Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TKyWzm-h3tcfC6ubHdqE_b4hv0g.roa
File: TKyWzm-h3tcfC6ubHdqE_b4hv0g.roa (raw, json)
Hash identifier: 7A4fgq/bR8VcyAD0rH/Bes/y95e5/llRir625N/GHGE=
Subject key identifier: 4C:AC:96:CE:6F:A1:DE:D7:1F:0B:AB:9B:1D:DA:84:FD:BE:21:BF:48
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 231A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TKyWzm-h3tcfC6ubHdqE_b4hv0g.roa
Signing time: Fri 25 Nov 2022 04:42:03 +0000
ROA not before: Fri 25 Nov 2022 04:42:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8986 (0x231a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4CAC96CE6FA1DED71F0BAB9B1DDA84FDBE21BF48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:78:fb:e4:f0:71:e6:c4:f7:05:ab:e2:37:
09:a7:42:ee:23:3b:a5:bd:ec:33:3c:32:b6:57:06:
c2:8b:49:ce:cc:de:50:b9:27:e3:26:c9:48:32:7d:
74:a2:f8:ee:d9:76:d5:29:42:d5:be:54:27:1a:ba:
99:7b:3b:cd:a3:c1:ef:a8:f6:83:12:79:53:a4:bd:
57:62:dd:85:72:e9:f6:51:51:01:6f:96:05:4d:b0:
05:fc:1d:9e:0c:74:a6:d7:b4:b7:17:69:d0:ae:54:
28:eb:af:b6:f2:74:bc:ea:67:02:c8:54:a9:9e:45:
f1:73:b5:8b:63:a8:9b:02:67:40:27:1a:71:2d:70:
9e:11:dc:60:c2:34:2e:ea:5c:c3:61:57:6c:5e:69:
89:24:e7:99:d4:d0:b4:ea:53:3a:40:df:03:3d:7d:
40:81:a7:aa:60:77:e0:cb:0a:8e:6a:a2:7d:dd:bf:
71:6e:85:3f:46:5f:9e:5e:ec:61:4e:43:76:fc:26:
43:59:a9:d9:25:05:b5:c3:96:1d:d2:80:8c:e2:74:
e6:2d:3d:ac:fb:00:9c:be:df:cd:e3:44:35:8a:1c:
cc:ac:4e:6b:a2:3f:7c:79:24:bf:5b:da:05:71:45:
5e:22:de:6a:a4:5f:3b:8e:f2:da:3c:1f:02:77:af:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AC:96:CE:6F:A1:DE:D7:1F:0B:AB:9B:1D:DA:84:FD:BE:21:BF:48
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TKyWzm-h3tcfC6ubHdqE_b4hv0g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.224.0/21
Signature Algorithm: sha256WithRSAEncryption
64:2f:e5:eb:ee:b0:5f:9a:07:d0:f3:8a:74:de:68:5d:6b:82:
da:1b:dc:e4:b5:f0:47:96:f5:6e:51:7e:78:1e:2c:29:68:bc:
a7:ab:cb:c9:04:54:99:69:0a:3e:4d:74:43:93:fc:fd:8d:5b:
76:ed:f9:1c:40:46:eb:6d:a6:fb:41:8b:b5:a4:db:a4:87:d1:
ba:a5:2d:3f:ad:cd:78:1e:54:13:af:2e:f1:8d:76:44:10:7a:
ea:ab:e5:ab:a8:30:5a:73:4d:6d:17:19:ca:98:83:b7:3e:e7:
99:0a:02:39:a9:a1:eb:a5:bb:86:71:52:cd:96:3a:7f:33:9c:
6f:87:6d:d2:33:18:45:1f:3c:ea:b8:ce:bc:df:e4:53:02:a5:
c2:30:7f:0a:b1:f2:94:27:b7:12:a9:65:68:5c:a6:9c:16:54:
65:cf:3f:c7:2c:c1:7d:25:ee:85:43:bc:4b:90:26:de:18:c4:
7b:4a:a7:0d:5b:03:f2:e4:e2:60:60:44:f6:f2:6b:6d:04:de:
1c:11:ab:0c:26:48:65:7c:f3:29:a6:27:6a:81:a4:51:d1:a7:
08:47:cd:2b:2f:d3:43:91:19:2a:a7:2c:da:b6:5e:fc:a5:f7:
cf:8a:4c:99:49:ba:2c:06:61:03:45:77:8c:ef:b6:55:e2:55:
4d:62:45:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org