Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L31NEQqxOfgLLFDRyRWySZFYALE.roa
File: L31NEQqxOfgLLFDRyRWySZFYALE.roa (raw, json)
Hash identifier: IR0x5Ukxm6jAqS8/Dz8XT1OcTD0Fi9VKXWN1sQMzXL4=
Subject key identifier: 2F:7D:4D:11:0A:B1:39:F8:0B:2C:50:D1:C9:15:B2:49:91:58:00:B1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21C6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L31NEQqxOfgLLFDRyRWySZFYALE.roa
Signing time: Fri 25 Nov 2022 04:40:23 +0000
ROA not before: Fri 25 Nov 2022 04:40:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8646 (0x21c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2F7D4D110AB139F80B2C50D1C915B249915800B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:da:49:e9:cd:29:82:5a:b8:b7:0b:df:cf:58:
d4:38:a9:b5:70:82:d6:39:4a:8d:66:fd:4c:13:a0:
76:31:b8:ad:9c:97:ac:ce:0f:21:26:3d:f8:87:41:
5b:00:2f:f0:68:48:95:20:59:45:5f:69:b0:3f:c0:
46:15:3c:46:45:f3:1d:a0:b4:37:82:5d:be:a8:3e:
e5:aa:46:11:bb:65:c1:0e:ef:6d:34:f1:ce:90:1c:
ed:69:a7:43:7e:81:c7:7d:d6:b4:62:9c:50:c9:02:
f1:34:b5:41:ec:4f:3b:79:a5:8e:6d:ea:49:59:70:
e8:51:0a:92:59:b0:0b:58:96:7f:a2:7b:8a:07:74:
62:c7:75:97:4a:28:8b:ac:40:d0:b0:93:c5:b1:89:
f0:ea:b9:6c:aa:89:ea:bb:87:94:5f:1d:1e:36:b5:
23:87:9e:f2:5c:3e:ea:9a:cc:37:28:8c:00:74:5a:
ef:31:01:2b:bc:79:23:9a:ad:24:58:ef:67:a9:96:
8c:a9:7c:14:e8:0f:00:b2:71:c5:1d:e7:c8:b1:21:
e1:c2:81:fd:c5:37:73:d6:56:f8:e9:e2:33:ec:37:
49:5e:1b:ed:36:97:1d:06:0a:4c:50:f5:69:d4:d6:
80:9d:08:14:65:12:6a:4a:e4:10:c7:8d:5b:e9:06:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7D:4D:11:0A:B1:39:F8:0B:2C:50:D1:C9:15:B2:49:91:58:00:B1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L31NEQqxOfgLLFDRyRWySZFYALE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.132.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a9:0e:52:d6:74:e4:07:37:b9:50:8f:d0:10:ac:53:3c:a8:
f6:95:1a:39:ee:2b:26:7d:2b:62:0e:02:6c:88:80:f1:46:d2:
e0:9b:e4:01:61:49:a8:2c:3e:d3:13:d0:d4:3f:53:e1:1a:f8:
8e:d7:f3:d8:e3:d4:8a:5e:1c:e9:91:33:8e:01:62:d6:23:fd:
ee:96:af:67:28:68:88:89:13:14:85:16:f4:fa:f9:5b:8a:3e:
92:fb:2e:3a:5a:94:a3:23:b8:b7:85:c8:7c:ae:b2:78:e1:46:
17:67:34:45:b4:a7:f4:b7:35:ec:f3:1c:e5:a2:f1:08:b1:52:
75:f2:86:d5:6d:1b:1c:73:31:74:2d:5a:cb:b8:36:e1:f7:cd:
76:8d:2d:9e:b5:a1:cc:de:1f:2c:f1:6e:23:50:cb:04:24:00:
85:34:d0:b8:1a:d3:9f:20:86:9a:08:f4:1b:68:1e:66:3b:0e:
a4:03:d3:75:9f:fc:2e:19:a9:85:38:4b:ab:d8:30:e2:0f:22:
8a:5d:73:87:e9:b0:28:ac:c9:7e:92:43:97:ba:52:7c:23:94:
4a:00:07:e2:c4:b3:cb:60:92:44:24:1e:de:e3:cd:53:10:45:
f5:9b:95:c7:3e:39:2a:fc:1c:67:07:25:7e:39:9c:9f:fc:8c:
6e:30:45:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org