Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZJnm5tjzZgso7DwjwLoePfhP5fM.roa
File: ZJnm5tjzZgso7DwjwLoePfhP5fM.roa (raw, json)
Hash identifier: 7MR5Xtbb+p9iLGlPSumVYTofsFwj+htqFGjVQq/9EIc=
Subject key identifier: 64:99:E6:E6:D8:F3:66:0B:28:EC:3C:23:C0:BA:1E:3D:F8:4F:E5:F3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AC4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZJnm5tjzZgso7DwjwLoePfhP5fM.roa
Signing time: Wed 29 Sep 2021 02:45:44 +0000
ROA not before: Wed 29 Sep 2021 02:45:44 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6852 (0x1ac4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:44 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6499E6E6D8F3660B28EC3C23C0BA1E3DF84FE5F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:25:b8:36:92:c4:2e:c0:8e:6a:4f:74:71:
b7:7d:7b:21:56:e2:37:2e:fe:8f:a3:8f:1b:14:46:
b9:68:f4:c3:c9:81:be:7b:f6:80:13:3a:80:39:ec:
2f:5e:da:3c:5f:3d:cd:92:76:84:6c:02:10:a7:09:
e4:25:ec:f6:d4:32:c3:6e:ef:ff:42:ee:43:82:e5:
9f:49:94:28:2d:47:38:20:13:02:1c:85:13:50:ab:
9a:a8:b7:2a:df:c5:a0:73:6a:51:94:c5:86:b9:b9:
91:31:94:06:51:cd:86:3c:4b:1f:c3:ff:36:84:92:
d0:31:70:0b:ca:f7:38:51:57:5d:f7:e0:0e:48:08:
eb:05:9a:64:d8:33:26:1a:06:e8:76:30:f7:d6:c4:
cc:da:0c:a9:d4:83:83:a4:fe:f5:db:4d:d2:1e:da:
3c:d7:5e:20:da:fc:ef:46:f3:68:0b:f8:73:cf:50:
41:82:76:a9:91:95:f9:2c:e5:bb:be:8b:8e:60:ae:
62:c2:76:22:8a:be:25:67:21:e7:a4:27:f2:0a:66:
a6:ef:41:f6:2f:09:53:11:15:2f:97:28:db:b2:3c:
29:62:72:c9:d1:82:78:70:aa:81:47:37:12:62:34:
52:65:c9:37:6e:87:21:2d:3d:00:40:d4:e1:d9:fe:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:99:E6:E6:D8:F3:66:0B:28:EC:3C:23:C0:BA:1E:3D:F8:4F:E5:F3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZJnm5tjzZgso7DwjwLoePfhP5fM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.182.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:18:b2:e4:28:da:88:aa:21:61:b7:56:26:7d:29:08:30:1f:
11:30:6d:72:33:62:84:1a:47:60:29:7e:b6:cc:89:7e:ff:20:
f6:c2:ec:c7:1c:67:16:52:ee:4d:38:5a:e5:b2:89:74:5c:02:
ba:5a:22:0b:01:1d:72:21:fa:61:f5:b7:97:b3:01:47:56:01:
2e:8b:49:f7:a9:11:64:76:db:b5:20:76:e4:6a:31:a8:f7:46:
23:b5:5a:99:89:6f:d4:af:af:85:61:8a:eb:c2:c3:dc:6e:7e:
eb:7c:0d:c0:59:6c:e5:e9:73:c5:26:bd:5c:16:26:e8:39:4a:
0a:cd:47:e3:b9:7e:5a:10:99:a3:df:9e:bb:54:2c:17:f8:b1:
11:d7:91:3e:bf:af:bb:d4:29:2c:1c:f4:36:f2:d2:2b:8d:cc:
3f:da:26:5b:e7:57:c3:31:95:5d:53:cd:a3:46:7f:46:e1:89:
99:67:4a:87:ad:a5:3e:a4:bd:6e:2c:e5:07:ca:1a:1e:9b:8f:
83:80:f4:f5:1c:b9:cf:66:7d:ad:35:2b:22:e6:26:1b:b3:32:
24:f1:60:db:47:b6:95:c7:10:c7:7d:f6:e4:82:78:00:71:07:
d5:9a:ec:99:18:d5:fe:b5:3d:e4:9f:f8:21:6c:58:b2:b8:d5:
8e:f9:8b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org