Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LNzNMJdY9cF_mt-ocJ-hzplGJ04.roa
File: LNzNMJdY9cF_mt-ocJ-hzplGJ04.roa (raw, json)
Hash identifier: SaU6Z0QjrEevAVDMnbk649pbj9rTDOQJUFsO438fFLs=
Subject key identifier: 2C:DC:CD:30:97:58:F5:C1:7F:9A:DF:A8:70:9F:A1:CE:99:46:27:4E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CB5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LNzNMJdY9cF_mt-ocJ-hzplGJ04.roa
Signing time: Wed 29 Sep 2021 02:48:05 +0000
ROA not before: Wed 29 Sep 2021 02:48:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.52.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7349 (0x1cb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:05 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2CDCCD309758F5C17F9ADFA8709FA1CE9946274E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:ce:e0:69:7a:e4:39:fd:db:90:b9:bc:bc:
98:58:2d:06:3c:d5:1a:25:1f:47:a6:21:93:9e:53:
a5:92:a8:4e:a5:92:06:15:53:78:36:9d:88:32:23:
fd:aa:87:e7:b5:4f:79:b7:91:72:47:99:30:77:e4:
b2:73:13:18:56:01:58:75:0f:66:12:1b:0d:f8:19:
96:7a:08:f6:1d:d9:c4:d1:e6:04:7b:83:97:48:b2:
25:53:49:6c:2e:3e:34:53:78:49:a0:19:67:36:80:
f4:63:11:f5:32:ff:9d:b6:82:e4:9f:e2:39:5d:8a:
b7:bf:13:21:0c:3b:53:5b:62:87:a9:82:79:6a:92:
a9:68:f9:f6:bc:d4:97:c8:03:fd:aa:55:7d:f3:cb:
51:4f:fc:a1:1e:1f:37:de:0c:59:88:6f:c6:9b:4c:
f4:c7:c6:84:c3:09:88:5a:6e:0c:76:b3:e7:45:1a:
00:fb:d9:30:83:f3:25:9d:b9:37:83:86:ef:db:39:
0a:e0:0d:fc:c8:e8:0d:e3:d9:2c:8d:6c:59:e6:3f:
89:21:44:4d:d2:eb:82:a4:a8:56:ba:95:8b:1c:ae:
98:9a:25:f4:de:72:1b:54:ea:42:f6:20:d0:8d:86:
b2:93:71:4c:c1:5d:0d:4a:a2:83:0d:6e:c0:c1:f5:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DC:CD:30:97:58:F5:C1:7F:9A:DF:A8:70:9F:A1:CE:99:46:27:4E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LNzNMJdY9cF_mt-ocJ-hzplGJ04.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.52.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:bb:37:cf:a7:be:04:0f:bc:0f:aa:4a:f3:f4:14:93:53:9c:
db:32:05:a9:a7:a3:66:54:10:6f:69:2e:27:47:d5:24:5f:9e:
99:07:b3:6f:af:47:90:7a:de:a8:fb:87:35:f6:e5:5a:8b:59:
66:c6:c9:98:53:c4:f7:36:b2:81:77:3c:97:1d:d5:89:4c:09:
8a:75:5f:1c:ae:42:39:2f:27:00:67:f3:da:38:07:39:6e:60:
ad:90:2d:15:8f:06:e2:9b:d2:3c:9d:92:95:29:64:c2:2d:0c:
35:f3:08:5d:cb:3d:e8:53:72:e2:4e:05:39:ea:c1:d4:ef:87:
74:12:43:a7:d3:5b:e9:38:9c:41:ae:26:90:dd:88:0e:35:49:
6a:68:e9:09:71:80:e4:13:b1:98:b4:64:73:ae:bf:d4:06:13:
6a:9f:92:a3:75:71:a1:ad:9b:ce:69:82:49:c4:4e:aa:d1:3f:
9b:9c:57:38:68:35:39:2c:7e:92:35:eb:ab:17:90:51:2b:8a:
6e:65:1d:d3:72:fd:c4:3b:ce:d2:75:28:da:74:b6:f0:42:24:
e8:3d:86:ed:b5:66:e6:91:2e:5c:45:97:e1:05:4b:25:aa:97:
9e:ca:01:9d:d4:e0:78:4f:4e:fd:05:75:b2:0e:dd:6f:6e:a7:
a8:af:bd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org