Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y0ddRdOPjug9EW9JYM-6z2pHD-M.roa
File: y0ddRdOPjug9EW9JYM-6z2pHD-M.roa (raw, json)
Hash identifier: vaD6TyA5PNMB9x7IDW8eSxniDaM1suYS7O6c31xV5cg=
Subject key identifier: CB:47:5D:45:D3:8F:8E:E8:3D:11:6F:49:60:CF:BA:CF:6A:47:0F:E3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y0ddRdOPjug9EW9JYM-6z2pHD-M.roa
Signing time: Thu 15 Sep 2022 02:44:45 +0000
ROA not before: Thu 15 Sep 2022 02:44:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CB475D45D38F8EE83D116F4960CFBACF6A470FE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:ad:01:66:08:17:6a:4d:44:ca:ba:3e:64:
a2:22:36:7e:dc:11:c2:3c:e6:14:21:c5:1f:1c:4b:
8c:f4:65:41:a6:15:c8:d4:3f:aa:d8:fa:c4:85:c3:
d9:a4:a7:3a:8d:b0:1a:70:9d:39:57:d3:3d:75:62:
69:67:74:2b:52:91:e1:77:05:a2:92:c4:c3:66:27:
91:29:19:21:1f:1a:3d:2d:63:4c:6e:0f:32:ba:eb:
e5:31:9c:35:d8:bd:bc:c4:f9:ba:2b:45:61:ba:7e:
08:fc:17:83:81:8d:f0:24:eb:d1:cb:37:6e:d7:9e:
96:5a:74:9d:5b:ab:f2:79:f9:c5:b4:9b:e4:c2:c5:
97:36:9a:6d:ed:11:32:df:56:94:af:89:ee:ed:9a:
ec:04:c4:f4:04:a6:fc:63:56:39:b0:82:85:97:b2:
11:9d:95:d3:47:cf:c5:46:0e:b1:f2:a5:ad:ad:56:
db:76:84:75:47:b1:44:34:f2:68:58:08:41:3f:30:
4d:7b:98:3b:05:ae:99:40:94:e8:49:19:1d:8d:7c:
23:67:f8:c3:1c:15:dd:29:2a:1e:e8:21:30:b5:34:
22:78:88:03:21:b1:d2:29:a7:bc:86:49:77:4f:84:
10:0f:05:40:33:94:67:d3:de:10:e9:a5:07:74:09:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:47:5D:45:D3:8F:8E:E8:3D:11:6F:49:60:CF:BA:CF:6A:47:0F:E3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y0ddRdOPjug9EW9JYM-6z2pHD-M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:00:3e:43:de:8c:2e:85:db:cb:3a:9f:01:0e:ae:b2:13:b6:
29:8c:78:82:fc:f3:47:12:0f:87:76:e6:af:cc:f5:cf:a5:c1:
5f:8a:3f:cf:ed:5f:2a:46:ee:2b:b5:e2:29:b7:a5:d7:3a:3d:
07:33:6e:3c:b8:66:0f:c4:ff:0a:67:92:3d:0d:58:45:ff:b8:
33:df:49:e9:69:1a:49:cf:46:35:90:20:0f:f0:3d:63:c3:87:
99:7a:38:ee:29:8d:fd:d5:78:6f:b2:72:c8:77:48:e4:97:f0:
7a:1c:88:b1:bd:2c:ec:7a:62:e3:cf:85:96:64:41:da:d9:22:
05:ff:16:22:2d:0c:76:35:d1:0f:7e:d4:b6:b4:ec:48:3d:aa:
4e:a9:46:da:3f:b0:07:93:67:86:f8:c2:9b:c4:e2:ad:6c:01:
56:74:74:fd:4f:26:a1:d4:e4:4a:55:1e:be:10:72:38:e1:1f:
a3:e9:9d:d5:f9:92:79:23:36:64:e5:c4:11:6e:91:84:98:dc:
bb:15:cf:2f:03:aa:c8:7a:82:6a:7d:84:1e:cb:ca:b8:8f:a6:
67:7d:7e:e1:9e:78:fa:d4:0d:18:8b:6d:f6:67:67:39:34:11:
00:c9:34:00:61:cd:01:eb:ec:c9:b3:f2:68:32:04:5e:26:9a:
3f:92:de:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org