Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yaIB1H2P0F9bwolQhJxyxj1hKj4.roa
File: yaIB1H2P0F9bwolQhJxyxj1hKj4.roa (raw, json)
Hash identifier: KWWmmwm/zGsvQVT22TJgQ38XvLCamT74LzVLv3TmvhU=
Subject key identifier: C9:A2:01:D4:7D:8F:D0:5F:5B:C2:89:50:84:9C:72:C6:3D:61:2A:3E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1557
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yaIB1H2P0F9bwolQhJxyxj1hKj4.roa
Signing time: Sun 07 Feb 2021 12:04:06 +0000
ROA not before: Sun 07 Feb 2021 12:04:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5463 (0x1557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:04:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C9A201D47D8FD05F5BC28950849C72C63D612A3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:fd:dd:cc:ca:db:f8:bb:de:15:53:13:8c:
08:a8:48:ec:ad:56:66:13:8b:96:18:87:34:aa:84:
ad:e6:09:a3:0c:4f:28:6f:e6:6b:06:20:e0:1d:3f:
2c:95:e6:8e:7c:a9:4a:0c:56:61:af:55:26:83:e1:
30:d1:69:2e:52:e1:5c:26:0b:f0:96:ae:9c:15:b5:
a3:c8:41:bb:f3:3c:14:a1:4c:31:70:62:f0:b0:37:
2d:a9:2f:7a:dc:e3:15:89:15:07:d4:bf:96:bb:b1:
e1:1f:e0:b4:8b:37:e5:02:53:86:b9:72:61:86:99:
95:d1:94:c3:ee:17:b3:c9:75:70:eb:bf:f6:de:b1:
ba:bf:07:d8:ff:26:75:31:22:2f:aa:88:eb:2f:07:
59:ea:6e:d6:78:4c:df:66:44:cc:02:8e:53:85:d8:
b4:d1:ad:ad:fd:5a:6d:03:43:28:05:97:64:a2:0a:
25:a1:dd:32:75:2b:01:1e:8a:08:6c:36:82:97:12:
76:66:8d:45:81:c3:fb:0c:47:1c:ce:61:b6:45:62:
83:87:52:da:6f:39:16:56:4c:af:e2:59:95:f2:32:
56:90:19:91:2b:3a:e0:92:81:0b:a5:00:05:6e:58:
a7:57:d4:a9:2f:d6:3f:7f:bc:d8:37:89:b7:74:8b:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A2:01:D4:7D:8F:D0:5F:5B:C2:89:50:84:9C:72:C6:3D:61:2A:3E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yaIB1H2P0F9bwolQhJxyxj1hKj4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.224.0/21
Signature Algorithm: sha256WithRSAEncryption
70:dc:56:aa:42:06:da:b2:35:de:f1:67:ea:eb:1f:c9:40:73:
b1:a1:63:39:ed:8b:83:df:b5:2b:12:dd:f2:12:e5:1f:66:69:
52:c4:19:0d:2c:f1:36:94:a4:f6:b4:c7:ee:c3:28:e4:a6:8a:
f3:ef:15:6e:87:10:af:2c:98:1e:96:d0:54:84:af:1d:8f:d7:
20:61:7f:1b:71:0e:c6:da:67:45:3c:e8:73:ca:40:14:19:ef:
7e:43:d2:b3:aa:9f:61:e0:68:e9:24:46:d1:10:5d:35:0b:82:
cc:bb:37:c6:5a:fb:9f:f1:bc:fb:30:0c:46:27:a4:c1:6e:3f:
3c:ad:70:06:d6:47:2f:88:07:a9:eb:cb:89:3b:c3:d2:66:89:
f7:ac:83:75:9d:32:4a:c9:03:cf:33:a1:cb:18:ce:19:8a:6c:
87:81:6f:75:a1:84:f9:d3:fd:04:ba:6e:e3:4c:92:19:04:fd:
19:42:63:54:af:69:b7:c9:bf:ad:b2:b5:d8:15:15:b3:5d:32:
7f:8e:a3:f8:2c:42:64:98:67:da:73:43:17:59:a3:a7:ca:52:
0d:96:51:55:bf:54:24:11:08:5a:f4:96:c2:d1:cc:f2:de:55:
30:04:a9:75:00:a0:d1:19:73:97:b5:f4:aa:52:9e:44:39:da:
22:53:f3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org