Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gc29M1PNSMP0KTKd7XtLlN8waLQ.roa
File: gc29M1PNSMP0KTKd7XtLlN8waLQ.roa (raw, json)
Hash identifier: 24QANtFDFpyg4IX24kcPQHSE05KP3DB/4RezNwzXdqY=
Subject key identifier: 81:CD:BD:33:53:CD:48:C3:F4:29:32:9D:ED:7B:4B:94:DF:30:68:B4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2283
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gc29M1PNSMP0KTKd7XtLlN8waLQ.roa
Signing time: Fri 25 Nov 2022 04:41:17 +0000
ROA not before: Fri 25 Nov 2022 04:41:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8835 (0x2283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=81CDBD3353CD48C3F429329DED7B4B94DF3068B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e6:71:98:92:dc:0c:c0:2b:ca:ca:00:0e:94:
b7:ea:30:84:4d:5f:45:49:47:d7:3c:fa:c4:b1:b7:
09:6f:42:e1:ba:d0:d8:06:08:2d:84:5b:1e:ca:c7:
c1:b5:4b:3f:ec:7c:2b:26:42:cf:bb:33:d1:0e:21:
a1:4b:a8:f1:25:ce:e3:7a:3c:ef:f3:36:54:74:9e:
bb:88:08:d7:d9:67:3c:5e:9b:82:e2:c1:f9:42:a3:
88:60:73:de:56:9b:8a:66:6f:2c:15:dc:00:d6:d0:
fe:23:55:86:be:5d:64:3f:14:8d:40:96:02:95:85:
75:3b:76:23:18:96:9e:52:be:03:54:ab:58:f7:17:
e7:00:83:02:2e:53:16:ea:7c:95:65:a5:6b:cd:46:
73:1e:33:96:bd:07:fd:8f:e2:da:2d:5f:f8:db:a5:
4b:df:be:a2:0e:b3:4c:f0:d2:72:2d:f0:8f:28:9f:
ec:26:55:a8:08:fa:43:61:c5:b3:08:c1:2f:e6:26:
b4:7f:a1:e4:43:97:0b:e8:7b:b6:a7:20:82:a2:10:
d1:b0:28:be:18:39:1e:1b:15:dd:0a:a4:b3:82:f6:
15:fd:1d:0c:50:a8:0d:79:50:01:7c:97:a4:ff:2a:
1d:e2:0d:cb:fa:d9:cc:ac:e0:dc:92:8e:58:42:63:
56:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CD:BD:33:53:CD:48:C3:F4:29:32:9D:ED:7B:4B:94:DF:30:68:B4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gc29M1PNSMP0KTKd7XtLlN8waLQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.16.0/22
Signature Algorithm: sha256WithRSAEncryption
37:7a:34:24:fc:c9:88:21:a2:5d:f5:6d:be:0c:18:d6:83:1d:
ff:22:e5:8d:9e:37:f0:48:16:ab:30:b9:7a:7d:8b:c9:e6:70:
a7:b7:1b:e4:4f:f0:e4:f5:0c:b3:e4:cc:8c:c7:ba:38:32:c0:
12:d3:c8:2b:db:c7:86:e3:9b:a6:f7:11:bc:e1:06:9b:98:83:
03:a7:d4:47:96:1d:45:14:62:80:74:90:fc:27:8b:98:54:25:
12:28:7f:1f:d5:dd:f9:0f:7c:f7:84:d5:6e:67:fb:ef:8d:09:
68:c7:5d:83:93:d1:64:e9:6b:51:e7:63:58:71:a0:0c:f9:9a:
6b:5f:31:71:92:3f:ea:cb:6c:b0:d1:9f:33:9a:7e:cf:c4:c5:
70:f2:ec:a9:dc:35:87:ad:12:a4:14:04:56:6f:6a:ed:07:21:
7a:64:6b:0c:f6:55:c2:f9:85:dc:56:8c:0e:e2:4f:81:de:a4:
68:b4:b6:7a:6a:34:90:0c:91:65:31:1a:ca:22:eb:0e:4b:af:
43:29:b6:a2:bd:65:bd:f8:87:8c:a9:8f:57:80:7f:b1:b4:57:
b4:5d:ca:f6:74:6d:4f:ed:a8:d6:1a:9b:7c:98:47:61:43:8d:
0f:0b:d6:a9:c6:d3:95:5c:de:0f:18:52:21:32:9b:c5:ed:a3:
c0:5a:b7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org