Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kAHpnoqAQFDFdxjs2C9-1vVlbjk.roa
File: kAHpnoqAQFDFdxjs2C9-1vVlbjk.roa (raw, json)
Hash identifier: CvxOG/4P6tn6sAGHTUiex7zCynuk6OE1GQgHM2vMzQQ=
Subject key identifier: 90:01:E9:9E:8A:80:40:50:C5:77:18:EC:D8:2F:7E:D6:F5:65:6E:39
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F6D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kAHpnoqAQFDFdxjs2C9-1vVlbjk.roa
Signing time: Tue 29 Sep 2020 09:56:56 +0000
ROA not before: Tue 29 Sep 2020 09:56:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3949 (0xf6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:56 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9001E99E8A804050C57718ECD82F7ED6F5656E39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:58:0b:07:52:67:3b:a7:3c:d3:cb:65:0b:
e5:04:6d:55:e9:21:26:27:00:dd:39:fc:41:a9:84:
32:29:96:a0:2d:bd:77:ac:37:0e:23:48:78:c8:cf:
22:df:43:7a:85:47:2e:d7:81:7c:2c:4e:1e:fe:66:
29:90:8f:8e:95:21:d8:2b:35:54:4b:22:24:d3:26:
ba:94:dc:65:c0:82:60:ba:c8:99:17:8a:12:d7:ef:
b9:ae:0c:4a:a9:2e:a1:5d:97:3a:ae:9a:cc:93:53:
4c:15:db:6d:2c:04:6e:c5:df:23:b2:1a:d0:8f:04:
eb:be:b9:b3:9b:d3:f6:9a:b3:b7:6a:f3:58:67:49:
04:4f:41:36:f5:1a:45:dd:97:d8:b7:78:6b:6e:0a:
fb:b6:6f:9e:3d:c6:1e:98:66:06:95:6d:78:44:5e:
f2:d6:1d:04:46:cc:22:70:c5:52:3b:62:6f:fb:7f:
f0:ca:30:59:2e:8f:e3:05:2c:06:30:2c:39:5c:0a:
42:f9:e6:fc:8a:1c:19:1f:23:0b:9b:39:dc:16:66:
58:2d:f9:cd:64:07:cd:54:00:6b:5d:4d:69:ca:f4:
3a:0c:6f:d6:cf:5f:8b:52:a9:fa:96:3f:d8:23:1d:
af:6b:18:8b:5d:ce:0f:9b:71:d0:f3:69:7b:e5:8b:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:01:E9:9E:8A:80:40:50:C5:77:18:EC:D8:2F:7E:D6:F5:65:6E:39
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kAHpnoqAQFDFdxjs2C9-1vVlbjk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.102.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:89:0e:10:6b:ec:bf:dc:eb:2c:14:94:00:d1:b1:10:b5:f5:
1d:79:0c:8e:06:49:f8:79:34:1d:65:52:cc:05:82:98:9f:6f:
d7:ba:43:bc:a4:c2:49:88:15:fb:5c:7c:53:fd:c0:d9:e0:43:
be:47:ee:67:77:04:fc:ef:75:ac:84:80:ab:b2:aa:e0:2f:65:
2e:40:64:a2:bf:89:77:e3:c4:25:f3:6c:55:b2:b9:9f:1c:7e:
32:b5:a3:61:04:1e:08:2e:09:49:6b:81:b0:d4:01:75:08:ce:
09:9e:23:cb:fc:7a:cf:4b:10:a7:39:78:c7:d0:2b:f5:1b:8c:
74:44:51:69:ff:c8:38:37:1e:e9:58:37:c6:f3:18:73:bc:c4:
20:f5:99:b3:08:20:26:6b:64:4b:bb:2b:10:a2:30:2b:b4:68:
26:f2:65:dc:e3:12:84:db:eb:8e:9e:e5:ab:1c:d1:75:15:11:
bf:b2:89:0c:11:91:28:fe:29:23:91:3d:4a:ad:10:f4:1d:74:
7b:fc:a0:4f:1d:81:fa:d4:e4:0a:04:47:af:02:1c:b8:aa:d5:
f2:86:2a:a6:dd:27:52:9e:83:88:d8:6a:69:21:0e:d1:ab:ba:
84:8b:ec:78:5d:2b:de:2a:40:08:b1:18:42:d2:a3:55:3a:d6:
01:23:12:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:29 2025 by rpki-client