Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4MYLAspiaEbo_P6kYYlW_f7aRQM.roa
File: 4MYLAspiaEbo_P6kYYlW_f7aRQM.roa (raw, json)
Hash identifier: 7Y4Js1yktcagFVKSwgUmKd8Wq/ocgtiQwGYNoxyjEyk=
Subject key identifier: E0:C6:0B:02:CA:62:68:46:E8:FC:FE:A4:61:89:56:FD:FE:DA:45:03
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0CE6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4MYLAspiaEbo_P6kYYlW_f7aRQM.roa
Signing time: Tue 29 Sep 2020 09:53:57 +0000
ROA not before: Tue 29 Sep 2020 09:53:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3302 (0xce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:53:57 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E0C60B02CA626846E8FCFEA4618956FDFEDA4503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:77:01:c8:c3:92:f5:76:7c:e8:97:aa:ce:
62:db:da:92:e7:20:b8:1c:f8:8a:2f:98:2c:ba:9c:
17:1b:49:d9:eb:ad:46:65:75:aa:f0:b2:5f:95:46:
93:dc:b5:68:48:55:03:66:7d:ba:02:c2:83:b1:e2:
23:61:6d:bc:19:65:47:d9:24:b7:13:fc:09:30:ba:
a3:24:16:d9:f0:df:35:5f:43:31:c3:61:fd:64:c2:
96:1d:1f:e9:27:0a:ee:74:57:26:8b:6b:47:6d:cc:
62:2f:df:8d:45:62:30:f9:e5:8f:a6:f5:8a:c3:07:
df:2b:a8:23:f7:2b:0a:51:37:a0:3e:bf:0d:c7:43:
e8:9c:14:89:ea:6a:bf:a7:dd:52:a9:1f:cd:92:3a:
fb:b6:5e:fd:3a:d5:cd:08:8c:08:03:8d:c8:8f:44:
42:f5:60:06:4a:51:64:13:6a:fd:2e:31:1b:46:ec:
b4:38:a9:c0:71:30:1e:37:a5:29:fc:4f:85:5c:9f:
53:cb:e7:92:16:4b:58:29:3e:5a:df:51:cb:11:6e:
d0:44:6d:df:cf:69:10:34:eb:d2:d3:bd:8c:94:f4:
58:79:80:3a:3c:74:4d:4c:39:00:f9:83:22:b8:97:
b9:2a:aa:38:5a:20:e0:fe:11:33:c4:21:3f:6d:ec:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C6:0B:02:CA:62:68:46:E8:FC:FE:A4:61:89:56:FD:FE:DA:45:03
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4MYLAspiaEbo_P6kYYlW_f7aRQM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.152.0/22
Signature Algorithm: sha256WithRSAEncryption
92:63:a5:06:75:0d:b7:e8:0d:bf:13:14:13:f3:e8:14:10:2a:
9a:7a:76:24:d4:20:76:a4:ec:8e:02:bd:7f:bb:7c:72:b3:6f:
6a:cd:82:b9:1e:0e:3b:26:79:8c:57:82:f5:9a:00:74:8f:61:
07:69:f1:b3:f6:bd:b7:a3:19:e9:b8:92:21:35:b3:c1:ce:34:
db:98:f6:d0:d6:60:89:2b:db:1b:26:b4:06:58:06:80:94:48:
e7:c1:36:42:a7:b5:c4:c9:21:bd:cf:f0:35:0f:d4:e6:50:d1:
0f:8a:f3:ef:08:1c:a6:24:4e:71:31:85:31:03:30:a7:6b:2c:
1c:9b:f8:d0:00:2e:f5:59:8b:2b:1d:68:82:8c:4b:e0:de:e9:
01:94:83:67:ab:16:35:78:a5:07:38:7a:fb:db:06:d8:09:5f:
f3:4f:01:2d:4f:61:78:97:df:7c:50:43:d9:ed:63:af:d6:52:
9d:a4:51:5e:c0:a8:da:69:81:07:af:c0:bd:39:0c:34:bd:fa:
02:89:bc:37:21:d8:f4:83:2d:7f:6d:0b:4e:16:03:4b:41:50:
d8:99:1a:b5:55:36:67:2f:8d:df:8f:74:95:b9:36:f6:0e:1d:
22:de:aa:05:cd:78:47:fb:e7:e3:2b:db:a3:db:5a:41:36:4a:
ec:38:d9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:22 2025 by rpki-client