Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-bFOcSoX7V0OH0iL09Qf2C_uqKA.roa
File: -bFOcSoX7V0OH0iL09Qf2C_uqKA.roa (raw, json)
Hash identifier: KyhwNNjOuBXZBi86x9ymvvoT83qbWQrbCSUzgYV8ZZU=
Subject key identifier: F9:B1:4E:71:2A:17:ED:5D:0E:1F:48:8B:D3:D4:1F:D8:2F:EE:A8:A0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2920
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-bFOcSoX7V0OH0iL09Qf2C_uqKA.roa
Signing time: Fri 01 Sep 2023 10:06:10 +0000
ROA not before: Fri 01 Sep 2023 10:06:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10528 (0x2920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F9B14E712A17ED5D0E1F488BD3D41FD82FEEA8A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:5f:67:50:50:cc:f4:cb:f3:da:2f:10:e5:
c0:1a:69:23:84:57:ba:bd:9b:cf:21:e5:f7:f2:a2:
5d:94:bd:ca:53:84:0f:3c:6e:96:5e:0b:8a:cd:ee:
7f:79:bc:6f:72:e7:d6:36:0c:f9:1c:2a:cb:4a:4c:
57:6e:95:8d:e5:20:66:8b:c0:a1:d5:5a:94:74:10:
ed:30:5b:2d:f9:cf:87:27:0b:7c:da:78:8f:1e:d1:
8f:74:72:c2:6b:05:a6:77:10:3f:fe:fb:a5:78:81:
f8:15:bb:64:a9:dc:ed:32:2f:7e:93:c7:86:93:bd:
46:9c:a3:78:1d:81:f3:09:9d:37:ea:f0:6e:8d:9e:
06:95:cc:03:55:f8:79:29:80:d2:ed:8d:6f:8b:c9:
09:5f:11:34:b9:78:90:39:5d:8e:99:9e:4b:2a:69:
52:ab:f6:9c:a8:7f:a7:0f:42:e0:4d:0c:08:af:51:
2b:6d:83:bf:44:af:3c:c8:c0:73:70:fc:2f:2f:c5:
c9:18:9b:72:df:92:42:d8:90:7d:58:fb:d6:56:f7:
68:9e:62:1f:17:31:1e:60:6a:43:9a:a3:d0:f0:c8:
cb:31:e5:fa:fe:1f:90:8c:5d:c0:25:04:3a:37:c3:
17:e8:74:2b:2e:a1:87:18:f1:74:ee:ad:9d:15:f3:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B1:4E:71:2A:17:ED:5D:0E:1F:48:8B:D3:D4:1F:D8:2F:EE:A8:A0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-bFOcSoX7V0OH0iL09Qf2C_uqKA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:63:b3:6e:c3:fc:54:48:13:fb:2e:6f:e4:20:5d:cb:ec:46:
3b:84:f7:12:94:0a:a8:15:d5:64:7a:e1:a1:2d:02:b7:34:75:
3a:01:f6:08:44:ed:d0:42:dd:79:09:dc:b0:9c:95:c1:7b:c5:
88:bf:6a:3b:8d:95:20:96:88:40:0d:30:fa:86:c9:8e:68:32:
07:74:f5:c0:67:22:3b:fd:c0:86:68:66:28:6a:db:fd:79:f4:
69:19:af:a4:3e:ca:6e:38:f4:87:0d:e1:19:d8:47:de:92:c7:
6f:a3:f8:58:1c:52:26:a8:0d:c1:d6:ec:6a:40:e6:74:ae:19:
d2:09:15:34:b3:c1:8a:33:a9:99:94:0f:2c:2a:51:6c:3d:ed:
51:ff:53:8c:3d:03:84:3c:5e:94:18:3f:34:4a:30:ba:1a:4a:
aa:c1:f0:65:72:05:66:38:4b:c9:35:ff:94:54:56:8c:e9:40:
14:7d:8a:d9:8e:c6:7c:ab:9a:23:7b:ab:fb:e9:ec:ae:cf:63:
ee:b3:46:d6:2f:30:de:4a:58:25:47:a1:15:f8:61:65:ed:75:
82:e0:8b:34:53:bd:50:fb:90:34:7e:e2:d0:bc:1f:af:d9:1f:
52:c0:f1:4a:f9:af:1b:50:89:f4:df:b7:61:57:58:5c:b1:86:
b2:4f:14:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:21 2025 by rpki-client