Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/natER4HNx9Ptx6AoTvX3vIkmPdM.roa
File: natER4HNx9Ptx6AoTvX3vIkmPdM.roa (raw, json)
Hash identifier: uUFri+7TSJs07vHhChfUj1RK7WDqqkZDQXMF3fm1X7I=
Subject key identifier: 9D:AB:44:47:81:CD:C7:D3:ED:C7:A0:28:4E:F5:F7:BC:89:26:3D:D3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2162
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/natER4HNx9Ptx6AoTvX3vIkmPdM.roa
Signing time: Fri 25 Nov 2022 04:39:52 +0000
ROA not before: Fri 25 Nov 2022 04:39:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8546 (0x2162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9DAB444781CDC7D3EDC7A0284EF5F7BC89263DD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:bc:46:ed:2f:07:07:2a:c7:08:9f:61:4a:
87:fa:07:29:09:d0:89:2d:0d:3d:74:17:31:0f:bc:
fd:b6:40:44:26:29:59:3f:39:1c:11:23:36:15:e4:
56:89:9d:af:bf:40:05:db:18:d9:e2:23:33:66:d2:
97:1b:a4:7f:e3:a3:13:cb:e7:0f:bc:2b:2f:65:4a:
c0:97:18:f9:af:d7:10:85:5e:d8:cf:51:5d:5c:ee:
d8:b9:62:4c:cd:f8:41:76:d9:71:b8:4f:79:a3:25:
5b:67:74:e1:0b:b0:8e:0d:66:47:33:30:f3:19:9f:
da:5b:db:98:89:05:f5:48:17:86:79:c5:4d:1e:28:
5e:0e:78:67:30:12:c1:ea:3d:d7:4c:88:39:52:b5:
9b:0f:8e:8d:36:4c:48:bd:7f:32:ef:e5:39:0a:a3:
89:72:75:05:3f:6d:ec:1b:a5:fd:d8:c9:68:73:b8:
e8:db:f8:b7:a8:5d:63:c5:d3:e8:ce:a8:5f:0a:ad:
33:64:4b:22:3e:4d:4a:bf:d0:b6:c7:10:a1:a4:d4:
bd:ee:05:ca:4a:97:16:ae:1d:85:79:ce:73:14:e5:
94:d1:2e:bf:8d:37:d2:12:79:89:8b:ec:0c:62:7b:
ce:5c:7d:07:15:c0:75:8c:e2:d2:9d:50:65:0b:b9:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AB:44:47:81:CD:C7:D3:ED:C7:A0:28:4E:F5:F7:BC:89:26:3D:D3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/natER4HNx9Ptx6AoTvX3vIkmPdM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.252.0/22
Signature Algorithm: sha256WithRSAEncryption
28:6a:f2:d9:b1:30:73:db:ec:5e:ed:f3:e9:f4:e1:8b:8f:00:
ee:1a:21:82:52:45:91:c6:11:3a:1f:93:46:07:26:15:72:d6:
ec:da:d7:a3:cc:f1:61:82:fc:c8:37:9c:f2:59:7c:0f:5d:d4:
6f:77:fa:9a:66:8c:bf:cf:50:6c:26:2a:d8:ab:da:55:5b:5e:
bc:60:e1:81:b4:38:a4:d8:73:2b:52:63:52:3b:79:71:aa:b5:
36:c3:0f:67:4b:39:14:f2:76:44:4f:94:fa:7f:0d:72:8d:b8:
24:4c:1c:60:46:1e:15:83:ff:ad:cd:bd:34:6a:d2:98:b9:04:
ac:8a:4c:4b:9b:1f:40:b4:7f:b4:6a:3e:66:62:ac:0b:b3:04:
64:d3:e9:15:99:2b:a4:22:bb:04:36:88:5e:8e:76:53:b0:f0:
c4:96:00:eb:95:fe:6a:8d:ff:54:f4:db:a1:84:77:05:64:82:
1b:b6:44:d8:1f:d3:08:6d:a2:e9:9b:d5:28:53:b0:d9:40:e5:
5e:f2:7e:41:45:7b:12:1b:82:34:a7:e7:aa:0d:e7:d2:ff:f9:
48:4b:0b:95:a7:fc:47:5d:6f:da:68:dc:16:ad:bc:9f:89:9b:
82:5c:e7:5c:bf:75:f4:d2:d6:8e:58:05:07:1b:bc:46:36:e5:
cd:ea:41:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org