Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TBkQ1_OvPzNogduXxSMvPhPMo8g.roa
File: TBkQ1_OvPzNogduXxSMvPhPMo8g.roa (raw, json)
Hash identifier: hGMxgzNCiuQkIyjJ76sz+eI9A2QXQBpEfVdxxsFLfVo=
Subject key identifier: 4C:19:10:D7:F3:AF:3F:33:68:81:DB:97:C5:23:2F:3E:13:CC:A3:C8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F4A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TBkQ1_OvPzNogduXxSMvPhPMo8g.roa
Signing time: Tue 29 Sep 2020 09:56:45 +0000
ROA not before: Tue 29 Sep 2020 09:56:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3914 (0xf4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4C1910D7F3AF3F336881DB97C5232F3E13CCA3C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c1:13:1f:27:0f:eb:2b:a6:bd:11:8d:ca:f1:
aa:51:1a:f9:59:24:ec:22:16:0e:a7:57:86:99:f6:
0c:db:dc:5d:a8:0a:5c:ef:53:c8:16:be:a0:da:9b:
67:5c:cf:7a:4e:50:93:53:be:83:f0:6c:75:e9:f3:
b5:04:ca:80:70:5f:a4:19:42:aa:50:cb:9c:a6:5a:
db:07:bf:62:48:cd:ea:9e:eb:ac:e4:ab:a4:8b:bf:
24:fd:33:2b:0c:de:73:0a:1a:e5:6e:80:75:6b:14:
48:a7:8c:68:fa:ea:aa:8b:ee:d4:51:ee:a6:cf:bb:
76:2c:ee:ee:11:e2:00:b5:f9:1f:96:fb:e8:de:0e:
01:95:2d:a0:f4:ac:7a:07:76:9a:28:26:44:c4:de:
38:0a:b1:d4:5c:34:91:c6:4b:ce:17:c1:94:b7:f8:
cd:2b:f2:5d:4c:7c:fd:fd:64:d5:14:c7:aa:56:ec:
ca:b6:15:b1:8a:73:7c:28:cf:f3:db:cf:ec:a0:19:
04:bd:b9:53:d6:03:fd:c2:13:eb:0b:e0:18:5a:85:
85:3f:77:ed:3d:ca:04:21:30:b2:4c:15:44:e2:11:
f4:7a:e3:55:e4:a7:09:c8:95:14:df:68:2f:48:f9:
98:c0:bc:b7:81:64:3a:c9:bc:e3:63:68:c9:19:fc:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:19:10:D7:F3:AF:3F:33:68:81:DB:97:C5:23:2F:3E:13:CC:A3:C8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TBkQ1_OvPzNogduXxSMvPhPMo8g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.69.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:bd:d8:a4:6b:46:4c:94:f4:62:88:c6:06:d9:fd:3c:d5:69:
16:91:60:81:d6:99:78:c0:34:35:29:2a:27:90:74:c6:61:73:
b7:48:b1:dc:50:14:ca:3c:3a:22:2f:37:1f:ad:b9:86:05:07:
25:f3:cc:72:39:70:44:22:32:e4:6f:b6:9a:be:da:5f:cf:b8:
ca:3b:db:3c:c6:df:08:4f:3d:70:ac:cb:fe:36:65:cd:ad:8b:
3c:03:f9:0c:d2:d7:db:f4:e3:20:d9:e7:5d:c9:49:5b:e8:61:
ad:50:9b:60:db:76:d0:8e:96:db:e5:31:87:d8:34:e0:f9:15:
e8:ae:6b:f5:39:a7:98:88:e3:ee:2c:a7:3a:c0:fd:59:38:78:
3a:b6:2d:3a:d3:fe:7e:f6:8f:4b:b7:55:08:48:15:dc:eb:f7:
fd:c4:1b:f1:50:b6:f7:1b:3f:bf:51:0b:4d:b2:e1:90:30:af:
64:93:a2:d3:48:1e:56:9f:33:c3:32:66:4c:3e:f5:2e:e5:a6:
bd:ba:b4:fb:74:37:85:4e:61:59:88:b4:97:dd:b7:3f:55:28:
3c:b2:2a:70:35:48:7a:fe:79:03:fe:9d:cd:79:b6:f6:09:39:
1e:0f:a3:98:38:0f:c0:82:0b:52:67:33:4e:ea:64:6f:67:20:
fa:a6:79:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:34 2025 by rpki-client