Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_KH1942C5PIErBB9BRYfSpoUqCA.roa
File: _KH1942C5PIErBB9BRYfSpoUqCA.roa (raw, json)
Hash identifier: r+/nygh4FU35mhfzRkKK95K9H66MSgk/T34YvECwlOk=
Subject key identifier: FC:A1:F5:F7:8D:82:E4:F2:04:AC:10:7D:05:16:1F:4A:9A:14:A8:20
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C4C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_KH1942C5PIErBB9BRYfSpoUqCA.roa
Signing time: Wed 29 Sep 2021 02:47:34 +0000
ROA not before: Wed 29 Sep 2021 02:47:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7244 (0x1c4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:34 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FCA1F5F78D82E4F204AC107D05161F4A9A14A820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:3e:27:07:90:1f:6b:b1:1b:66:94:18:d5:
21:28:97:18:9f:9c:77:0c:ff:51:e3:e9:6a:b1:5c:
3d:9c:93:ca:91:79:4c:6a:b6:5a:36:2e:67:98:f4:
90:5c:be:da:1a:73:64:c3:40:13:3d:a9:6c:96:17:
fa:c1:c7:36:ac:f0:2c:5a:f9:a6:f2:df:68:bf:db:
74:97:26:ed:4b:e3:1a:b9:28:24:f6:21:20:17:87:
54:db:17:6d:6f:06:18:c7:41:84:3a:3d:6e:fb:68:
1c:06:41:27:fc:94:a3:6d:6b:cd:5f:c0:19:d7:e8:
4b:9a:60:ad:22:13:6b:1a:05:89:c9:7b:c8:70:bd:
e6:77:77:ed:b4:1a:77:2d:6c:61:a8:40:27:f5:41:
19:81:36:cf:3d:96:a8:a9:10:7b:74:35:d5:a8:34:
5e:89:fc:c4:d9:da:b9:85:14:90:53:a7:5b:21:a1:
8e:65:03:b5:51:93:5c:9e:02:c9:cf:32:f7:75:4a:
24:cd:78:31:66:bc:4d:c3:6c:56:79:2c:fa:48:52:
82:f2:89:64:62:0d:82:bc:9f:0a:57:e5:2f:3f:26:
99:0f:a6:20:95:27:a7:0c:61:63:a3:ae:12:82:6f:
4e:2b:a7:9c:f4:0d:e9:76:4f:63:51:fc:36:12:a0:
10:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A1:F5:F7:8D:82:E4:F2:04:AC:10:7D:05:16:1F:4A:9A:14:A8:20
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_KH1942C5PIErBB9BRYfSpoUqCA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.16.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:7e:4b:d6:42:d3:4f:28:2e:9b:75:6f:80:1f:aa:ed:7d:94:
1a:80:8e:79:a2:49:87:4a:af:4a:b5:5d:9b:30:35:aa:b5:1e:
49:5b:d3:d8:7e:dd:f3:f8:8a:02:49:b2:58:5b:77:f8:5a:bf:
17:04:99:08:72:9a:5c:bc:19:1c:55:a4:d4:8b:b8:f8:82:88:
32:c0:4e:b0:38:68:ea:da:0c:64:ac:34:2a:24:35:0b:6d:85:
e2:a4:e6:f8:e1:49:3e:75:3f:cd:d2:6d:22:5f:e7:ea:88:a8:
1a:78:19:cb:e1:25:d9:9c:be:64:18:29:6a:99:5b:40:18:e4:
ff:bb:16:6a:a1:58:67:a0:cc:c1:71:36:ad:07:53:b0:41:77:
fc:06:a5:37:a7:2f:a1:77:7e:25:23:8b:63:4b:5a:84:c4:8c:
54:d4:1b:69:b7:b5:70:7a:54:91:93:d9:d6:44:b9:95:23:3d:
14:5e:48:bb:32:f0:15:0c:5c:a7:1f:f3:9c:fa:22:5b:47:7b:
39:eb:3a:af:04:64:61:88:1d:85:b3:e1:65:05:d8:13:06:0b:
1e:4f:fd:a2:2c:21:dc:b7:3a:97:99:a0:bd:fb:7c:10:3e:3c:
30:d8:57:e3:89:c7:b4:07:5c:a0:80:e1:15:05:bf:1f:5c:21:
a7:cf:e0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org