Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/znHbpcDL7L9tX_Hi0erS9j4kLWU.roa
File: znHbpcDL7L9tX_Hi0erS9j4kLWU.roa (raw, json)
Hash identifier: F7PhLC33n0c18uOhwIGhAiPjdM0MHa2xs1SMnVwymq4=
Subject key identifier: CE:71:DB:A5:C0:CB:EC:BF:6D:5F:F1:E2:D1:EA:D2:F6:3E:24:2D:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1749
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/znHbpcDL7L9tX_Hi0erS9j4kLWU.roa
Signing time: Sun 07 Feb 2021 12:18:04 +0000
ROA not before: Sun 07 Feb 2021 12:18:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5961 (0x1749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:18:04 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CE71DBA5C0CBECBF6D5FF1E2D1EAD2F63E242D65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b3:53:17:f6:fa:4f:84:6b:86:64:a7:8c:5c:
a5:ac:12:42:85:ec:9b:f6:f5:0c:05:e5:72:49:01:
d9:48:24:16:d1:9a:4e:87:0c:1e:7e:f3:6e:dd:eb:
9d:62:b8:8c:e9:23:15:5d:76:7c:86:32:c2:47:69:
13:27:2a:e0:a9:16:5a:0a:1f:15:24:c8:77:da:35:
a8:cc:4c:78:93:bf:0e:ba:8c:b7:f4:31:48:09:bc:
3e:21:2a:7b:c4:04:13:1d:e0:8a:9d:30:9d:47:a6:
80:32:5d:34:05:b8:22:83:69:8b:00:ab:fc:e5:a2:
68:4d:1f:96:45:72:c7:28:65:21:6b:8b:53:8b:dd:
c7:8c:2c:b0:c7:35:21:b7:30:8b:0b:41:8d:db:be:
24:cd:77:86:2d:e8:2a:2d:a6:e6:70:79:ad:79:c9:
2d:1c:dc:b2:52:20:d9:43:e5:be:0e:4e:f1:45:27:
5c:df:07:d0:5e:3a:f7:77:b6:fd:e5:83:e3:8a:0f:
d3:90:67:a7:69:66:86:fa:ad:4d:d1:58:60:0f:fc:
57:e5:bc:d0:fb:9a:fb:0d:79:51:5e:24:c5:fe:85:
46:82:22:52:3f:e7:0e:5b:ce:38:f1:c8:f3:ae:99:
e2:20:0b:d5:f3:c8:56:2f:19:d2:e7:47:53:4d:9c:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:71:DB:A5:C0:CB:EC:BF:6D:5F:F1:E2:D1:EA:D2:F6:3E:24:2D:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/znHbpcDL7L9tX_Hi0erS9j4kLWU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:34:2e:1f:07:6b:03:f5:05:14:5a:1b:45:a0:0b:da:cc:6f:
e6:06:07:1e:af:13:d5:e4:ef:0b:50:21:a5:da:29:e0:9b:cb:
7f:32:5b:6b:b7:c4:d3:77:4a:21:06:26:5f:1b:d4:3e:9d:a2:
50:2d:5b:51:20:7c:a9:02:bf:bd:01:28:4c:bd:c8:44:34:cc:
23:f2:11:66:5f:6f:bb:8e:9d:71:d6:e1:b6:5f:89:81:f5:2d:
48:6c:67:d8:f8:02:ba:d5:0f:61:11:e4:9d:90:ec:e0:98:0e:
47:e2:8b:9d:ec:95:6f:18:15:3d:af:cb:6c:59:e0:5b:f7:33:
29:41:f6:13:2f:10:d4:42:6c:77:0e:1c:82:d9:58:72:65:6d:
e0:37:93:07:9d:a1:cf:fd:98:1c:24:23:2d:39:f8:70:f8:e1:
e3:97:11:61:57:c6:17:38:d6:e7:94:2e:fc:f1:a2:74:a4:b6:
4a:e4:66:cf:95:50:e0:df:76:d2:04:01:a8:65:9e:15:fc:95:
af:3b:11:9e:23:35:db:44:27:59:16:26:54:86:cb:6c:fc:95:
81:96:0e:10:51:ad:14:2b:0a:60:22:c4:47:dc:68:c8:62:d5:
f0:66:a5:31:eb:95:2c:5d:59:f2:a9:3d:9c:b7:f3:f6:8a:ac:
57:bb:23:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org