Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZcHIW1jyT_bZfQttU0Ajv7dAg_w.roa
File: ZcHIW1jyT_bZfQttU0Ajv7dAg_w.roa (raw, json)
Hash identifier: EzzSY6IrjBdqvti2iA2FhOMl+T7+D1Uc8ZlJGVxAC84=
Subject key identifier: 65:C1:C8:5B:58:F2:4F:F6:D9:7D:0B:6D:53:40:23:BF:B7:40:83:FC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2285
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZcHIW1jyT_bZfQttU0Ajv7dAg_w.roa
Signing time: Fri 25 Nov 2022 04:41:18 +0000
ROA not before: Fri 25 Nov 2022 04:41:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8837 (0x2285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=65C1C85B58F24FF6D97D0B6D534023BFB74083FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:79:d2:68:2b:36:41:8f:b4:b2:a1:c7:bf:
5d:f9:2c:4b:de:c0:59:99:42:d7:1a:db:5e:a1:a4:
30:2b:a5:ea:4e:2b:68:67:9a:5b:f0:b6:06:c8:8c:
11:b2:9c:ea:e6:4e:f1:63:00:2f:7e:8c:dd:e2:0c:
0b:54:19:44:46:70:87:28:de:0c:c1:2c:2c:18:78:
f9:1c:04:a8:24:40:e5:f5:71:c5:fc:2f:ec:b5:37:
6e:a4:6a:61:56:24:de:ee:6a:dd:be:26:00:7f:88:
b4:8e:47:fe:79:13:48:7f:30:64:f0:fd:e0:51:df:
5a:89:b7:a4:a6:ce:b0:91:e3:0d:e5:d1:b2:e1:7a:
b1:8e:08:c8:f9:b1:0d:3c:17:55:f3:5d:70:23:89:
a4:4b:0f:c2:01:65:eb:8f:30:f7:ec:ca:aa:45:2c:
08:a9:d5:28:3b:a5:2e:53:10:35:01:bb:a6:4e:f6:
c3:9c:0f:52:ab:f5:0a:0d:28:5e:c4:18:36:9b:59:
ee:d1:26:95:5b:3c:d2:cd:0d:0c:eb:2c:20:0a:cb:
8c:ba:cb:89:b5:a3:98:43:4d:13:e6:59:3e:18:6a:
56:66:5d:a4:c2:41:6c:72:69:8f:71:54:a4:73:fc:
12:a4:9e:c5:61:53:6d:c9:68:2d:80:47:c2:71:c6:
76:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C1:C8:5B:58:F2:4F:F6:D9:7D:0B:6D:53:40:23:BF:B7:40:83:FC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZcHIW1jyT_bZfQttU0Ajv7dAg_w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.236.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:37:53:6b:db:b6:9d:f6:c6:b6:43:0b:f8:a3:65:4a:12:cb:
85:75:11:60:ca:f3:dd:93:da:d5:88:48:4d:37:a7:28:23:74:
95:1f:d1:2a:a3:c9:54:bb:f6:66:66:a4:08:66:75:a8:3b:c4:
d4:99:28:fc:93:4a:6c:ea:d7:81:50:cb:72:bc:85:28:0e:bc:
96:50:7c:7b:4c:74:f4:39:0d:d8:c5:65:57:d3:81:f5:a2:f7:
e2:c6:22:3c:f3:35:69:0d:d2:11:d8:8f:0e:52:31:e3:d2:22:
c7:62:e5:db:30:1e:f7:46:db:44:17:5c:8b:b0:02:87:8f:49:
52:ba:4f:b9:17:c5:fd:29:29:eb:93:ae:e7:f9:98:13:db:9d:
70:75:bf:af:77:c6:2d:5d:d9:2e:a0:fa:ca:d9:de:03:34:3e:
42:18:1f:15:f5:83:38:e8:0a:41:1c:2f:ec:eb:90:e4:d9:ab:
f2:b0:75:e6:06:e5:1c:38:9f:6f:ad:12:73:b5:09:31:ca:81:
f4:93:1a:8b:4f:32:c1:c2:d5:09:b2:9f:c3:bf:ef:c9:63:b2:
b4:4e:fc:ad:54:e2:34:47:ff:35:25:68:e3:17:88:24:94:43:
ba:52:32:3e:ce:0c:dd:36:5a:44:d9:84:85:cf:e3:44:db:61:
a5:0d:54:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org