Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rz1WGAT50alw0x_o229heovdrdI.roa
File: rz1WGAT50alw0x_o229heovdrdI.roa (raw, json)
Hash identifier: EJQB5TE8AHOw6aT2DdnXUyYq/ITQwgz9YdqnKjy+dlM=
Subject key identifier: AF:3D:56:18:04:F9:D1:A9:70:D3:1F:E8:DB:6F:61:7A:8B:DD:AD:D2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2104
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rz1WGAT50alw0x_o229heovdrdI.roa
Signing time: Fri 25 Nov 2022 04:39:25 +0000
ROA not before: Fri 25 Nov 2022 04:39:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8452 (0x2104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AF3D561804F9D1A970D31FE8DB6F617A8BDDADD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:66:d6:ae:06:17:5f:b9:29:12:44:f9:c6:
8c:54:8e:cd:4a:74:42:2e:e2:5a:b4:ba:b8:a3:d5:
35:d2:8c:23:c4:e1:0a:89:2c:c5:b5:93:e0:80:eb:
a8:3a:4a:95:77:1a:d2:57:b0:4b:b5:ab:5a:15:90:
87:0e:bb:10:4a:70:94:be:a3:fd:28:6e:b7:78:2c:
3e:11:b0:a9:b8:c6:fa:c8:d8:88:21:cc:ee:dd:f1:
49:ef:0a:50:a2:41:97:1e:08:70:b5:49:29:a2:93:
5a:78:43:35:4a:cc:44:ed:01:3a:de:fa:66:e7:b6:
39:1d:e7:09:c8:ee:80:2c:d0:49:30:a0:91:03:cb:
3a:18:f0:2f:7b:55:3f:23:33:ba:bb:ca:3b:3c:d3:
dd:00:c3:6b:a1:22:1e:31:7e:15:df:61:df:80:d5:
63:b6:a9:8c:6b:5f:c9:de:32:ce:04:af:ea:b4:a1:
0f:d8:a8:77:8e:81:93:bf:bf:96:98:27:dc:d2:8b:
5d:53:45:77:c5:fb:04:36:58:e0:9f:ff:15:6f:1e:
a4:a3:6f:7d:e3:68:3d:74:05:de:12:49:e9:36:99:
01:df:aa:2e:fd:3e:f1:53:7f:f3:08:47:de:0f:fc:
1d:b2:cf:ad:0f:c4:ad:52:36:e0:5c:92:b7:2e:78:
35:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3D:56:18:04:F9:D1:A9:70:D3:1F:E8:DB:6F:61:7A:8B:DD:AD:D2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rz1WGAT50alw0x_o229heovdrdI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.128.0/21
Signature Algorithm: sha256WithRSAEncryption
01:64:53:4e:f3:d0:22:af:e4:fb:c6:95:0a:b9:6c:89:88:19:
8c:af:46:77:0a:94:2c:12:8b:95:88:c3:43:3b:dd:cf:46:fb:
e8:40:c6:df:d3:f1:34:45:11:55:9a:15:b2:12:7a:91:b5:5c:
42:e1:74:92:f3:59:05:a1:30:43:06:57:d3:47:35:b5:4c:82:
ea:c4:f1:e5:be:e4:5a:ed:01:bd:ca:14:37:51:42:be:8a:b6:
f8:bc:32:74:ff:5f:dc:b4:de:a5:d5:a7:77:4f:d1:b3:b0:52:
04:84:55:dc:a7:b4:e4:b5:7f:24:79:3b:57:d2:c7:f8:8f:9c:
2a:f3:31:93:8d:85:ba:16:ae:e0:bf:f1:5f:8c:95:7e:9d:d1:
e5:a5:37:ee:53:66:6e:9d:7c:91:b3:f3:00:d5:6b:fd:bf:b6:
f5:8a:61:26:5c:db:c3:25:4f:a4:28:d2:d3:28:ec:4e:b9:bc:
31:24:b4:b3:f9:1d:2a:20:5f:15:13:dc:d0:30:39:93:fc:89:
5d:9c:9b:82:5b:e7:61:e4:e9:3f:29:d0:84:3d:fc:37:21:bd:
4f:c7:7b:4e:e6:6b:1c:ba:0c:23:81:80:cf:13:fd:3f:e7:b2:
7d:d0:95:04:1f:ca:27:b6:0f:71:e2:d2:66:6c:f9:fc:aa:a0:
73:f0:15:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org