Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WMx6sR-JVA9V87eHLBeWwO3UobQ.roa
File: WMx6sR-JVA9V87eHLBeWwO3UobQ.roa (raw, json)
Hash identifier: XhIN/nLBqyW0Bup0WGkxVFKManuIbuV3aSMT2fV/nNw=
Subject key identifier: 58:CC:7A:B1:1F:89:54:0F:55:F3:B7:87:2C:17:96:C0:ED:D4:A1:B4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2079
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WMx6sR-JVA9V87eHLBeWwO3UobQ.roa
Signing time: Fri 25 Nov 2022 04:38:45 +0000
ROA not before: Fri 25 Nov 2022 04:38:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8313 (0x2079)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=58CC7AB11F89540F55F3B7872C1796C0EDD4A1B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:a9:1a:37:d5:ab:d9:c6:56:e0:77:a1:2f:
1b:6e:be:50:a8:a4:71:b4:b4:2d:a5:51:8e:6f:70:
9d:2c:7d:94:11:35:aa:b7:fb:36:55:a2:00:61:d1:
c3:52:f1:52:ec:3c:3e:5c:ea:cb:35:57:10:07:a2:
a5:c1:e0:ec:5d:51:04:1e:47:f5:0e:d6:34:fe:d1:
92:b2:95:60:03:e1:96:8f:d7:34:1b:9e:6b:ca:18:
14:47:f2:fd:71:f2:cc:cf:ae:c8:a5:dc:d6:d0:b5:
6b:4c:c2:24:bb:dd:62:30:c7:3b:52:0e:9d:1d:c0:
f4:e5:ce:da:7f:6c:a5:40:af:a2:39:21:61:92:dd:
f3:27:7b:95:04:d8:f4:70:4f:3b:42:6b:07:f6:f5:
70:92:f4:11:96:7e:26:7c:94:b2:04:5a:27:35:23:
3e:e3:57:2d:8b:c5:12:5f:27:ef:9a:31:7f:26:30:
4c:51:90:9c:6b:16:65:1c:e6:bb:db:7d:cb:76:bc:
fc:c1:62:0e:b9:68:0d:43:50:03:85:96:b1:a7:d0:
1c:52:2a:ad:a9:cd:a9:3c:32:a4:1d:a8:89:64:3a:
dc:52:33:f4:d7:84:09:68:07:f2:13:35:cc:c7:15:
4e:7c:5f:6d:b7:46:3b:5d:f2:8f:96:be:f1:d7:69:
f5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CC:7A:B1:1F:89:54:0F:55:F3:B7:87:2C:17:96:C0:ED:D4:A1:B4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WMx6sR-JVA9V87eHLBeWwO3UobQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.24.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:9d:91:2d:4e:a4:ae:57:43:40:e4:f8:ab:20:20:e0:24:df:
8c:26:d6:9a:c6:30:07:7d:2c:66:41:fe:f4:98:95:d9:8e:f6:
fa:61:50:53:e8:6c:bb:02:84:54:77:9a:3d:5a:53:f2:25:85:
57:9e:f1:c3:1b:43:11:84:e7:68:e1:33:e7:f0:6c:34:2b:ac:
d8:2c:90:8b:52:ad:c8:55:c0:50:80:36:45:76:e8:22:ec:a3:
97:3e:c6:b7:34:69:01:26:8c:86:93:dd:dc:f5:7f:35:90:37:
fb:26:78:b2:e1:e5:3c:40:c0:f6:0a:e5:ae:80:e7:bb:be:e7:
27:bd:4d:f9:70:9c:ea:bf:5c:68:aa:ff:39:89:e7:c7:32:14:
b5:5b:51:cd:06:46:91:00:09:3e:03:5f:04:cf:a8:07:df:69:
8a:ad:6c:40:44:aa:76:93:e0:a2:83:73:0c:b9:36:eb:8a:8a:
ad:28:88:31:4e:45:9a:0c:a1:ab:c4:54:12:0f:98:c2:b7:7b:
ec:65:d5:4e:be:1d:0b:92:3b:1f:1a:d3:08:55:b6:98:8d:6f:
f5:6b:a6:a0:75:43:3b:3e:ab:cf:3c:18:2d:19:8b:60:7f:94:
7a:38:d4:0b:1c:89:0e:2a:4e:8f:03:44:b3:f8:c9:ec:3c:6e:
19:44:6c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:46 2025 by rpki-client