:31:25:72:e9:b2:c8:cb:f6:75:e7:
2e:72:e9:ae:a0:63:78:99:d9:6a:30:16:82:2a:1f:7c:e8:4f:
e5:fd:95:29:f3:23:20:29:3d:e2:9e:c6:fd:ec:9a:fa:f1:da:
c6:e9:29:d8:09:90:f9:15:8e:cb:1c:b1:f0:5a:16:4c:00:79:
52:3b:c5:3e:43:76:00:37:00:38:71:fb:28:95:30:cb:52:c0:
53:22:d7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org