Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TAGKfZo7ng0DWcACVcLWgPFVaDA.roa
File: TAGKfZo7ng0DWcACVcLWgPFVaDA.roa (raw, json)
Hash identifier: Q/IvOSWq83SWGjsZwrF9AJCIgunxHhOVImNCMJpOkr0=
Subject key identifier: 4C:01:8A:7D:9A:3B:9E:0D:03:59:C0:02:55:C2:D6:80:F1:55:68:30
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1F85
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TAGKfZo7ng0DWcACVcLWgPFVaDA.roa
Signing time: Thu 08 Sep 2022 02:55:41 +0000
ROA not before: Thu 08 Sep 2022 02:55:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8069 (0x1f85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 8 02:55:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4C018A7D9A3B9E0D0359C00255C2D680F1556830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:67:b4:fd:57:56:2a:f2:b6:02:6f:bf:1e:4c:
4e:29:2a:f4:df:16:48:26:75:c6:aa:d4:3e:1a:53:
6e:1a:6b:80:8b:92:64:6b:0f:c2:17:8e:da:a1:22:
c8:9a:67:7b:36:7f:71:7b:9e:5b:20:6b:1b:ec:95:
f6:b7:40:e0:a1:4c:41:2e:27:9c:d4:75:de:dd:95:
73:b7:ac:41:e5:e7:02:3f:ae:62:22:32:1c:8d:54:
c1:25:a5:9d:f2:c6:0e:88:4c:14:5d:5e:40:3b:6f:
3e:46:dd:b2:68:a4:00:93:f3:80:f2:4e:74:a6:1d:
bd:2b:c9:d0:c3:e1:54:73:f1:ad:b6:34:6d:e2:46:
ad:39:5e:c1:d2:fe:02:20:b9:5c:d9:c8:46:9e:c7:
c2:1b:55:1d:09:2e:55:43:da:62:ab:08:39:7f:ac:
18:3c:ca:aa:32:03:e7:7f:d0:6e:cf:86:50:2a:4a:
19:c3:1b:d5:db:89:28:bc:39:57:9d:dc:46:88:96:
b8:e7:cb:eb:39:34:4a:2f:6e:67:c8:53:57:86:3b:
2a:2a:a0:b7:00:35:27:65:28:fb:35:c4:0f:9e:42:
89:09:c7:5d:23:24:15:19:45:b6:13:7a:c5:bd:69:
d0:a4:f4:30:3d:cb:50:80:83:8a:a2:2b:fb:43:8f:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:01:8A:7D:9A:3B:9E:0D:03:59:C0:02:55:C2:D6:80:F1:55:68:30
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TAGKfZo7ng0DWcACVcLWgPFVaDA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.252.0/22
Signature Algorithm: sha256WithRSAEncryption
91:3d:2e:f3:95:33:32:26:7d:9b:b1:0c:0d:c0:57:95:e7:d0:
b5:29:66:5d:41:3c:9d:24:49:cc:ff:14:18:81:a5:e4:cc:18:
70:df:3b:cc:78:10:8e:37:1f:74:29:6d:0f:6c:be:b7:db:e7:
57:42:9f:46:c6:f5:74:27:7d:69:77:fc:5b:d4:e6:86:55:a6:
85:68:e8:72:34:f5:e9:8f:21:4d:72:11:66:2b:b3:ca:fe:e5:
e6:e2:6d:4c:7b:af:cc:09:b3:3c:5e:43:bf:ed:b7:0d:06:9c:
c1:61:26:f9:45:ac:4a:40:22:08:bf:dd:99:b2:a7:f8:b5:a3:
a7:25:cd:88:12:90:06:82:51:6b:59:81:f4:6c:27:97:86:84:
e3:40:da:89:86:74:7e:59:eb:8d:2a:de:0a:b4:ca:a5:f6:97:
c2:41:b8:b4:ab:58:77:10:c5:4b:c7:9a:8d:5b:bb:10:78:e5:
95:96:2b:7a:d5:72:9f:37:63:07:c8:44:d5:d6:da:7d:98:32:
db:37:84:cb:48:8e:0e:26:ed:31:bb:18:11:c9:ab:7d:e4:8e:
3f:31:05:05:05:27:f6:61:b8:9d:8d:d4:0d:f1:6b:bd:b8:16:
bb:95:45:b5:a5:8e:7a:45:af:94:eb:bf:7a:70:88:89:78:85:
b9:30:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org