Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/za-jYUyS8v7XQOXS1IuXV7wQFlg.roa
File: za-jYUyS8v7XQOXS1IuXV7wQFlg.roa (raw, json)
Hash identifier: fZ9uDDO5LYm2/4x/re/P+LHLUKlcXIKEwYEue3L2mCk=
Subject key identifier: CD:AF:A3:61:4C:92:F2:FE:D7:40:E5:D2:D4:8B:97:57:BC:10:16:58
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D52
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/za-jYUyS8v7XQOXS1IuXV7wQFlg.roa
Signing time: Tue 29 Sep 2020 09:54:27 +0000
ROA not before: Tue 29 Sep 2020 09:54:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3410 (0xd52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:27 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CDAFA3614C92F2FED740E5D2D48B9757BC101658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fe:5d:fe:e0:41:32:48:62:f3:37:bd:c9:b4:
22:99:40:81:b1:ee:36:ac:2d:fb:e8:ea:4c:c5:1c:
ca:55:c4:0e:29:8a:5f:93:4c:39:f7:13:ba:c1:1c:
a9:b4:0c:4f:66:df:54:df:37:42:99:97:13:37:54:
fd:60:7d:0d:58:2a:95:bf:ed:35:0c:fc:90:92:a3:
d8:29:44:fb:4e:b8:2b:67:d7:44:23:6b:83:1b:44:
03:95:32:b8:c0:c8:98:fb:a5:31:d8:36:18:67:7e:
49:c8:cf:1f:ad:1f:9e:e9:d6:93:8f:eb:91:1d:ac:
6e:2c:8e:7f:86:14:22:66:16:b4:8b:43:89:32:24:
90:e6:9c:97:a2:44:97:af:f7:d3:0f:b1:79:c8:d0:
e3:a1:21:18:77:1e:37:27:0d:4f:92:d7:06:c6:bb:
aa:13:ce:b6:0f:6b:62:57:10:3a:c8:45:5b:8a:20:
a2:f8:8e:7b:97:17:aa:fa:41:6c:ff:95:66:ae:d8:
87:15:a6:fc:0e:fc:c1:7f:7f:9d:e4:54:cb:e2:72:
3c:97:09:f1:e1:87:b7:cf:64:43:e5:5e:01:a3:b2:
0c:15:b3:ed:ad:29:47:a8:02:f7:be:18:7d:ee:86:
16:f9:45:b0:b2:2d:36:26:42:48:ea:c9:1f:e9:b1:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AF:A3:61:4C:92:F2:FE:D7:40:E5:D2:D4:8B:97:57:BC:10:16:58
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/za-jYUyS8v7XQOXS1IuXV7wQFlg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.104.0/22
Signature Algorithm: sha256WithRSAEncryption
19:ec:2f:90:47:fb:ac:6a:3a:eb:b5:ef:9e:89:66:76:e2:32:
8a:6c:0e:3c:4a:0b:66:e5:8e:34:70:d5:67:46:cd:8d:2e:99:
4d:01:d7:98:b5:42:48:46:a3:d2:ba:bd:c3:13:40:b5:4f:fe:
d3:28:8b:e8:40:78:16:cd:c5:9d:f2:65:fe:74:1d:e4:fe:52:
26:5e:ec:02:b2:0d:3b:04:1a:7b:60:91:68:d6:83:72:8a:c5:
20:d7:14:03:b2:3f:bc:fa:e0:e5:b2:6c:df:2c:ab:1d:48:a9:
93:d4:7d:96:fc:9a:e0:5c:d3:88:c8:8b:04:de:39:9e:02:98:
92:34:02:0f:54:2a:ea:7a:27:94:a6:01:01:36:a4:2d:a7:2d:
2c:6f:91:30:f5:90:4f:dd:52:0d:9e:e8:9f:2b:96:41:be:43:
b1:17:8c:d5:00:42:a6:d6:02:16:6e:47:f9:41:97:c7:db:42:
5b:03:e7:c1:ef:24:36:c0:7f:85:86:a8:0c:0c:2a:b8:13:a4:
35:f6:13:6e:b6:87:53:21:33:f3:87:d1:bf:f7:ce:1b:44:ec:
cd:3b:38:e4:b9:16:e1:28:84:25:ba:c6:03:e8:37:e3:df:23:
1d:2d:cd:20:b8:e2:7b:aa:c3:0d:f0:43:65:a1:9e:37:f7:08:
91:c5:d8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org