Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/us82BuGoWIB_xwJdaCdDM8yxbHk.roa
File: us82BuGoWIB_xwJdaCdDM8yxbHk.roa (raw, json)
Hash identifier: OOfs7yC6gOGenlv0dJ7T9alhRrKH8IqPy4DGQrOFHvI=
Subject key identifier: BA:CF:36:06:E1:A8:58:80:7F:C7:02:5D:68:27:43:33:CC:B1:6C:79
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BCB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/us82BuGoWIB_xwJdaCdDM8yxbHk.roa
Signing time: Wed 29 Sep 2021 02:47:00 +0000
ROA not before: Wed 29 Sep 2021 02:47:00 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7115 (0x1bcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:00 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BACF3606E1A858807FC7025D68274333CCB16C79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:19:4d:2a:34:cb:a6:b0:dd:ef:ec:15:ed:
13:3e:d1:7c:c1:9d:31:16:e4:77:1b:8f:8e:21:fa:
92:2c:7e:4f:f3:56:19:38:f5:ba:56:0b:82:4e:a6:
98:d3:61:f7:a2:14:41:2a:b5:55:1f:03:c7:a5:59:
04:17:0e:c6:d8:84:8e:a3:d1:74:3f:d4:7e:d1:81:
c9:fb:96:17:91:1d:0c:99:75:00:88:83:da:be:9c:
db:ea:a2:4d:e6:22:04:27:e1:03:51:6d:5c:16:9b:
b7:c2:e6:5a:56:a3:c2:d7:39:9f:ed:8a:cb:f8:e1:
05:62:66:9b:b4:3f:c0:7c:13:4e:94:ac:0c:96:e9:
10:68:de:a5:b6:f8:30:31:1b:87:63:ae:60:7f:c5:
ac:d9:d8:a9:41:8e:ce:2e:8d:dd:9d:08:28:70:f6:
57:0f:b9:23:61:5c:f0:6b:d4:52:38:a9:59:36:5b:
6e:40:24:86:af:df:ed:99:4c:7c:18:2f:ca:27:08:
c2:f8:8d:c3:98:88:6d:fa:a6:ad:16:f0:ad:4c:54:
fc:7d:f0:08:3d:a8:aa:71:14:df:67:b1:d6:12:78:
c8:9e:fc:38:42:3d:9f:89:94:8c:07:2d:fb:df:ab:
27:d3:91:51:7c:23:12:5f:87:a7:3a:db:84:ab:ff:
84:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CF:36:06:E1:A8:58:80:7F:C7:02:5D:68:27:43:33:CC:B1:6C:79
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/us82BuGoWIB_xwJdaCdDM8yxbHk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:76:a4:e1:55:4a:f1:e7:8f:a5:06:8c:0f:98:1b:88:4f:d0:
0c:5b:68:7e:1a:96:0b:61:22:ba:c1:54:2e:9e:7e:45:c2:a8:
89:56:20:97:73:0e:f7:4d:6c:2b:20:27:8f:e5:31:dc:cc:a0:
b3:6f:c4:76:16:e9:a6:75:70:81:3e:10:c5:97:95:e5:73:ec:
23:f0:07:53:e8:8e:e6:0d:ea:5d:13:2b:af:23:ef:c2:49:8f:
ba:0a:32:c3:c5:1e:81:21:f9:ca:1f:63:53:13:b0:78:60:09:
2f:8d:52:f3:e9:96:65:c7:8b:78:5b:66:28:ed:76:52:ac:9c:
54:34:33:f6:02:61:5b:4b:32:cf:7c:f3:93:ac:a6:92:99:bb:
b8:ae:e6:74:c2:4c:8e:50:6e:af:42:c5:8a:9c:62:4c:28:19:
fa:00:7e:c1:46:f7:4f:c7:ab:1f:49:99:0e:b8:71:98:19:b9:
d2:28:c2:11:9b:22:21:d7:4d:87:b6:4e:fd:f9:e5:be:28:eb:
00:08:bd:41:b5:3f:a2:40:f4:43:29:fa:9e:cd:4b:e3:24:73:
41:4d:e7:13:a8:5e:91:e3:f4:28:c8:eb:ea:e8:3b:47:9c:5c:
0d:2c:08:38:90:ed:c6:d4:e6:4b:c0:a5:2b:a6:27:8c:d1:6e:
e3:03:10:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org