Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7hkWueFwyYjLccPR5L4uB5sHTHQ.roa
File: 7hkWueFwyYjLccPR5L4uB5sHTHQ.roa (raw, json)
Hash identifier: N70Z2U3Q+07jO966rdQubv897LAyK0jJPgmU1txCUV0=
Subject key identifier: EE:19:16:B9:E1:70:C9:88:CB:71:C3:D1:E4:BE:2E:07:9B:07:4C:74
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 201F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7hkWueFwyYjLccPR5L4uB5sHTHQ.roa
Signing time: Fri 25 Nov 2022 04:38:21 +0000
ROA not before: Fri 25 Nov 2022 04:38:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.64.0/21 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8223 (0x201f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EE1916B9E170C988CB71C3D1E4BE2E079B074C74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:3a:3e:f4:45:5f:98:0e:4a:26:ba:c2:1b:
26:5f:bc:8e:1c:1f:07:bf:66:8b:6c:1f:b6:d2:92:
37:dc:90:a4:2f:9f:55:28:53:cd:56:0e:e1:5c:1b:
93:c9:19:d5:a6:d6:e2:90:a7:fb:f6:e4:61:b0:2b:
6d:9a:f1:88:76:dd:2e:a9:9e:91:6c:83:e5:a4:b8:
f4:11:0b:66:2a:12:4e:a4:c4:12:57:28:3a:2c:f2:
12:c6:34:10:3d:e1:22:d1:d9:5b:d4:16:34:44:1e:
56:e2:dd:a3:30:a1:b7:bb:e9:54:33:ab:49:7a:7a:
0c:7d:b5:8a:f6:f3:af:10:f3:63:8b:4c:53:1d:a7:
58:72:64:a9:d9:fb:70:ac:01:83:37:1e:2a:38:c3:
88:35:cc:c3:87:4b:aa:d6:1e:05:08:e7:d6:ff:13:
a1:34:4e:ec:f6:41:33:81:63:8b:91:cf:dc:57:52:
9f:1b:d8:3a:7a:ff:a3:dd:a1:21:ea:e0:a1:af:f8:
80:e4:ec:49:02:7c:ac:bf:8a:4f:27:56:12:24:44:
b3:1f:88:a9:ad:57:bb:9d:8f:ad:49:e2:2c:af:7a:
98:8c:35:32:74:8f:21:83:14:f0:4a:fd:d4:46:d8:
c6:8b:5c:35:d9:c6:9d:36:fd:43:7b:81:ec:c0:3b:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:19:16:B9:E1:70:C9:88:CB:71:C3:D1:E4:BE:2E:07:9B:07:4C:74
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7hkWueFwyYjLccPR5L4uB5sHTHQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.64.0/21
Signature Algorithm: sha256WithRSAEncryption
28:4b:4c:7c:d8:fd:93:a5:6b:cc:24:8b:9d:e8:ca:c6:19:f6:
6c:4e:27:b7:78:d0:2a:38:de:12:65:50:a4:b1:a4:41:85:65:
60:32:db:f4:05:4e:19:8b:52:7e:e3:3f:46:2f:af:fb:72:61:
ad:b7:e0:fa:54:6e:21:7f:58:b4:c0:e4:06:4e:2e:58:51:9c:
3d:40:86:df:8c:4f:c6:d8:9d:ea:6f:55:91:76:c6:c4:a5:91:
e6:f9:60:44:af:c0:a8:a1:cb:16:c5:10:dd:8b:59:f0:12:e2:
41:7f:7a:e3:32:48:ec:a9:57:e6:99:a4:75:80:5d:48:0b:85:
57:1b:9c:7b:e0:09:b3:13:ba:28:e9:6d:5f:f1:39:28:fe:47:
6b:36:06:51:58:19:47:ae:9a:d7:60:c5:2c:09:20:cf:6f:3e:
57:fc:08:2c:fc:6e:74:58:e4:e4:7f:91:e3:63:12:6f:88:65:
7c:fc:59:a3:b3:35:84:43:f0:bc:33:6b:50:9f:06:ca:11:fd:
0a:1f:60:2b:0f:d7:33:55:d6:a3:83:a8:13:73:7d:a5:90:fc:
36:b8:7b:c8:bc:0f:20:62:6f:70:f9:dc:13:1c:a8:6a:50:37:
4b:48:d2:9f:cb:ff:a3:bc:4d:61:ce:05:bd:23:1c:c8:77:c3:
dc:ca:0e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org