Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OB5F7rekFaNRuCQe-WXJucgS1_8.roa
File: OB5F7rekFaNRuCQe-WXJucgS1_8.roa (raw, json)
Hash identifier: SjyLiTw77zrGqO7A5aGMMPt4cbjszSCiIow1cdeyWSk=
Subject key identifier: 38:1E:45:EE:B7:A4:15:A3:51:B8:24:1E:F9:65:C9:B9:C8:12:D7:FF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20F5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OB5F7rekFaNRuCQe-WXJucgS1_8.roa
Signing time: Fri 25 Nov 2022 04:39:20 +0000
ROA not before: Fri 25 Nov 2022 04:39:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8437 (0x20f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=381E45EEB7A415A351B8241EF965C9B9C812D7FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:59:84:dc:08:11:f0:f6:96:02:db:c0:8a:
8f:0f:76:e3:3c:af:5b:29:98:e0:2a:b9:a3:44:90:
f3:41:85:f6:3b:e3:e9:83:53:6d:15:bc:a5:82:f7:
55:d2:d1:86:67:20:59:1e:f3:bb:f8:2a:cc:86:c5:
9d:28:6a:bf:31:90:42:64:a5:d3:8d:82:8b:35:68:
22:f7:03:b3:ea:54:16:74:e8:67:fa:81:00:12:df:
4b:8d:a4:c2:21:a5:55:c5:af:57:89:26:76:10:38:
dd:ed:0e:53:10:2f:bd:eb:80:ac:a0:6f:0c:f3:61:
f9:88:18:d5:08:83:35:da:41:24:b2:bd:f3:c8:ec:
65:15:2b:49:ed:3f:0b:29:91:36:a2:c3:ea:db:91:
30:0c:68:a8:33:49:24:d7:79:4c:ed:e2:ec:1f:27:
98:a7:41:fa:ce:a6:a4:5a:b7:84:81:67:96:7c:31:
a8:23:7f:38:c2:cc:d2:de:12:e8:00:43:68:cb:78:
1b:ae:b5:cc:90:64:05:f7:9f:fd:44:d0:5f:a1:c3:
38:7a:fb:ca:d8:bc:34:ac:7e:46:5b:64:10:87:ea:
ef:eb:5c:96:cb:95:e7:00:2a:0f:c8:0f:c7:db:dc:
e8:71:fd:79:68:b7:75:0f:ed:9a:51:f8:b3:8e:75:
be:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1E:45:EE:B7:A4:15:A3:51:B8:24:1E:F9:65:C9:B9:C8:12:D7:FF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OB5F7rekFaNRuCQe-WXJucgS1_8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.167.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:89:20:b0:c8:6e:c9:66:98:eb:d7:97:89:da:65:37:3c:94:
a7:2b:f9:16:bf:e5:e7:51:09:9e:0c:da:58:a5:3c:d6:75:8e:
51:97:fb:b4:4e:41:48:5f:69:f4:0b:f5:ea:10:6b:71:ca:bd:
9b:d4:7e:fa:d9:de:06:81:8a:67:ba:fe:59:35:6c:b6:12:af:
2c:db:a4:51:43:50:6a:a9:f8:b2:a9:e3:a1:4a:21:fd:70:e6:
f9:3a:a6:b1:74:1c:18:12:30:d0:f0:89:90:00:ad:6c:09:63:
d8:96:4e:4c:23:c6:ec:38:c2:e6:d3:56:00:c4:94:3a:fe:f7:
57:b8:64:67:13:1f:27:72:ec:c6:ef:02:9b:0d:6a:be:ce:5b:
b6:10:f8:d3:b8:cf:c6:d5:75:b9:52:3e:72:09:24:ca:2b:d2:
1a:2e:5e:85:83:54:23:80:da:94:9f:99:f6:4e:52:f6:52:6d:
cd:dc:58:cf:e4:cb:0e:51:bf:79:c3:06:92:f8:40:a2:6e:2b:
44:e4:cc:4f:dd:7c:fa:2b:29:6b:15:b1:2b:85:be:07:00:d5:
51:96:ea:f8:6a:44:ef:6e:4c:a8:c8:11:fa:33:48:b4:4b:d8:
9c:43:b4:24:1a:a5:45:fd:1f:dc:e0:2d:b9:79:46:4f:0d:92:
12:e9:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org