Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rl8oklDFZedOya426PuZlwofKsA.roa
File: rl8oklDFZedOya426PuZlwofKsA.roa (raw, json)
Hash identifier: 2AolJEPZHpWXaxaoTsxPSlMXFcRwMgFNDs31bT3oATo=
Subject key identifier: AE:5F:28:92:50:C5:65:E7:4E:C9:AE:36:E8:FB:99:97:0A:1F:2A:C0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2334
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rl8oklDFZedOya426PuZlwofKsA.roa
Signing time: Fri 25 Nov 2022 04:42:12 +0000
ROA not before: Fri 25 Nov 2022 04:42:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.60.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9012 (0x2334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AE5F289250C565E74EC9AE36E8FB99970A1F2AC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:fe:97:80:62:ee:ef:00:10:73:00:af:32:
d2:10:40:64:a7:d9:69:dc:12:e4:c3:c9:5e:0b:7a:
9e:ab:0e:d9:4d:2e:49:81:04:c4:b4:da:b3:7e:b5:
bf:1d:52:c3:54:14:a3:96:00:f0:37:41:06:a7:d4:
2e:e8:7d:20:f6:70:82:10:c3:e7:85:58:29:88:98:
e5:09:9c:d0:1f:19:a9:36:b8:b4:b5:1d:cb:9e:4a:
c3:36:ee:5a:6e:b3:ed:cc:82:06:6a:8e:28:8f:66:
0c:61:52:6a:b6:b1:b1:28:26:57:f0:02:8c:33:9a:
61:3e:9c:c2:3b:ac:10:b7:06:3d:8d:f3:5c:97:72:
94:0f:ff:bc:88:19:90:e8:25:b0:48:e9:ae:c1:09:
4f:ec:e2:7f:48:d8:02:47:72:0f:a9:9e:04:dd:c8:
57:c3:4f:ee:7a:d5:c3:8e:53:27:99:e8:35:df:bb:
96:91:67:af:8c:f7:24:cb:01:44:5e:cc:d8:e5:da:
cc:20:a8:92:fe:d5:a8:dd:dd:9f:cd:68:f0:25:96:
93:3f:0c:5b:1a:d0:86:0d:b9:36:f5:7e:cb:97:72:
9b:de:f4:52:39:14:9f:a7:bc:2d:98:1c:9d:57:cc:
57:05:da:db:97:79:fd:d9:dd:4e:8d:41:a4:91:c8:
be:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5F:28:92:50:C5:65:E7:4E:C9:AE:36:E8:FB:99:97:0A:1F:2A:C0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rl8oklDFZedOya426PuZlwofKsA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.60.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:94:05:dc:12:ad:09:0d:ef:e7:ef:dc:bf:4d:26:14:74:9f:
7b:96:d6:73:1d:f2:96:08:89:75:2a:23:95:fb:a9:d1:43:7c:
b8:ff:de:72:ff:13:1e:1a:c3:4c:bb:4c:3d:af:9a:a8:be:26:
be:86:3c:2f:ca:89:d1:64:a1:7a:e8:03:66:31:c6:11:a3:2c:
1c:07:f9:dc:3c:16:b3:de:76:f4:6f:4d:08:40:98:89:02:79:
c9:ea:fc:f8:2b:78:2e:c6:d9:83:93:4d:d5:76:f2:be:93:42:
ef:35:e6:e3:6e:fe:7c:d3:09:40:3a:7d:04:d9:40:a7:7e:a5:
bc:d7:93:ac:6c:46:e7:eb:c3:21:23:a2:49:d8:2f:4c:50:5b:
e4:95:0c:7c:16:38:8e:03:72:18:7f:0c:14:86:c1:9b:49:f5:
db:cb:5c:78:cb:b3:92:64:45:f0:bf:cf:47:01:51:2c:eb:f6:
c4:d4:f6:1d:d6:16:7e:c9:68:9c:1b:9f:35:54:08:6b:45:b7:
01:e1:05:5a:7a:ff:93:1d:ea:53:83:93:ea:a6:b1:21:1d:fa:
9e:59:43:81:61:c2:c6:82:b0:f6:70:fd:7f:a1:92:31:c8:f0:
5c:65:9d:38:78:de:a0:ea:5e:9e:b7:f9:25:d5:71:b9:74:40:
d5:8c:8d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org