Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zTtBEqr4_sRrTsVq9LpwCHje8ZY.roa
File: zTtBEqr4_sRrTsVq9LpwCHje8ZY.roa (raw, json)
Hash identifier: DJWpBS/N0r7a6uOC6pwAJch71BBP+0w1WLK+uOzWq6E=
Subject key identifier: CD:3B:41:12:AA:F8:FE:C4:6B:4E:C5:6A:F4:BA:70:08:78:DE:F1:96
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1637
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zTtBEqr4_sRrTsVq9LpwCHje8ZY.roa
Signing time: Sun 07 Feb 2021 12:09:02 +0000
ROA not before: Sun 07 Feb 2021 12:09:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5687 (0x1637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:09:02 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CD3B4112AAF8FEC46B4EC56AF4BA700878DEF196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7d:6f:e4:5e:7c:77:5e:33:b4:e8:a0:38:06:
a2:74:71:9c:6a:f1:ed:ac:2b:ae:83:1e:5f:06:f7:
53:5f:f6:67:5e:89:d0:e8:f0:b4:c1:83:32:f9:33:
b2:b2:f3:51:25:6c:05:36:85:d4:36:73:03:8c:a5:
7f:9f:5e:51:fa:b2:35:f9:93:77:b3:19:75:7a:a0:
d9:4c:da:73:69:b4:11:c5:8a:85:1d:fa:01:57:bd:
eb:67:e8:3f:d6:36:dd:d3:e0:45:9f:40:b7:81:a5:
15:78:06:3c:fe:fd:ac:64:3d:dc:26:41:22:d4:fe:
3a:7e:db:d8:03:6d:ca:27:58:25:f1:13:92:d1:74:
19:31:19:c1:7b:e1:32:e0:14:10:a3:64:b4:5e:ec:
ef:cf:b4:04:c1:1c:ff:19:b4:d8:f5:0d:4c:e3:a9:
20:f6:85:dd:8d:ef:c7:77:0a:a1:e2:3c:ee:48:36:
d7:6e:59:a3:5a:77:28:86:9f:bd:dd:2d:33:00:a6:
73:61:99:d9:0f:2b:be:a6:25:56:40:b1:94:10:f9:
6b:ca:c7:83:2d:c8:5a:93:19:df:70:4a:14:19:62:
8c:04:79:4a:fc:81:24:9a:7d:11:b9:08:04:d8:35:
45:ff:48:63:b8:10:a7:c0:9d:d4:cf:35:83:6a:1d:
17:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3B:41:12:AA:F8:FE:C4:6B:4E:C5:6A:F4:BA:70:08:78:DE:F1:96
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zTtBEqr4_sRrTsVq9LpwCHje8ZY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:5c:f0:cf:1f:d9:23:0c:a8:79:12:fe:91:16:7c:cf:4d:13:
13:c2:3a:f5:06:cb:59:95:c4:be:21:ff:c7:0d:a0:34:0d:96:
1b:8a:85:14:6d:71:d0:5a:b6:2b:41:88:d0:3f:f0:ea:f7:23:
2e:36:0b:07:bd:c3:cf:4e:92:c8:63:87:ca:a0:b0:d2:df:a6:
c0:4f:37:80:a7:c7:9f:b0:ff:84:f2:f9:d5:59:aa:aa:6e:6c:
b0:e0:8b:2a:29:24:22:c3:4d:8c:4c:20:1f:33:8b:d6:d5:a5:
3d:70:23:8b:04:49:ac:6b:2e:3f:d4:88:92:d0:8e:28:23:05:
9d:d2:fb:b1:ab:64:23:c1:33:6a:69:a9:66:80:96:61:f4:63:
da:f8:ed:86:59:ee:30:7e:75:92:36:1e:1e:d7:94:57:83:84:
6c:2f:d8:5c:65:7f:be:e3:3d:11:5e:c2:a8:6c:36:a4:37:ee:
99:f7:77:e4:18:e1:74:4c:08:08:62:d4:31:40:91:fe:9c:37:
71:09:e4:79:f2:b9:92:4f:6c:a1:96:8c:22:de:b1:57:14:3e:
a1:e2:e5:66:9f:7d:e6:f8:2e:7b:ce:71:79:5f:4f:2f:65:02:
35:c4:62:dd:10:f9:c6:69:11:20:fc:53:0b:e2:15:b6:46:2d:
8c:b2:3a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:43 2023 by rpki-client on console-fra.rpki-client.org