Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8FKaoHf27JeMZkcC0DOpAcTY14A.roa
File: 8FKaoHf27JeMZkcC0DOpAcTY14A.roa (raw, json)
Hash identifier: XE06W4tCgFdQefIGq9yTuh6R9BYmi8KeGynC2SL4P7E=
Subject key identifier: F0:52:9A:A0:77:F6:EC:97:8C:66:47:02:D0:33:A9:01:C4:D8:D7:80
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8FKaoHf27JeMZkcC0DOpAcTY14A.roa
Signing time: Thu 15 Sep 2022 02:53:20 +0000
ROA not before: Thu 15 Sep 2022 02:53:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F0529AA077F6EC978C664702D033A901C4D8D780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:01:30:5c:06:ba:c4:85:ec:84:a5:36:8f:
2d:9f:6f:49:81:14:36:7d:23:7c:5b:bc:2a:25:65:
fe:26:46:e5:a2:54:60:e3:6b:d7:73:13:62:16:b7:
7d:c2:0e:1c:af:93:40:85:e8:5c:1a:72:14:73:08:
bc:14:67:4a:98:d5:d0:2e:8a:29:c8:54:1a:04:33:
30:72:ac:6f:c2:57:be:9d:e0:e7:69:83:e3:fb:dc:
3d:91:24:b6:2a:15:3b:ee:35:62:8f:39:96:84:bb:
8c:69:17:af:1a:e5:91:7f:85:3f:d1:d0:a6:54:86:
47:ee:3b:56:38:f2:6a:fd:df:e3:ac:b1:5e:aa:9f:
4a:9f:72:25:38:01:dc:39:6a:9f:69:f5:cf:c5:7b:
e3:c7:46:05:56:eb:e7:2f:2c:3d:05:66:a7:40:a4:
78:38:3e:b1:8f:2e:33:71:e6:bd:a6:69:a3:c5:9b:
3e:f8:28:63:f4:07:9d:b6:76:53:20:c0:1c:57:43:
a7:33:83:51:85:dd:c1:31:e1:26:77:37:22:e0:ef:
1b:44:97:08:ff:fa:10:d3:bd:df:9a:b1:78:9d:20:
57:ae:e4:11:21:15:15:a6:c2:e0:17:5e:ff:f2:fd:
60:59:d0:ed:52:89:09:aa:c1:31:90:b4:bf:cb:33:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:52:9A:A0:77:F6:EC:97:8C:66:47:02:D0:33:A9:01:C4:D8:D7:80
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8FKaoHf27JeMZkcC0DOpAcTY14A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.128.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:cf:e7:56:2b:01:5e:84:71:c6:81:9a:d2:14:bb:4f:2c:a3:
30:6b:1b:6a:f5:e6:dc:a7:9d:e8:a4:94:32:43:c0:23:9f:f6:
1a:ec:02:19:24:e9:07:d5:e8:de:2f:b7:5c:19:8e:85:fd:28:
70:ad:43:06:85:e8:b7:40:0e:6f:58:81:f1:bf:18:f6:c4:c0:
f4:22:74:89:a2:43:c9:4d:10:d9:32:e1:e2:68:dd:86:75:0b:
fc:2d:73:62:50:2d:21:f7:78:ab:ef:80:d4:63:60:ab:de:b8:
df:7a:87:69:c4:98:78:58:e5:64:c7:ad:fa:2d:95:bd:14:f3:
5b:58:a0:88:37:1b:7c:05:eb:3f:23:30:a3:2b:6c:d0:4b:31:
43:84:e4:25:98:df:37:82:ec:03:71:a2:65:5a:c5:fb:5c:99:
50:64:14:70:3d:76:bd:72:ba:a7:bb:ac:21:90:4e:fa:80:65:
53:5d:55:4b:39:6e:d6:5c:f3:fa:e5:cb:58:50:fc:33:f7:86:
eb:92:f9:fb:1e:3b:83:96:c6:07:4f:6b:7d:da:12:8a:f5:20:
77:c9:d4:92:87:c9:f9:aa:a0:dd:ae:44:95:0f:8d:bf:9b:22:
c5:ff:4e:21:48:fd:5c:e7:3b:c7:e5:6c:47:ea:83:3a:68:85:
26:b2:19:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org