Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bfrYh3Mo24VYfeNybKMvtpfakOo.roa
File: bfrYh3Mo24VYfeNybKMvtpfakOo.roa (raw, json)
Hash identifier: 65K8uZLQ2JOiPA1tzULCMfqtNIiNuw+3R9TypzF2wVQ=
Subject key identifier: 6D:FA:D8:87:73:28:DB:85:58:7D:E3:72:6C:A3:2F:B6:97:DA:90:EA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CBA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bfrYh3Mo24VYfeNybKMvtpfakOo.roa
Signing time: Wed 29 Sep 2021 02:48:07 +0000
ROA not before: Wed 29 Sep 2021 02:48:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7354 (0x1cba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6DFAD8877328DB85587DE3726CA32FB697DA90EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:b0:a0:e1:b4:18:9f:3b:67:20:f4:15:0b:
b9:17:19:f9:79:6a:cb:b1:d1:a8:4d:55:a6:2e:3c:
c8:43:3f:ab:42:36:38:90:2c:b5:ac:ba:a7:1c:dc:
4c:ac:c6:0e:c1:c2:b7:99:ba:ce:36:bd:e0:45:9c:
f0:7e:41:a5:75:8b:23:ee:20:c4:5c:e0:ed:b4:e3:
61:2c:69:df:6c:ec:fb:90:bd:24:8b:d8:2c:f2:02:
3f:e6:ab:10:38:6e:d7:f1:a8:f0:ce:24:8d:9a:73:
b0:78:94:49:94:e5:ff:92:87:1d:e4:9a:f4:d8:d5:
24:d1:6c:87:90:9a:b1:9f:b4:3d:a6:8e:e5:5e:e9:
ae:fb:64:9f:4b:a7:12:6b:e8:ef:5d:f6:ae:f9:20:
1a:16:a7:00:8c:1a:d5:7c:1f:75:7f:79:63:bf:45:
22:55:59:6c:f4:8b:ab:1d:1d:83:07:5c:ad:ac:9d:
ad:fc:0c:eb:85:07:dd:ee:f6:24:aa:ce:2f:aa:04:
a4:50:5d:94:10:c9:b0:70:5f:d5:9c:87:63:cc:34:
12:c3:b7:fb:ff:e2:46:a4:ae:47:96:bf:49:ab:3d:
6c:ef:74:0b:75:af:e9:b9:d1:1d:30:b8:35:e0:4c:
e8:4e:10:ba:8e:78:d3:bb:c7:d6:1e:3b:49:fc:5f:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FA:D8:87:73:28:DB:85:58:7D:E3:72:6C:A3:2F:B6:97:DA:90:EA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bfrYh3Mo24VYfeNybKMvtpfakOo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:6c:a9:31:a3:86:95:f6:7f:79:cb:75:38:46:87:b9:d7:52:
e9:7e:84:74:f9:1a:18:96:09:9b:8c:d6:de:64:94:7b:64:fd:
09:d0:0c:5b:ab:00:cf:b5:c3:a3:fb:21:6b:31:69:35:8a:2b:
3b:d1:68:88:56:89:ce:06:16:8b:a4:03:81:3e:a7:65:02:26:
9f:18:97:9e:3d:ca:1e:ba:3e:56:65:70:49:c5:5f:1c:40:9b:
91:63:e1:ef:48:0a:bf:46:ed:e3:3f:da:1c:0b:28:fb:e2:c8:
0c:22:13:b1:0d:02:e3:bb:46:9f:02:2d:2c:70:36:2d:f7:9b:
ec:0e:f9:cc:7b:f2:13:9b:74:89:da:59:1c:33:e3:f5:f1:86:
72:7c:9a:ce:07:80:3b:98:ac:d3:24:87:96:a4:f1:6f:79:cf:
93:00:c4:fa:1a:97:f1:ae:e6:40:9d:d8:5c:5f:f8:26:a4:1a:
06:35:24:21:ff:13:78:90:4a:cb:1c:ee:1d:1c:8b:d0:76:e0:
7d:9d:a2:11:85:68:e3:35:51:e3:1f:87:87:85:81:18:1c:e7:
71:d5:c9:4d:b2:70:76:c5:b3:55:37:b4:38:d7:ff:d9:a3:20:
00:71:6d:82:17:01:60:98:3c:e8:49:2f:4d:41:55:26:31:b3:
02:77:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:13 2025 by rpki-client