Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5odb-ontKHo86pkyauPKIbe2JUQ.roa
File: 5odb-ontKHo86pkyauPKIbe2JUQ.roa (raw, json)
Hash identifier: 00AkqM5o1PaU6L9YsKeZGLhrmRk4bvjGsG13IuA2PN0=
Subject key identifier: E6:87:5B:FA:89:ED:28:7A:3C:EA:99:32:6A:E3:CA:21:B7:B6:25:44
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CAA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5odb-ontKHo86pkyauPKIbe2JUQ.roa
Signing time: Wed 29 Sep 2021 02:48:02 +0000
ROA not before: Wed 29 Sep 2021 02:48:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7338 (0x1caa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:02 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E6875BFA89ED287A3CEA99326AE3CA21B7B62544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a5:67:cf:65:e0:22:61:bf:60:d0:28:9d:44:
5e:04:64:c7:60:e1:05:ae:c8:71:e1:92:62:f1:c3:
06:ac:e3:6c:bd:32:bf:f1:eb:70:11:6c:8e:46:f8:
46:0f:24:a5:41:eb:f7:ee:f6:ee:cd:4b:2e:20:6b:
05:ce:5b:98:50:fe:a8:65:63:b9:c6:d7:14:e6:47:
fc:f1:53:59:3c:ba:81:fb:22:30:b9:76:f0:c4:ca:
de:3e:a7:20:ac:87:17:f6:9d:90:33:d9:94:bb:fe:
3c:f3:c4:27:54:6b:65:b5:bc:c6:ee:21:66:fb:83:
de:4a:af:4d:13:4b:96:89:53:60:af:e1:50:30:56:
c2:64:9b:a2:76:b7:49:3e:00:24:c4:cd:65:40:b4:
c4:16:d2:5f:0c:4d:c8:56:16:b8:fa:6b:46:09:6d:
9d:35:47:9d:72:b4:fa:fb:c1:2e:0b:5e:c5:91:7d:
db:d6:eb:77:af:39:0b:63:0d:a2:8c:6c:0d:76:4d:
25:b2:24:ff:31:0e:f1:ad:37:08:9a:63:df:cd:7c:
de:45:cf:91:27:84:ff:ff:3f:d9:37:f5:4e:6c:52:
61:0f:05:a1:03:69:a0:93:58:a1:49:b8:1c:a8:54:
11:c7:f2:da:eb:13:7f:91:d9:dc:f7:b6:86:0d:bc:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:87:5B:FA:89:ED:28:7A:3C:EA:99:32:6A:E3:CA:21:B7:B6:25:44
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5odb-ontKHo86pkyauPKIbe2JUQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.144.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:4d:d6:6d:d9:90:8b:13:1c:dc:0c:1b:38:39:53:09:80:f4:
fb:36:c6:97:27:68:1a:a5:c8:0f:a4:3a:b1:74:14:c5:3f:41:
d2:41:68:1c:79:4d:af:59:5e:9d:da:c5:06:5c:fb:37:51:24:
6e:30:a4:6b:64:9d:c0:21:10:59:50:dd:b8:58:db:ea:55:d5:
e4:cf:78:2f:76:98:bd:f8:84:05:ce:75:75:0d:9a:59:3c:ba:
ca:29:3e:25:f5:a2:6c:9b:43:f9:84:ed:cb:8c:91:65:ec:e8:
a7:5b:da:3d:42:67:e3:00:78:5d:5f:00:31:46:26:20:7b:09:
ce:e6:48:5c:84:ad:6c:b6:0d:48:cb:89:8e:2b:4b:4a:5e:4a:
51:55:37:5d:6d:6a:28:92:46:89:40:ac:8b:59:fb:83:eb:5f:
60:af:c6:03:c3:72:55:15:1c:11:db:54:46:06:5a:dd:dd:76:
a2:11:38:fb:98:87:e8:34:13:84:c3:90:f0:8c:8f:6e:99:33:
d7:79:4d:e0:ac:24:a0:7d:94:3c:4d:b1:e8:c9:9e:f2:04:f0:
3e:4d:06:e2:a3:09:e0:79:c5:5f:85:56:6d:fb:0e:40:3c:16:
84:88:f2:81:27:8d:a0:3b:c7:ab:78:e9:5b:16:94:fa:21:5a:
f5:a7:56:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:59 2025 by rpki-client