Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XcM5Pw6gS2NQ0yXyhlxM0i_Ldsc.roa
File: XcM5Pw6gS2NQ0yXyhlxM0i_Ldsc.roa (raw, json)
Hash identifier: fOCIbuluWF7b5Lo8X370Y/tlHjBoHph+t9qAAaBYef8=
Subject key identifier: 5D:C3:39:3F:0E:A0:4B:63:50:D3:25:F2:86:5C:4C:D2:2F:CB:76:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XcM5Pw6gS2NQ0yXyhlxM0i_Ldsc.roa
Signing time: Thu 15 Sep 2022 02:53:53 +0000
ROA not before: Thu 15 Sep 2022 02:53:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5DC3393F0EA04B6350D325F2865C4CD22FCB76C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:f0:4d:5e:87:d4:45:7f:5f:bf:60:3d:a6:
e3:c9:f8:f3:f6:7c:b6:36:df:a7:3b:70:0b:f7:fd:
96:5c:18:06:9b:cd:12:a2:65:f5:ee:b9:f4:9a:82:
b8:cf:d7:91:1e:75:a8:25:e2:33:07:a7:04:20:34:
71:09:19:0a:38:38:52:6f:52:13:7d:17:54:d6:bb:
44:9f:1c:fe:38:06:56:a0:e5:80:76:19:c2:7d:47:
d8:13:59:78:4e:d5:c4:ea:7c:98:90:a1:04:dd:32:
38:7e:87:91:fe:71:4c:c1:80:0b:b6:6e:0a:1d:37:
21:59:e6:03:04:c3:39:31:17:e5:76:72:c0:2d:45:
1d:4c:8a:a7:8e:8f:85:f3:8f:98:fe:21:2f:32:ba:
c9:62:c1:2b:16:90:a9:cb:11:cb:cc:78:38:7c:60:
b0:dd:1c:46:d3:e4:85:de:ff:e3:7e:be:35:97:15:
7e:57:8b:37:83:b1:e4:19:58:34:50:58:da:d8:72:
70:e5:ac:2e:a4:e9:59:00:bf:fc:c7:e5:b3:bf:c8:
9b:0a:8a:fd:95:09:d2:59:76:99:dd:7a:51:b5:8d:
3d:22:7b:c7:b0:2b:f4:f4:92:de:51:fe:b7:9f:ab:
96:28:4e:f5:94:24:ed:b7:e7:37:e6:76:63:e6:be:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C3:39:3F:0E:A0:4B:63:50:D3:25:F2:86:5C:4C:D2:2F:CB:76:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XcM5Pw6gS2NQ0yXyhlxM0i_Ldsc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.208.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:ec:f5:48:a3:34:4d:f8:01:90:57:ae:1a:03:33:5f:9a:12:
3c:bb:94:68:02:56:9d:cb:93:dd:34:5d:ac:32:4b:f6:af:70:
8c:6a:c7:87:39:30:9e:27:ce:8c:17:7c:1f:d7:7c:38:3d:1b:
f6:2e:3b:e5:e7:2e:31:5c:ea:0a:0d:22:de:ec:f6:ff:fa:b7:
9b:a6:41:0f:bf:ce:c7:af:ff:5c:9b:dc:71:06:17:a3:82:15:
20:e7:2b:3f:2c:e4:5c:6b:11:ef:33:e9:f2:57:15:73:f2:fc:
ad:e0:e6:a0:ee:33:d0:f2:fd:74:12:06:92:d8:d4:05:6d:5e:
f3:66:82:1b:38:73:d8:88:22:0c:19:ef:b7:90:51:3e:98:75:
d6:76:5a:01:e3:0b:7d:ad:6a:2c:9e:e4:be:e8:d0:5b:5d:b4:
59:69:06:f7:35:8e:df:7e:c0:0c:9f:ba:f4:92:6c:ca:3b:bb:
41:a5:de:67:5d:7d:07:fe:20:bd:4f:c0:08:ba:18:52:42:8d:
45:0c:8c:96:a5:2b:be:cc:56:24:1b:ec:c9:86:6a:15:e7:85:
bd:93:0b:f0:81:61:04:9d:c2:5a:35:45:a6:f6:a9:7e:9a:f1:
b2:96:0b:1f:ce:73:af:e1:e4:ec:da:f0:98:68:a4:97:c2:32:
05:3c:05:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org