Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WAAt_9klO8nOtLAKe8EtQ9d-q0o.roa
File: WAAt_9klO8nOtLAKe8EtQ9d-q0o.roa (raw, json)
Hash identifier: ZZRHrvkyNdCl7UTdMpBcOXdRhsbnYXdoT6Q/RS49b+E=
Subject key identifier: 58:00:2D:FF:D9:25:3B:C9:CE:B4:B0:0A:7B:C1:2D:43:D7:7E:AB:4A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 16CB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WAAt_9klO8nOtLAKe8EtQ9d-q0o.roa
Signing time: Sun 07 Feb 2021 12:14:24 +0000
ROA not before: Sun 07 Feb 2021 12:14:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5835 (0x16cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:14:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=58002DFFD9253BC9CEB4B00A7BC12D43D77EAB4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:fc:74:2a:f8:fe:82:a7:2c:c8:9d:8a:62:
a3:19:f3:0a:2b:3c:cf:3c:85:cd:bc:9d:4f:8e:5f:
73:9c:00:c2:4d:58:76:0d:c8:26:87:6a:3f:c8:a5:
40:ee:10:17:e0:a7:c8:71:33:a2:31:a9:8c:fe:f1:
dc:55:5a:c2:86:40:6a:97:11:d9:c4:13:31:9d:59:
b8:ca:7f:60:88:9b:b5:fb:bd:d0:80:86:2e:db:e1:
c0:80:cc:9d:23:8f:35:45:b7:5d:7d:b9:81:ef:64:
84:af:60:26:d8:12:d2:a2:52:69:47:f5:d0:8d:1e:
9f:8e:10:33:e7:d8:2a:86:c1:9f:df:1e:00:b8:b0:
15:a4:d3:31:16:1e:51:d1:f6:40:81:42:5a:a1:6d:
e4:93:41:66:22:cf:b5:3e:33:ce:43:5f:f9:d7:47:
5e:c2:58:80:f5:bc:28:bf:1c:82:fc:93:f0:67:cc:
2b:07:f6:15:ea:d1:44:f4:18:9a:19:46:d4:6e:70:
94:53:96:d3:24:b3:fd:66:56:e5:ba:3f:49:ad:46:
6a:c1:a5:68:8b:da:dd:e1:33:6e:33:1e:5c:e0:8e:
42:2a:d0:9d:6a:e6:6a:01:c1:32:a2:f7:34:e4:51:
27:67:da:6c:90:b1:29:a3:58:c3:ef:bf:bc:a8:a0:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:00:2D:FF:D9:25:3B:C9:CE:B4:B0:0A:7B:C1:2D:43:D7:7E:AB:4A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WAAt_9klO8nOtLAKe8EtQ9d-q0o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:23:be:52:72:6b:98:a4:fc:ff:6d:0b:8c:32:c4:dc:24:2a:
05:38:52:b1:ce:c5:d9:9b:ce:c5:ec:1c:ca:2a:9d:70:ab:15:
e9:46:c9:52:47:6e:b8:2f:2d:96:36:5e:46:19:7b:ff:fa:dd:
a0:7e:1f:87:81:b5:f0:f7:51:05:c0:d2:8e:33:cf:40:a3:48:
67:c4:4b:f2:15:7d:64:70:79:70:a0:c2:ee:44:85:f3:aa:09:
ea:38:49:9d:18:ca:92:06:c8:aa:22:34:c4:4e:1b:76:06:66:
61:96:f0:c5:47:4e:a2:e1:ad:38:ac:d0:c4:2a:84:e0:da:08:
eb:db:d4:49:48:ad:73:da:3e:19:76:c1:2f:ad:20:bb:33:22:
65:73:87:ab:3f:05:c5:72:e3:68:a7:b2:63:2b:91:69:49:b0:
93:8d:32:c5:9b:aa:2b:21:a5:b8:3b:98:94:cc:49:6b:c3:69:
d3:21:40:1f:3e:07:ad:f0:6e:10:f2:22:b9:0e:20:a1:16:d7:
23:9b:fc:90:cb:ab:30:2b:76:f6:cf:9c:a7:c7:3a:99:72:ce:
46:ca:6c:f5:69:68:ae:5b:dc:d3:b0:af:1a:02:9f:1d:48:df:
6b:8c:f3:dd:04:ae:26:41:e6:3f:5d:ab:11:fe:61:af:ed:dd:
0d:7b:94:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org