Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ONun2Y9gF-g20MYlWyFPvrLosUE.roa
File: ONun2Y9gF-g20MYlWyFPvrLosUE.roa (raw, json)
Hash identifier: /Gog3AVFK57nsOfwkeAyDaG+BBQLGCORTQnG13mS6gM=
Subject key identifier: 38:DB:A7:D9:8F:60:17:E8:36:D0:C6:25:5B:21:4F:BE:B2:E8:B1:41
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1F5D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ONun2Y9gF-g20MYlWyFPvrLosUE.roa
Signing time: Tue 23 Aug 2022 09:29:40 +0000
ROA not before: Tue 23 Aug 2022 09:29:40 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.56.0/21 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8029 (0x1f5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 23 09:29:40 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=38DBA7D98F6017E836D0C6255B214FBEB2E8B141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:bc:51:84:a0:1c:03:8a:78:18:06:86:5b:
23:d6:39:d0:25:12:55:56:69:55:40:55:0c:a5:46:
d8:22:a8:b5:09:f0:3e:fe:e7:ef:55:c7:87:79:11:
53:51:04:d5:97:0f:ce:d7:a4:5a:20:f3:82:7f:9d:
00:40:16:17:d0:f1:19:b0:7a:0e:18:19:de:55:72:
53:40:ba:df:4f:ca:fa:97:ea:d4:c2:2a:ec:d1:2e:
85:12:62:c2:02:1b:99:e4:06:dc:d1:e8:82:93:95:
4f:4f:7f:1b:b0:5f:a4:d4:de:54:27:d5:32:82:dc:
d8:3c:22:4e:18:95:0c:9b:01:03:8e:6b:f9:e0:f8:
08:01:48:56:fb:7b:20:28:b8:48:f5:59:44:5c:68:
d4:8a:d8:99:34:37:c5:5e:b8:45:df:b3:4f:ef:0c:
bb:5a:f7:9e:46:60:9c:c5:f1:e7:0c:0e:42:34:33:
74:00:75:32:2b:06:64:2a:23:17:52:07:b8:b6:bf:
1f:44:5c:ca:b4:83:9a:89:46:15:51:41:25:ea:91:
c6:46:cb:40:30:ef:2a:ae:5f:f5:26:c0:b7:02:d3:
3e:37:21:66:2f:34:54:17:d1:29:bc:cd:04:b6:7f:
74:6f:8e:4d:00:a3:63:49:32:c8:f2:d3:df:44:c7:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DB:A7:D9:8F:60:17:E8:36:D0:C6:25:5B:21:4F:BE:B2:E8:B1:41
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ONun2Y9gF-g20MYlWyFPvrLosUE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.56.0/21
Signature Algorithm: sha256WithRSAEncryption
40:a0:22:2a:b3:3f:cb:1f:3a:b0:91:76:cb:b4:22:0f:bb:22:
d7:8a:7a:6c:a7:24:b0:40:fd:af:e9:64:c1:6e:79:e4:fe:00:
ff:7c:16:07:c4:97:01:cd:cf:fd:48:db:96:c5:5e:2a:7d:88:
de:4c:9b:48:12:d2:7e:6d:29:04:43:81:77:09:e1:53:39:b0:
73:50:60:76:24:d1:ce:ee:89:83:b7:60:82:80:b3:f8:18:f5:
f6:06:d2:34:21:de:5c:d9:aa:ac:3a:7c:0c:de:34:ae:68:44:
57:71:9d:a1:10:99:4a:15:7d:4d:39:da:bf:28:f2:bc:3e:7d:
fc:6d:9c:70:21:8f:96:44:c3:5e:c5:5c:7a:68:22:fd:81:3b:
81:a3:3f:bd:4a:20:a2:88:12:80:94:71:55:ca:81:7f:60:7f:
6d:70:d5:d9:5f:fd:16:90:b3:e0:81:5a:08:75:fc:78:ac:45:
0f:01:a9:78:b5:5f:71:a2:75:09:f9:de:43:95:68:27:43:1c:
8f:28:36:1b:36:a6:57:b3:54:29:49:5b:d7:e1:e5:27:c8:61:
39:a4:12:f4:b1:d4:9d:50:6f:5b:89:cf:80:07:7c:2d:0d:5a:
e5:70:e0:ef:ef:f2:f7:d6:0f:7f:a6:fd:8c:aa:da:07:3f:38:
ba:2e:57:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:30 2025 by rpki-client