Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Nm8JRTImIJYkEmHQLRSkInPrnOk.roa
File: Nm8JRTImIJYkEmHQLRSkInPrnOk.roa (raw, json)
Hash identifier: iMchbhMhSjv/Y1jN8tnwVX/x3iNoWoEzPQYvUO8tduk=
Subject key identifier: 36:6F:09:45:32:26:20:96:24:12:61:D0:2D:14:A4:22:73:EB:9C:E9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Nm8JRTImIJYkEmHQLRSkInPrnOk.roa
Signing time: Thu 15 Sep 2022 02:45:08 +0000
ROA not before: Thu 15 Sep 2022 02:45:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=366F094532262096241261D02D14A42273EB9CE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:5d:f5:bc:92:3b:b1:ee:6e:00:c0:fd:05:
1f:5d:b0:2f:cf:36:40:92:64:6e:27:f8:78:63:1d:
8c:81:87:3b:4e:1c:95:4a:c8:1c:d4:51:5d:af:cd:
f3:c9:e0:d8:4d:c6:90:e3:e9:4a:80:5b:d5:1a:f3:
29:4f:49:6b:11:b3:d9:05:ca:08:6a:f4:0a:3c:46:
e0:f9:35:51:82:12:98:58:f4:e0:03:17:6e:01:42:
a5:a3:33:05:33:1e:f0:80:e4:00:0e:99:c2:a3:42:
77:0c:68:fe:7b:fb:5f:8b:06:e6:b3:84:25:e6:55:
e1:23:c2:c9:e1:ae:e5:89:1d:63:46:43:c1:3b:26:
78:a6:24:38:60:b5:46:b0:b1:d6:5a:05:79:2a:df:
2b:fe:c5:95:41:fe:42:86:ba:1e:03:5c:1b:9e:07:
38:c6:c0:7e:aa:ee:c3:30:e2:87:9a:7a:16:20:a5:
4d:f8:18:7b:82:a0:85:11:62:23:be:1d:6b:0f:04:
82:40:26:d2:a7:06:29:5a:92:69:cd:48:5f:76:f2:
c9:b4:da:0d:bc:6b:b7:d1:d1:06:d1:e4:33:8c:f6:
86:f2:15:8b:0d:3f:76:30:06:bc:bc:86:84:e9:4c:
bc:79:89:e0:80:4a:a0:f6:7c:78:5f:98:bd:5c:b2:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6F:09:45:32:26:20:96:24:12:61:D0:2D:14:A4:22:73:EB:9C:E9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Nm8JRTImIJYkEmHQLRSkInPrnOk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.165.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ed:59:76:7f:80:ea:cb:0e:ee:35:69:bb:31:d6:c7:5f:93:
96:09:46:58:d1:f5:33:4f:cf:17:8f:46:44:03:70:ba:ab:03:
f9:20:ee:67:dd:1a:5c:97:08:7e:be:94:99:a3:ef:17:62:a6:
b6:e3:4c:24:45:a8:04:fa:37:df:19:a5:88:b0:19:45:41:2c:
68:b0:53:4e:70:87:02:90:bf:ce:c8:d9:ba:b3:fd:46:4d:4a:
e4:b3:f8:ed:89:e5:27:6e:3d:cd:86:d2:7a:b5:7e:8f:e1:33:
be:76:aa:1e:49:25:49:5f:1a:f9:2e:e3:2b:d2:1d:58:e6:d2:
be:91:95:85:bb:af:7e:cf:4f:5f:cc:ef:cd:36:73:16:05:b4:
1f:86:0b:27:00:f2:56:ec:d8:45:5d:d5:09:b0:90:8f:05:4f:
9e:bc:c7:54:6d:72:09:0a:8a:46:62:60:39:39:81:be:58:43:
82:32:23:e4:8d:97:f6:9f:8c:c8:b6:f5:86:1a:8e:f3:30:33:
7b:66:38:f5:73:e8:1e:7b:cd:b9:d3:3c:9e:73:cc:bc:f8:94:
df:8f:9f:d2:ae:3b:c8:5e:c2:58:f1:27:18:0f:3a:f8:6d:31:
fa:39:4c:f0:ea:72:98:24:f9:a5:8d:49:56:08:8d:28:bf:2b:
83:04:cf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:42 2025 by rpki-client