Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LcVVwwEkybv64Kr2rLEKlGRty4g.roa
File: LcVVwwEkybv64Kr2rLEKlGRty4g.roa (raw, json)
Hash identifier: tyu4MrSrbA27Vl8wy+zT+ouRmeggNevUhj5h2S1vX88=
Subject key identifier: 2D:C5:55:C3:01:24:C9:BB:FA:E0:AA:F6:AC:B1:0A:94:64:6D:CB:88
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 204B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LcVVwwEkybv64Kr2rLEKlGRty4g.roa
Signing time: Fri 25 Nov 2022 04:38:33 +0000
ROA not before: Fri 25 Nov 2022 04:38:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8267 (0x204b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2DC555C30124C9BBFAE0AAF6ACB10A94646DCB88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:9f:84:09:37:72:6b:c5:9a:c3:e2:d6:d9:
7d:1e:79:3f:a2:ce:cd:2d:2f:d5:70:1f:d3:e9:46:
6f:bc:8d:1f:32:ac:50:09:57:69:1e:4b:06:7b:ee:
3a:c0:46:ac:a8:f1:b4:b6:db:5d:35:d3:0c:0d:1e:
08:59:f7:25:72:a1:cb:25:f6:5e:13:10:c2:76:a9:
fe:55:18:f4:41:79:a0:77:3c:89:f9:74:2c:0f:4a:
6d:29:9e:46:29:5e:4c:80:17:7a:08:a2:56:96:09:
86:e3:58:57:57:cd:46:a7:41:30:e0:b9:86:a6:fb:
3b:75:19:da:fb:47:00:6a:59:1d:49:db:3f:b0:05:
69:6d:ac:c1:46:fb:c0:4f:58:30:7f:bc:0f:89:21:
b6:d8:5d:68:2d:cd:87:40:64:47:d0:d6:be:c9:48:
b8:d3:6f:99:e5:21:ca:f3:9e:cb:34:97:75:e1:eb:
59:10:0e:ec:85:6d:a3:81:ad:48:0e:28:26:e8:c9:
4f:be:ed:1d:1b:32:2d:98:58:e4:49:67:da:28:be:
5c:54:67:5e:24:0a:83:63:22:12:df:7a:cf:8e:e7:
08:5e:fa:22:30:7b:53:bf:98:8b:86:3a:16:fc:02:
ff:30:59:01:8f:be:98:95:b8:9e:5b:7c:32:df:3b:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:55:C3:01:24:C9:BB:FA:E0:AA:F6:AC:B1:0A:94:64:6D:CB:88
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LcVVwwEkybv64Kr2rLEKlGRty4g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.14.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:ae:3f:b0:cf:f0:40:a0:8d:db:79:9b:0e:22:74:b6:0f:19:
99:53:1c:31:ca:55:1a:47:a6:e5:1f:d2:d8:17:47:c8:6a:dc:
c6:8b:49:4f:a0:44:cd:10:87:eb:01:90:98:f5:9e:df:16:07:
33:42:99:47:48:78:11:d5:9c:77:90:8e:6f:2d:79:a3:3c:8c:
da:ad:13:d0:cf:49:e1:58:c8:33:a9:6b:f1:47:61:e0:89:b5:
0a:86:28:50:ee:71:26:30:e4:08:62:99:79:79:76:6d:b6:a7:
22:90:08:5f:87:d6:21:7d:c4:94:ff:26:90:25:73:74:11:e2:
4a:d2:d0:1d:b5:77:13:3b:24:cb:9d:77:12:0b:d4:f1:e4:72:
92:62:64:8a:c9:09:c2:44:ef:ea:3d:f1:26:dd:66:50:5e:39:
6b:8c:9f:c1:e9:33:b2:93:e3:e7:a3:66:21:b0:e5:45:ff:0d:
29:fa:e6:bb:9a:3e:39:8a:b1:f6:0a:bc:d2:fc:2b:b2:ca:2c:
e7:5a:bb:25:a6:4d:db:2c:6e:bf:16:69:12:ba:b4:3a:78:da:
5c:1c:88:73:7f:29:d7:95:bb:04:8b:49:46:9f:11:ad:0e:fc:
47:e8:bd:33:f2:00:65:34:c1:3f:3e:fc:5a:65:3e:4c:08:10:
41:f9:f9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org