Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wlfloDnOq-i1zBR6_7vsMtx4vdI.roa
File: wlfloDnOq-i1zBR6_7vsMtx4vdI.roa (raw, json)
Hash identifier: l1tRWewzemG34APwQdOl6lFwoDsgbR/go3115VFF2Rw=
Subject key identifier: C2:57:E5:A0:39:CE:AB:E8:B5:CC:14:7A:FF:BB:EC:32:DC:78:BD:D2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1F03
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wlfloDnOq-i1zBR6_7vsMtx4vdI.roa
Signing time: Fri 01 Jul 2022 02:03:26 +0000
ROA not before: Fri 01 Jul 2022 02:03:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.236.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7939 (0x1f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Jul 1 02:03:26 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C257E5A039CEABE8B5CC147AFFBBEC32DC78BDD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b2:26:a1:1b:50:39:65:0c:1a:07:37:43:87:
23:91:61:1b:4a:0f:32:ec:72:45:df:d6:4d:06:b3:
6e:a3:cd:ec:58:19:26:80:4c:72:c5:e8:63:d1:54:
73:69:ed:e2:75:71:64:3c:8a:b7:ea:d2:d8:1e:0a:
a4:92:7a:fd:8a:02:aa:ff:47:18:05:68:33:98:b6:
58:6a:5e:03:5e:4f:ad:5a:f8:46:67:63:00:14:57:
57:63:f7:46:b8:95:4a:8c:44:1c:c2:77:4f:e3:77:
9f:c9:1e:14:b8:7e:d9:70:ea:84:65:24:e0:44:60:
e1:e4:a7:90:90:d1:de:b7:2f:c0:8a:85:74:6d:51:
50:09:b5:a9:45:4e:f7:26:9c:09:8b:ba:71:3e:d5:
c3:09:22:09:f4:d3:93:40:34:25:05:84:76:55:fb:
dd:6e:3b:11:73:d4:95:71:34:1d:34:c7:91:1f:46:
a7:98:8c:83:62:4b:55:81:a1:fe:47:a1:2c:1c:db:
0b:b5:77:8c:cd:6b:26:04:53:55:05:f3:06:79:85:
3b:09:4b:36:85:00:70:5d:6a:a9:ce:38:fa:cd:d5:
37:b4:11:99:ef:db:69:ab:28:b3:ed:d0:23:c5:7f:
d2:89:4d:08:51:61:3b:5a:54:cc:df:4e:e2:59:8e:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:57:E5:A0:39:CE:AB:E8:B5:CC:14:7A:FF:BB:EC:32:DC:78:BD:D2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wlfloDnOq-i1zBR6_7vsMtx4vdI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.236.0/23
Signature Algorithm: sha256WithRSAEncryption
43:f7:d7:27:1b:8c:55:98:f5:2d:e0:be:9f:b6:59:96:25:13:
61:3f:b4:b5:26:ea:15:1c:f5:ad:21:50:b9:2d:e7:ac:22:08:
a8:36:46:38:2f:ec:84:3f:13:cc:fd:5d:f7:9d:7b:31:b8:1b:
df:9b:67:03:17:d6:16:f5:d7:7e:fc:b5:b1:5f:55:c4:85:c5:
4a:18:f8:74:f3:25:23:0e:f9:0d:09:e9:42:30:3f:be:9f:ce:
96:1d:3b:fa:31:9e:c7:02:10:f6:be:2e:1d:69:54:1e:2e:83:
ac:d6:63:77:80:58:a9:21:bb:9a:d9:c2:e0:5b:b3:f4:ac:49:
95:a7:58:c7:15:c5:91:54:44:92:56:08:60:43:21:2f:2d:77:
2c:ff:3c:19:f1:0d:9f:ba:e8:da:53:f6:fb:c2:18:17:7f:ca:
86:09:23:cd:66:9b:6f:bc:e7:9a:6d:03:72:33:29:17:f7:e5:
2d:9c:6b:cb:38:96:8c:60:95:2a:99:4b:cf:f1:e6:b7:df:26:
40:ec:fa:fe:7f:75:c4:95:1d:11:36:ad:b3:ea:eb:39:1f:01:
ba:f4:05:bd:78:dc:c5:eb:06:71:df:1f:04:0d:02:0f:0b:51:
6f:68:62:2f:eb:b2:f6:67:c4:7d:0b:47:df:8c:05:0c:69:0f:
e8:0d:79:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org