Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7mPiFK6L89eDoNIciJyYSeCSSd8.roa
File: 7mPiFK6L89eDoNIciJyYSeCSSd8.roa (raw, json)
Hash identifier: /x1J26fhKEwNcV9KCg+UBvhISkI9BBh4R/zvdmOX5vw=
Subject key identifier: EE:63:E2:14:AE:8B:F3:D7:83:A0:D2:1C:88:9C:98:49:E0:92:49:DF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 155B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7mPiFK6L89eDoNIciJyYSeCSSd8.roa
Signing time: Sun 07 Feb 2021 12:04:12 +0000
ROA not before: Sun 07 Feb 2021 12:04:12 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5467 (0x155b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:04:12 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EE63E214AE8BF3D783A0D21C889C9849E09249DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e8:22:6d:13:15:bd:07:b0:23:f5:67:9c:28:
3e:b5:20:d3:70:fc:e3:f1:6c:ba:96:92:ef:d8:33:
f7:64:75:2f:0b:93:15:c3:1e:c9:47:1c:7e:4c:04:
b3:59:8e:4e:af:d4:17:f4:3e:99:bd:ac:56:97:61:
d4:6e:79:4e:27:20:49:4a:d1:00:35:6d:5a:9f:bc:
2a:61:7b:c1:d7:2f:97:9b:a4:7a:64:81:29:f4:ed:
e0:ad:e1:00:7d:83:23:3f:9f:b2:31:50:38:ab:fc:
a6:13:0c:69:0a:ee:b5:bc:57:22:e3:8a:47:e6:8e:
31:9c:94:c5:ea:e5:26:46:5f:ab:c1:a0:63:aa:35:
bc:9f:f8:5d:9c:cc:f3:07:f4:5b:cc:46:87:dc:73:
43:3d:ba:3d:76:5c:96:5f:21:f2:e1:0b:45:ac:46:
ba:44:0b:03:46:88:07:79:0a:e7:c7:ad:64:c8:25:
9e:c2:82:d1:11:55:55:16:d4:f2:57:80:66:7a:07:
b1:bb:ea:da:22:4f:d7:66:cb:87:f9:37:d3:a8:34:
fa:ab:70:87:c8:39:db:5c:7c:e4:d0:e3:6e:2f:6a:
74:59:fd:8c:ad:0e:26:d1:c0:91:a9:bf:76:97:65:
30:9f:87:ce:3a:15:72:8e:80:09:4d:5b:66:1d:eb:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:63:E2:14:AE:8B:F3:D7:83:A0:D2:1C:88:9C:98:49:E0:92:49:DF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7mPiFK6L89eDoNIciJyYSeCSSd8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:d2:a3:5d:8a:91:02:96:03:67:ac:4f:f3:b1:b1:72:82:0f:
3f:6b:0f:39:50:75:14:e1:76:07:9f:f8:6a:b6:bf:aa:5f:c5:
e0:bf:37:23:7e:43:01:3e:ec:0c:37:e1:a9:82:7d:d3:d2:90:
05:41:e6:4b:96:9a:2f:fc:c6:3d:20:2b:6e:e6:46:ce:d1:9a:
e7:71:2c:53:e0:87:07:bb:31:60:aa:56:b7:61:61:5f:8b:01:
46:bb:3f:20:a6:e2:26:b9:9f:0c:8f:63:b8:e8:d5:46:54:b9:
48:18:b4:99:09:20:82:a9:09:58:ab:7c:0a:0c:24:cb:eb:b5:
37:13:cc:ae:12:bc:ae:95:75:a5:b7:ef:a5:cc:26:fb:4a:28:
2e:5c:ef:e2:40:50:c2:c0:df:1e:14:0f:37:7f:1b:f2:08:9d:
4d:4e:f6:f6:ab:6b:92:5a:fa:31:4a:34:45:62:74:84:83:1c:
09:00:53:1d:a1:8a:c9:8c:87:6b:3d:7c:cd:57:2e:7c:03:e1:
a3:5d:9d:5e:ee:e7:3e:a5:76:e9:db:2d:ff:48:81:61:15:4b:
81:0f:ca:e1:23:04:6b:bb:71:f3:0a:25:c4:d9:a7:14:02:ef:
4d:70:9c:c4:b3:4e:dc:37:39:07:82:af:67:ee:14:2a:cc:32:
a4:db:2b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:33 2025 by rpki-client