Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CS7BrqEXg5RdQyicpvEFC2PqYdU.roa
File: CS7BrqEXg5RdQyicpvEFC2PqYdU.roa (raw, json)
Hash identifier: AjiRRoowaBJaBIcq3YvEHe15d+PbTlfhS2FDnV4ecAY=
Subject key identifier: 09:2E:C1:AE:A1:17:83:94:5D:43:28:9C:A6:F1:05:0B:63:EA:61:D5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CA5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CS7BrqEXg5RdQyicpvEFC2PqYdU.roa
Signing time: Wed 29 Sep 2021 02:48:00 +0000
ROA not before: Wed 29 Sep 2021 02:48:00 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7333 (0x1ca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:00 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=092EC1AEA11783945D43289CA6F1050B63EA61D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:4f:af:14:8e:fb:8c:fc:43:a8:d3:67:70:
e9:6c:74:0c:9b:f0:0c:47:a2:76:e3:31:e3:50:71:
8a:b2:1b:f2:e1:c4:b3:20:23:b2:ee:aa:0f:46:13:
b1:13:3d:de:d8:bd:13:f2:ad:a2:9e:cc:1b:7f:a2:
05:eb:a5:5c:24:d5:5d:cf:c4:ac:cf:0e:27:b5:c7:
81:1f:32:07:ec:f8:9c:f7:b0:4f:18:28:cf:eb:a7:
c6:57:ee:0a:6c:85:6b:cd:bc:12:0f:5f:bd:97:cf:
b7:d5:53:fd:f9:e4:ce:1b:7f:4f:64:76:b0:a8:73:
c0:22:0b:65:ce:30:6b:6d:85:4d:61:bf:6f:87:85:
51:c2:93:bb:95:ce:bf:4c:e8:98:ac:e4:58:ca:a0:
bc:a0:75:aa:63:60:46:10:59:bc:45:75:f5:a0:96:
a2:f5:71:cd:cd:ac:8c:29:5d:9a:c0:38:f5:a6:6c:
6f:e2:c9:85:5b:20:0e:c4:8e:02:89:87:bd:4f:64:
98:1b:35:e7:02:40:ed:f9:74:9d:9c:ff:2d:c5:58:
6f:00:7b:81:08:a0:77:f2:a8:18:20:76:d0:67:36:
ed:59:d0:32:e2:f2:c4:32:5e:d1:fc:75:94:29:d9:
13:f0:bb:cb:c3:f2:c1:0e:b5:d4:51:9b:15:0b:74:
de:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2E:C1:AE:A1:17:83:94:5D:43:28:9C:A6:F1:05:0B:63:EA:61:D5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CS7BrqEXg5RdQyicpvEFC2PqYdU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.139.0/24
Signature Algorithm: sha256WithRSAEncryption
11:8f:99:16:e4:f7:5d:59:af:6d:6a:fa:be:21:b0:57:5e:b4:
da:56:f2:c3:fb:ae:45:cc:39:04:c4:a3:07:6b:dd:df:85:a4:
63:55:ee:8e:a0:7f:c6:b1:80:fd:60:25:65:6e:9a:f2:aa:ba:
bb:3f:42:96:8b:6e:69:ec:4a:a8:63:3d:de:97:64:63:6d:42:
c8:4c:f4:59:60:0a:9c:5d:0d:c4:dc:9f:8f:a6:10:a1:9a:fe:
ff:51:50:26:34:e3:10:10:7e:7d:54:f3:47:20:87:90:a8:15:
22:23:7f:4d:94:7a:06:84:22:ae:37:c6:bd:a7:8f:02:0f:50:
ed:f3:ea:39:ba:de:71:6e:c4:8f:a3:89:62:0f:e5:5a:32:03:
64:83:37:37:6a:cc:6e:5c:7b:50:1d:7d:e4:da:d1:62:87:9a:
8c:2d:e7:c9:bf:26:8a:ca:d4:78:ad:c9:97:18:5b:9c:fd:d7:
65:71:2c:0d:24:57:7c:24:df:ee:4e:61:5c:21:01:63:45:c5:
65:01:93:68:57:95:60:58:b4:55:2b:4b:75:6f:83:e2:c1:54:
a0:01:f9:a3:78:0e:9a:30:23:86:f2:6e:d7:20:2d:c1:99:24:
e6:ec:50:40:b6:ca:f9:37:0a:f6:1d:06:34:24:80:70:de:75:
8a:19:fb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:34 2025 by rpki-client