Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8aM9Pm4WWqPhMehoIvKDA8ucvrQ.roa
File: 8aM9Pm4WWqPhMehoIvKDA8ucvrQ.roa (raw, json)
Hash identifier: F1XNkfgJ8GC/tZJ4tEihlCRk1iBPj2HJ/mMefGqcRho=
Subject key identifier: F1:A3:3D:3E:6E:16:5A:A3:E1:31:E8:68:22:F2:83:03:CB:9C:BE:B4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27CB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8aM9Pm4WWqPhMehoIvKDA8ucvrQ.roa
Signing time: Fri 01 Sep 2023 10:04:33 +0000
ROA not before: Fri 01 Sep 2023 10:04:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10187 (0x27cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F1A33D3E6E165AA3E131E86822F28303CB9CBEB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:12:e1:e6:4a:7a:dc:b3:1f:2c:80:38:bc:
9e:c7:7e:5c:4a:c1:b2:96:77:8e:34:36:7e:f8:b1:
0b:6e:49:2f:d2:dc:89:cb:a3:b7:7e:d1:9b:8b:4c:
01:a5:16:ac:9e:2d:4f:fc:b4:4a:02:1d:06:56:e4:
52:c8:48:65:ac:55:79:68:da:e2:5a:05:37:89:b3:
26:26:c7:6f:7c:23:b1:08:fa:cb:7e:27:10:dd:e2:
28:af:32:63:b5:6e:5c:5a:90:c8:bb:10:71:5c:6c:
20:60:7d:1c:98:aa:80:36:15:66:5f:23:46:4a:2c:
f1:2a:7d:e6:51:2f:bd:c7:ff:5f:4d:ea:3c:2b:e5:
ef:44:cd:f6:dc:05:d0:e1:bc:28:58:21:78:08:fa:
6a:3a:d2:32:bd:63:da:0a:8c:af:1e:4c:90:ed:d7:
32:11:94:8f:ad:85:56:45:87:4d:d6:69:3f:da:e0:
94:54:9e:20:f9:6a:f4:8e:4b:0e:55:10:61:f1:21:
b9:c9:ad:bb:2f:49:76:27:e1:95:ff:2d:21:99:b3:
c7:4a:aa:e6:a0:44:2a:74:9d:b3:f4:be:c2:1c:13:
45:d0:47:2d:cd:3a:92:9c:68:38:43:a5:82:18:6d:
80:b7:87:68:f6:64:8d:0f:9a:cb:7d:0c:b6:e8:f9:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A3:3D:3E:6E:16:5A:A3:E1:31:E8:68:22:F2:83:03:CB:9C:BE:B4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8aM9Pm4WWqPhMehoIvKDA8ucvrQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:50:cd:c0:64:d1:fc:d5:91:1d:b6:f8:39:73:52:6c:8e:21:
63:6c:16:02:4d:fa:cc:7a:9d:31:e0:c1:35:d5:e0:33:c3:d1:
51:31:a2:9e:1b:9f:e2:df:22:37:3e:10:86:40:e4:10:76:7e:
5c:e7:eb:eb:3d:41:4a:43:79:7e:d1:8d:8c:9c:e5:31:64:83:
5c:fd:d4:20:08:fb:97:e9:bd:4a:f8:0f:a6:e0:0e:11:b4:98:
68:36:20:3d:c3:86:06:e0:43:ec:3e:61:38:fd:9e:d6:5b:29:
eb:f8:32:0a:4a:69:fb:53:24:dd:33:fd:93:de:98:28:67:ec:
9b:c6:03:66:ed:69:6c:2d:cc:b8:b3:11:a4:2a:da:33:8f:4d:
d8:ff:58:30:ff:c9:16:28:77:3f:33:c9:85:c9:c7:43:5b:12:
77:19:46:27:1b:21:3b:d6:72:18:fe:94:58:15:24:01:fd:b1:
bb:27:42:dc:af:33:72:9f:33:79:36:4e:2f:11:fb:85:9b:f3:
d3:78:b4:8e:40:8f:91:2a:5b:8f:fc:ec:36:b0:24:7f:5d:70:
e2:af:68:b7:2b:5b:c6:ff:a5:59:4b:75:cb:52:93:ab:60:f4:
82:e8:e4:aa:5c:06:26:ed:78:15:21:ca:4e:af:f7:54:78:a1:
4c:5d:ab:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:30 2025 by rpki-client