Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pu9Hgh1vuLde2CHYje9MiySDa0U.roa
File: pu9Hgh1vuLde2CHYje9MiySDa0U.roa (raw, json)
Hash identifier: Jlxtb6vF52ZxFFE2ZDAHBVJz6wXxnOIgU882zKKvKsc=
Subject key identifier: A6:EF:47:82:1D:6F:B8:B7:5E:D8:21:D8:8D:EF:4C:8B:24:83:6B:45
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22CD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pu9Hgh1vuLde2CHYje9MiySDa0U.roa
Signing time: Fri 25 Nov 2022 04:41:40 +0000
ROA not before: Fri 25 Nov 2022 04:41:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8909 (0x22cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A6EF47821D6FB8B75ED821D88DEF4C8B24836B45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:39:bd:19:22:0b:14:32:a9:ff:ee:88:fc:
a1:da:eb:52:66:ba:4d:1f:e5:a2:c2:ce:26:22:12:
de:ca:63:27:72:5c:dd:90:d7:eb:09:57:c4:de:25:
78:b0:f6:07:98:5b:11:c3:4b:21:a6:62:74:c3:8a:
48:cf:be:57:71:cd:83:40:11:9d:1c:89:46:0c:9c:
5b:a7:41:0f:b6:26:37:8c:d5:6c:d3:0f:8e:25:e6:
97:e3:f5:91:bf:d9:66:0a:6b:d7:d4:c1:b6:c5:0b:
d0:8e:2f:93:02:f4:fc:49:c9:11:e0:48:c0:79:d0:
33:3d:d5:a0:44:5a:7b:3b:cd:25:bc:6e:8e:0e:7e:
ff:cb:97:d5:04:be:e3:1b:33:06:82:6c:2b:84:c5:
c0:81:74:ff:b5:ff:cb:be:3b:04:22:9b:b9:58:d5:
cc:ec:c0:25:e4:c2:12:59:3b:e5:cb:e3:d4:73:3b:
c2:db:83:dd:f2:4f:80:1f:e1:fb:08:9a:fd:bf:13:
72:52:1c:db:be:0d:ea:12:d8:11:21:ca:be:0a:7f:
04:12:5f:29:36:97:4a:1e:99:eb:e8:bc:47:e2:ad:
c6:6c:9a:3b:f3:28:26:89:df:27:f7:84:d4:00:1d:
29:fc:44:d4:47:1d:a8:a5:77:f4:b1:64:f5:1e:bf:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EF:47:82:1D:6F:B8:B7:5E:D8:21:D8:8D:EF:4C:8B:24:83:6B:45
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pu9Hgh1vuLde2CHYje9MiySDa0U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.135.0/24
Signature Algorithm: sha256WithRSAEncryption
03:7a:ce:f9:70:17:4b:29:40:d4:58:3c:61:60:9f:4d:66:44:
57:4c:a5:4d:08:17:22:f2:30:b0:cd:3a:0a:b7:20:14:d2:ad:
82:e0:b3:32:27:30:5f:16:cf:fb:62:ba:9d:54:3e:b9:22:78:
01:9f:a7:37:9f:da:a3:b7:3a:7c:92:71:83:48:72:75:46:e2:
f3:ed:90:80:2d:c0:c0:a1:1d:f2:11:9e:20:cf:b8:81:dc:8f:
9f:be:76:d4:80:6d:96:56:aa:bd:de:6f:df:5c:99:62:0d:53:
b5:28:86:34:bf:69:44:9f:34:84:ae:a0:2a:8a:fc:dc:83:d3:
83:56:e0:b9:99:f0:7b:95:33:c5:d6:99:4b:50:8e:a4:f3:79:
73:93:b4:76:d8:90:18:2a:b2:dc:97:e3:75:d2:eb:47:e5:37:
f3:39:ef:b8:c0:70:be:67:51:f8:ad:ca:0f:22:0f:be:36:e7:
37:ba:c0:e3:f2:cb:ee:55:9d:44:de:f7:dc:24:5d:3e:1f:8d:
af:cb:0d:29:3c:7f:ad:92:3a:91:0e:4c:f9:f0:f2:cc:57:9b:
56:81:97:aa:91:f2:78:69:2b:d8:71:14:4a:f1:1c:32:ea:74:
2e:3f:e5:fa:21:97:8e:7a:6b:07:ed:c9:33:54:cb:17:ae:77:
ce:8a:d6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org