Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OovdPwEzWjnW-DfBO5JqfKdb1ak.roa
File: OovdPwEzWjnW-DfBO5JqfKdb1ak.roa (raw, json)
Hash identifier: mMPVuOIc46zDQowMJY/9p9FROweFmal8IXCyuLBYLvY=
Subject key identifier: 3A:8B:DD:3F:01:33:5A:39:D6:F8:37:C1:3B:92:6A:7C:A7:5B:D5:A9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OovdPwEzWjnW-DfBO5JqfKdb1ak.roa
Signing time: Thu 15 Sep 2022 02:53:36 +0000
ROA not before: Thu 15 Sep 2022 02:53:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3A8BDD3F01335A39D6F837C13B926A7CA75BD5A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:92:1b:d5:9a:f8:dd:31:af:77:09:97:23:6f:
36:e1:a3:87:25:b8:25:58:7b:c0:38:8b:13:23:7d:
3e:8b:1c:c4:a3:7b:36:97:f1:d2:cd:a4:f8:03:9b:
67:9d:b5:48:15:d3:3d:d8:b7:c1:21:29:03:ba:36:
f7:c9:c7:09:b5:d3:66:a1:6f:96:9d:bc:e3:d5:23:
92:a2:a9:38:ce:09:29:22:d8:be:f2:72:16:ee:07:
5c:5b:86:f9:c8:d9:9c:e7:dd:12:fd:82:d2:2b:73:
e5:c2:2f:62:47:27:c4:d8:9e:81:ac:ba:19:1c:7e:
4f:ea:6d:4d:30:1e:9e:69:06:57:6a:69:7e:92:cb:
f4:b9:08:dd:25:42:13:62:75:ed:2d:08:38:52:09:
28:0d:d8:a3:59:e9:71:bd:40:fc:a7:d2:a6:a1:47:
dd:dd:c1:41:49:62:39:8f:f5:37:80:55:4c:5d:46:
42:a2:0a:ed:d7:fb:91:7c:ed:c9:70:18:76:87:b9:
db:a2:5d:51:9b:d9:6c:3f:81:d0:8a:44:58:05:c1:
a9:41:92:90:92:16:ed:1c:e9:cf:b8:52:69:70:26:
8f:86:27:90:e2:af:8d:dd:ed:56:d6:2b:21:56:07:
df:e6:a9:68:18:f2:1a:dc:5d:49:e9:b1:c3:4e:80:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8B:DD:3F:01:33:5A:39:D6:F8:37:C1:3B:92:6A:7C:A7:5B:D5:A9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OovdPwEzWjnW-DfBO5JqfKdb1ak.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.135.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:0b:eb:a0:93:f1:64:49:c5:dd:1b:37:31:8d:97:1e:e1:6e:
9f:e2:f3:c5:b2:17:f2:66:86:fe:b3:92:7e:34:81:bb:f1:63:
14:9c:88:29:92:a8:ab:61:a3:1e:24:2d:09:53:63:78:86:d1:
0b:6a:7d:7a:78:54:39:3d:6a:40:78:b7:29:cd:78:eb:4f:dc:
dc:51:77:7e:d3:4e:91:f8:16:d0:74:ee:c4:58:fd:48:99:9b:
fb:69:99:df:47:4e:16:00:c7:73:cd:df:b4:b8:c9:70:20:0d:
b1:37:6b:04:b3:c8:bf:c8:a8:78:27:df:f7:e7:ad:78:b0:b3:
99:97:04:5a:cc:cc:40:ea:0e:98:42:44:17:06:e0:75:36:17:
2b:bd:a8:66:41:17:27:91:db:0b:d6:97:54:b2:26:e9:e0:1d:
f8:5b:c5:47:a8:3c:a4:be:0e:aa:fa:db:99:4d:5c:59:25:0e:
2b:ba:60:8d:b8:90:99:aa:20:c7:c3:8c:1d:b6:0b:11:ed:7c:
a6:4b:8f:52:49:e9:07:d8:dd:c3:a6:b5:51:dd:b3:31:8e:b9:
15:5d:e3:99:38:e3:02:85:86:bb:01:12:82:d0:5a:cc:cc:47:
d9:40:4c:68:a3:70:15:d6:db:e0:39:6b:1b:f9:5c:02:03:6e:
f6:d1:f4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:30 2024 by rpki-client on console-ams.rpki-client.org