Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ms1U_ai7bmWD3Di5MfGuH3dmtHE.roa
File: ms1U_ai7bmWD3Di5MfGuH3dmtHE.roa (raw, json)
Hash identifier: WlN0oyyUaNdNe2egU3j9BhPybWKVzKAmWzBNvUVY97k=
Subject key identifier: 9A:CD:54:FD:A8:BB:6E:65:83:DC:38:B9:31:F1:AE:1F:77:66:B4:71
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1E56
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ms1U_ai7bmWD3Di5MfGuH3dmtHE.roa
Signing time: Tue 03 May 2022 03:21:54 +0000
ROA not before: Tue 03 May 2022 03:21:54 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7766 (0x1e56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 3 03:21:54 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9ACD54FDA8BB6E6583DC38B931F1AE1F7766B471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:25:71:34:ec:a2:6d:81:33:58:d9:94:59:
d2:f7:f4:57:b7:f2:f1:38:8c:d0:49:fc:0a:3d:ad:
e3:fe:31:ba:f4:27:b7:a7:3b:0f:e5:3f:6d:79:82:
ae:1a:53:0f:f9:50:36:ac:cf:59:39:4f:5b:2b:e3:
8a:cd:02:45:51:63:7e:e3:dc:96:f5:d1:bf:e1:cb:
91:8f:0f:e7:4f:ec:18:d3:a1:6b:4c:45:51:ed:42:
5d:c0:94:19:d3:66:80:40:04:16:8c:a0:e5:8c:54:
2e:49:a5:cf:99:6e:87:d0:88:b9:36:86:76:06:19:
ac:5c:2d:e1:ea:88:30:08:9e:33:f0:db:67:55:46:
22:c6:c8:a9:34:ca:8e:00:16:4d:4c:95:c8:64:34:
6c:06:12:35:cc:b4:f2:2a:be:df:8f:7c:3f:8c:33:
d5:a8:48:d4:41:5d:0c:0b:52:d8:a7:32:b9:80:69:
86:b9:cc:2e:cd:bc:38:63:fe:10:e2:75:c3:4a:f4:
5e:74:b5:e0:03:9a:d5:dd:98:ac:85:fd:33:e5:30:
91:58:20:f4:b7:2b:77:6b:e9:a9:41:66:58:7f:72:
f8:c7:64:94:85:79:81:44:b3:5f:20:a4:a9:67:b3:
0e:fd:51:02:d8:76:63:47:f7:4a:68:6c:a3:bd:dd:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CD:54:FD:A8:BB:6E:65:83:DC:38:B9:31:F1:AE:1F:77:66:B4:71
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ms1U_ai7bmWD3Di5MfGuH3dmtHE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.248.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b5:68:ea:3e:a5:ee:a1:eb:b6:5a:0d:e3:53:6f:0a:ff:41:
9b:59:ae:6f:3a:e0:10:78:56:a8:43:c4:3e:94:8b:28:7c:93:
70:dd:1f:ba:3c:a0:de:0b:12:12:94:df:89:1c:67:a5:0b:53:
2e:85:40:c8:cc:b0:cc:67:2b:48:cf:f4:f0:3d:d4:56:94:07:
02:51:1f:39:d0:41:da:96:44:50:58:9e:fa:f5:a7:44:91:a9:
c5:14:c0:9a:01:34:63:23:b3:40:ab:d1:2c:72:f3:53:06:c0:
64:ca:8c:6c:6a:eb:06:fc:28:a2:e5:ab:76:ec:53:5a:52:4d:
c8:18:26:54:9a:50:7d:66:92:26:0b:89:c7:2b:81:11:1b:49:
1d:3a:f3:1b:e3:10:29:8e:c0:f5:a2:b6:f9:41:57:b8:76:50:
bf:47:18:11:b9:2c:d4:33:9b:4b:d7:76:18:8f:7d:62:07:78:
ee:09:c9:42:e1:f9:79:fd:3f:6d:70:63:6e:b1:64:28:7b:5f:
2f:06:00:26:d4:0e:7a:f2:9c:d2:7b:82:b8:12:cc:4f:d4:ec:
70:c0:dd:72:d8:6a:dc:d7:ca:15:e7:4c:37:00:05:93:d2:af:
81:b9:62:94:6c:43:a6:6c:8f:62:b5:65:f2:91:69:9e:ad:01:
9f:52:98:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org