Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yeNQ6_vDUbiEW7ItFhMMdEspc-I.roa
File: yeNQ6_vDUbiEW7ItFhMMdEspc-I.roa (raw, json)
Hash identifier: pBgktndjY+2hMXCsIHVZAglD/xr8V/lcoo/xEqHg4vQ=
Subject key identifier: C9:E3:50:EB:FB:C3:51:B8:84:5B:B2:2D:16:13:0C:74:4B:29:73:E2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B57
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yeNQ6_vDUbiEW7ItFhMMdEspc-I.roa
Signing time: Wed 29 Sep 2021 02:46:28 +0000
ROA not before: Wed 29 Sep 2021 02:46:28 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6999 (0x1b57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:28 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C9E350EBFBC351B8845BB22D16130C744B2973E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:ea:85:79:a2:4d:15:44:a5:fb:4e:c7:44:
47:da:c8:6e:62:1b:be:28:93:70:fb:15:52:3d:46:
a9:bb:3b:25:3c:98:9e:12:42:49:a7:e1:a1:b2:33:
1d:36:c0:3a:f0:82:fd:d2:3f:e5:71:37:d8:40:43:
de:11:b6:10:da:ba:2c:6b:25:76:2f:c9:0b:45:66:
af:e2:94:3c:4d:63:65:52:fc:92:4e:23:b3:f0:00:
59:e2:f0:83:95:30:95:c6:b4:0c:fa:1a:5d:e5:3e:
f9:49:8f:21:85:7b:4b:5d:49:ef:86:46:91:03:7b:
30:da:54:9c:35:db:95:91:a0:38:75:50:d2:98:26:
20:f0:46:6e:0d:42:a8:59:a1:ee:05:c6:d6:63:c1:
d2:5d:7c:ba:c4:37:fe:1e:4a:13:5b:fc:62:52:55:
df:14:ab:86:49:30:bd:7c:d8:5f:e7:b9:ef:1a:fd:
74:f0:08:97:41:b4:2b:21:24:54:e5:99:58:d1:38:
ad:36:d1:c2:89:9f:1d:3a:36:27:5a:a3:4b:96:eb:
e3:a9:10:a5:71:9b:1a:79:9f:2e:67:1a:16:b2:9d:
cd:b0:4b:e2:29:27:1b:68:3a:76:04:08:c3:87:62:
7c:86:a8:6d:7e:a1:cb:4e:67:e6:3b:87:51:65:ba:
0e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E3:50:EB:FB:C3:51:B8:84:5B:B2:2D:16:13:0C:74:4B:29:73:E2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yeNQ6_vDUbiEW7ItFhMMdEspc-I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.69.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b1:ae:a3:69:63:a0:c9:d5:dd:62:f7:d1:da:29:10:42:92:
c7:65:4c:0a:08:9a:4b:20:66:4f:0c:09:79:17:a1:38:ad:ed:
e3:56:f7:45:22:01:c2:83:ad:0e:a5:6d:cf:c9:1e:58:14:6d:
b1:93:86:77:f1:1b:a0:b3:6d:ef:86:b6:e8:d9:25:1d:2e:e1:
79:55:82:86:22:73:ce:49:b0:c5:c6:2e:f2:b0:40:28:15:68:
0c:bf:47:dc:81:0a:34:d4:d4:43:ec:45:fa:b5:fa:65:d6:f4:
13:1c:fb:0c:18:61:ec:ab:d9:08:a4:53:c9:0a:91:b4:ec:9b:
f3:a1:6e:dd:50:9f:46:2d:80:98:da:c4:94:c1:79:4f:ab:4a:
90:4c:ca:eb:01:e7:0c:2b:d2:2e:ac:20:f5:38:76:f7:7c:f1:
09:eb:68:53:94:4a:5c:b1:e6:4b:85:48:60:49:1d:18:0c:da:
74:3c:c0:5b:45:fd:bb:c0:53:1c:b1:36:44:fd:02:82:0c:5c:
d3:4b:6c:66:a1:b8:d6:52:e4:38:88:11:6e:fb:d1:8d:4b:a9:
11:e3:c7:5e:b0:89:46:14:d6:45:b1:fb:cd:8f:9d:c1:50:4e:
0f:78:85:74:8c:ce:b1:1c:eb:10:a8:b0:5d:be:d7:ac:7d:ed:
80:de:a7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org