Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IKy2fl5oFUpsfXwOxB3wPl0doH0.roa
File: IKy2fl5oFUpsfXwOxB3wPl0doH0.roa (raw, json)
Hash identifier: MU1h4FcSo4xAAJfg1g+ebv2TOWthD+XbyWoBw2PflYM=
Subject key identifier: 20:AC:B6:7E:5E:68:15:4A:6C:7D:7C:0E:C4:1D:F0:3E:5D:1D:A0:7D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B55
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IKy2fl5oFUpsfXwOxB3wPl0doH0.roa
Signing time: Wed 29 Sep 2021 02:46:27 +0000
ROA not before: Wed 29 Sep 2021 02:46:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6997 (0x1b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:27 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=20ACB67E5E68154A6C7D7C0EC41DF03E5D1DA07D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:01:57:56:ff:f8:29:2e:bd:20:8c:4c:11:
8f:51:cd:90:35:e7:b0:8a:bc:9f:a0:64:79:1d:c3:
07:25:28:59:1a:66:bf:bf:92:46:ec:f2:94:ee:e9:
2c:8d:ed:69:16:6c:a4:c3:f1:11:45:b7:b0:aa:cd:
39:87:2b:1d:d4:85:26:08:eb:6b:6b:8d:b4:e8:cf:
ae:00:23:bf:a6:6b:f1:7d:24:1f:98:c5:35:bb:62:
35:48:d1:ac:96:48:fc:1c:70:c6:a1:8c:17:13:33:
b9:7b:4b:60:b9:a8:51:f5:bd:2f:91:a7:f9:c1:28:
db:c3:b2:12:65:e2:f1:9d:ec:10:c5:e7:7b:7d:a8:
cc:c3:f4:41:98:2d:89:d1:97:2c:78:d8:80:17:3d:
1d:be:ac:36:e5:2a:18:6f:e4:58:11:01:05:bc:fd:
e8:0d:d3:e0:12:5f:95:34:d6:be:0e:6b:29:73:35:
30:69:ad:14:52:3e:cd:84:c4:cf:02:0d:fb:b3:3c:
96:22:70:a8:9e:27:20:9b:bc:26:1d:e8:40:88:c6:
d6:c8:4b:cd:d8:e4:b8:a5:40:fd:70:c0:41:91:d5:
dc:7e:b0:13:8b:54:5b:a4:f6:6d:c2:f3:98:4d:bd:
43:74:53:c3:ec:d1:89:72:66:97:4c:01:19:56:b4:
12:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AC:B6:7E:5E:68:15:4A:6C:7D:7C:0E:C4:1D:F0:3E:5D:1D:A0:7D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IKy2fl5oFUpsfXwOxB3wPl0doH0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.228.0/22
Signature Algorithm: sha256WithRSAEncryption
52:c1:dd:40:5a:c0:05:ec:b7:12:f6:6e:17:ff:82:40:f6:e5:
b3:ee:46:2c:27:e0:7e:ec:ea:d4:4d:da:03:21:a2:70:8b:64:
60:04:d2:9a:ab:85:8c:dc:4f:7d:63:9a:9f:44:ae:5e:5b:70:
fc:ea:f3:a1:9d:1b:3d:b0:88:e1:dc:99:75:a1:84:7f:34:f2:
4f:26:b4:5a:eb:8d:c6:de:4e:3e:86:0f:0b:96:3b:5f:d6:bf:
37:9a:52:44:93:65:98:d4:25:83:52:02:bd:a1:ef:e2:b0:59:
d1:09:41:ef:59:52:db:7c:7d:d1:65:55:ff:49:7a:11:c7:ff:
3c:5e:28:c2:63:5f:c2:a9:bf:cd:45:4c:ee:b7:37:45:6a:77:
8d:a6:6a:49:03:e2:b1:4b:f0:11:63:c8:6a:24:4b:88:39:f7:
e3:8f:4a:58:53:a9:a2:68:b8:2c:c4:f9:3e:25:17:da:05:c6:
23:75:05:fb:89:f9:ba:5d:e8:02:90:90:fa:93:44:e1:a5:ad:
7d:42:4a:49:89:b0:7c:91:98:67:8a:ce:b4:da:42:65:5e:f3:
15:b5:1a:20:a6:56:88:af:23:da:e7:8c:20:7c:21:8e:54:f3:
7c:56:e8:1a:06:f6:cf:00:c8:8a:b6:59:96:cf:d5:75:05:44:
a9:2c:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:40 2025 by rpki-client