Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vZrCWUC4NH5Ddlxuh1TArNgPQyk.roa
File: vZrCWUC4NH5Ddlxuh1TArNgPQyk.roa (raw, json)
Hash identifier: W1p5Ldes7o7Cyyu4UU8DgLZ2qAapTHLOruUVtzm6dos=
Subject key identifier: BD:9A:C2:59:40:B8:34:7E:43:76:5C:6E:87:54:C0:AC:D8:0F:43:29
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vZrCWUC4NH5Ddlxuh1TArNgPQyk.roa
Signing time: Thu 15 Sep 2022 02:52:58 +0000
ROA not before: Thu 15 Sep 2022 02:52:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BD9AC25940B8347E43765C6E8754C0ACD80F4329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bd:70:0d:58:5a:af:d5:32:15:bc:bf:a5:91:
42:e8:c8:bd:4c:3c:ce:40:be:88:18:5b:a7:4f:0d:
e3:20:08:bc:6d:aa:3b:a4:bd:2a:8f:4f:e1:5a:aa:
58:7c:83:62:2f:d5:7d:e2:12:1c:de:1f:3c:2c:51:
66:39:96:57:0c:79:68:f6:2b:eb:08:77:22:9d:82:
86:d7:3f:15:1f:ae:cc:c2:ae:85:2e:47:1c:90:26:
6b:12:a5:2c:ca:99:90:62:26:84:7c:7e:a5:e6:83:
33:e0:89:56:14:0b:ce:39:1c:58:5a:40:1e:eb:f2:
5e:58:75:e6:6a:f5:6e:ea:4a:01:a3:1b:20:71:ee:
1b:33:91:c0:fc:6f:65:ac:f0:b4:10:58:aa:2c:a2:
c3:9c:0d:96:9d:f1:f7:d0:3b:01:f3:2a:50:43:75:
07:8e:27:93:49:b9:2f:d5:90:86:bf:79:bf:78:71:
05:61:c7:81:73:9c:1e:a3:2f:a5:0e:0a:4b:09:e3:
51:a1:19:72:3d:9f:1f:e8:f3:12:d3:27:d2:eb:da:
b4:ff:11:98:6d:30:61:f7:12:d2:d4:a5:d3:8a:18:
f5:c5:e2:e5:f3:17:67:bf:6e:f0:0c:35:e1:03:f1:
7c:64:83:3c:49:52:76:64:17:aa:ea:17:ba:13:3e:
c9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9A:C2:59:40:B8:34:7E:43:76:5C:6E:87:54:C0:AC:D8:0F:43:29
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vZrCWUC4NH5Ddlxuh1TArNgPQyk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.172.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:8d:56:48:c1:0f:d4:b4:1e:7a:c7:40:ab:8f:ad:7f:b0:6f:
12:66:fb:16:6f:58:df:34:01:9e:4a:73:46:06:ef:1b:ec:ea:
1a:4a:db:77:85:ab:08:e9:5e:19:ab:6b:3e:00:a8:8b:ad:8e:
79:78:46:83:07:37:6c:a9:1a:ad:27:0c:72:f2:3c:05:e6:e4:
82:e5:81:50:77:89:86:9a:ab:6a:9f:5b:29:9d:f9:06:1b:b7:
d4:aa:1e:7f:e8:3d:c6:f8:93:df:8c:03:8b:09:8d:9a:82:7e:
62:01:62:81:9a:bf:79:77:31:b4:d9:64:01:75:fa:5e:9d:62:
c0:e3:0f:c3:d6:b1:55:ca:21:8e:b9:40:b4:c7:4b:5a:4a:c5:
13:de:95:10:9c:04:35:30:e4:2e:6b:20:77:cb:6f:cf:76:d4:
1c:e8:b8:10:fb:eb:0d:dc:d6:91:c0:ef:63:02:3f:f8:57:90:
af:81:c6:c4:86:3d:39:3a:0e:f7:22:37:0b:90:29:d4:a8:47:
54:2b:0c:cc:11:60:28:9d:73:75:5f:fe:cf:77:76:8a:00:03:
85:3a:af:f0:cc:98:95:63:5c:cb:71:af:7e:f7:91:0d:d2:ef:
0a:bc:37:2e:f0:d0:c1:0e:d9:8c:35:33:4f:e5:9b:b9:4d:be:
c7:ab:b0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org