Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I1PqXHvfrahgwU6PkAVH2pnf-z4.roa
File: I1PqXHvfrahgwU6PkAVH2pnf-z4.roa (raw, json)
Hash identifier: beP5Lb9+3hKXOC7kXTGNpO9A1VYyp3tLwyp5OzBtV9Y=
Subject key identifier: 23:53:EA:5C:7B:DF:AD:A8:60:C1:4E:8F:90:05:47:DA:99:DF:FB:3E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2406
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I1PqXHvfrahgwU6PkAVH2pnf-z4.roa
Signing time: Tue 06 Jun 2023 08:09:18 +0000
ROA not before: Tue 06 Jun 2023 08:09:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.0.0/16 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9222 (0x2406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Jun 6 08:09:18 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2353EA5C7BDFADA860C14E8F900547DA99DFFB3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:30:d3:28:5e:86:58:75:23:53:97:21:ef:1e:
90:11:29:fc:bc:03:43:9e:75:c8:63:66:0b:e2:46:
b0:b5:0d:d3:e2:40:ae:e0:20:3b:cd:51:68:79:28:
c5:8d:4b:5b:f6:94:30:f3:ed:bc:ac:d5:fb:6e:78:
8d:7e:84:68:b9:f0:0b:a0:34:ea:a6:07:43:66:11:
81:58:e9:5b:ea:b8:c0:8a:40:c7:8b:90:df:93:4f:
fa:bf:4b:a8:81:f4:42:de:10:9c:47:a7:7b:f5:ef:
56:51:18:22:24:63:10:fd:3f:f5:32:e1:fd:08:b1:
d8:40:20:4c:f2:75:fc:56:88:c1:29:53:e2:13:40:
e1:8d:67:3d:a0:d8:57:a6:da:2c:a0:66:3c:1c:6e:
b3:b3:df:ac:e6:95:8d:4a:fc:af:b8:5b:92:1a:d0:
a9:b2:06:71:41:84:88:06:a0:21:c4:e7:46:ea:31:
77:4f:cb:97:68:06:47:7d:cf:84:79:9d:2b:38:e1:
4d:3d:3c:c2:13:7b:35:da:b8:ee:22:3b:03:36:7a:
3c:22:a1:6b:28:5d:53:96:90:e9:51:d7:3d:f1:3a:
d1:4a:7a:f7:f1:0a:9a:c0:f5:d8:a4:eb:79:b9:1e:
bc:76:82:9b:d3:55:e4:08:42:6c:51:96:b9:79:cb:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:53:EA:5C:7B:DF:AD:A8:60:C1:4E:8F:90:05:47:DA:99:DF:FB:3E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I1PqXHvfrahgwU6PkAVH2pnf-z4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:f5:3e:2b:76:13:55:97:11:a8:ae:7b:c8:2f:fd:8a:c8:b2:
1d:4f:b3:7f:0e:11:34:81:7c:33:63:87:82:c5:27:30:96:97:
f3:26:b4:94:c2:d2:1d:cc:69:8e:94:4e:67:09:08:54:a5:78:
e8:86:38:57:0a:9b:60:d7:3d:0b:e8:28:cf:e9:91:43:fc:42:
ff:6b:8a:cb:f1:cd:58:df:36:bf:e4:bd:f2:bc:fc:59:5a:86:
89:92:d8:57:64:dd:7b:59:a7:be:d4:b7:ba:c7:5f:01:9c:30:
45:fc:1e:09:86:4b:b0:6c:d6:ed:eb:df:5f:64:d2:c6:b5:81:
e1:8b:dd:76:8b:71:38:b7:17:03:e5:2e:b2:dd:2e:35:e7:f6:
a6:9a:79:02:fc:df:d0:10:fe:72:22:71:c7:d8:95:0c:99:2b:
7e:ab:86:2b:01:0c:f7:98:a2:98:1d:25:82:ec:03:a1:24:6a:
77:39:df:b7:85:2d:33:5b:30:0b:c9:55:2a:f4:0b:62:65:8f:
07:19:39:dd:99:f0:46:d3:d2:e2:d1:8d:78:59:8a:e4:6b:fe:
06:fb:23:bb:31:e2:82:db:9b:6e:f6:96:d7:26:84:e4:41:f6:
9d:dc:95:34:22:61:08:55:f5:9c:e1:3c:08:f8:53:57:17:9a:
a3:b1:ac:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org