Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t1OF9Y8YsxqGaOFyLO-eqWp7TW0.roa
File: t1OF9Y8YsxqGaOFyLO-eqWp7TW0.roa (raw, json)
Hash identifier: z3zBMZVk5hIQYutSFhAgrujRnbq9xdW2kEl5Gajne1M=
Subject key identifier: B7:53:85:F5:8F:18:B3:1A:86:68:E1:72:2C:EF:9E:A9:6A:7B:4D:6D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2357
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t1OF9Y8YsxqGaOFyLO-eqWp7TW0.roa
Signing time: Fri 25 Nov 2022 04:43:27 +0000
ROA not before: Fri 25 Nov 2022 04:43:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.146.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9047 (0x2357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:43:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B75385F58F18B31A8668E1722CEF9EA96A7B4D6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8e:9e:10:04:36:5f:3f:41:52:31:21:28:08:
09:ae:05:97:44:bc:b4:48:5f:06:1a:78:18:be:ce:
28:3e:a6:c7:80:b8:cb:85:1d:2a:3f:2d:d9:f6:ca:
16:eb:54:80:b5:03:41:47:38:23:87:a9:65:61:8c:
55:25:cf:9d:ad:bf:d7:22:48:58:af:23:cc:82:e5:
17:3e:8a:83:42:99:d8:65:f5:13:de:43:06:8d:1f:
c9:ee:96:78:4e:10:45:6e:91:87:cd:86:73:f7:e1:
f8:5e:7d:28:31:57:08:0a:19:9b:e7:1b:c0:9f:2a:
98:32:01:db:a4:5a:08:04:b9:ab:56:53:7e:68:ce:
bd:c9:94:a1:fe:3f:61:6c:26:d0:91:37:bb:c0:ec:
e2:31:71:3a:be:7b:9e:69:21:10:3b:f4:4c:c4:53:
23:8d:73:59:3c:9b:1e:10:72:a2:53:d4:a1:b7:cf:
72:ef:0d:91:d6:fa:05:ed:4e:f8:b4:80:56:67:5e:
ac:dd:ea:31:8b:18:72:be:13:b0:18:7c:b9:05:41:
ad:fe:8d:8d:a0:1f:46:69:17:7e:a4:01:cd:8c:91:
61:1e:7c:ed:6f:ef:f5:a8:c4:af:49:a3:aa:e3:a4:
1d:65:9d:79:eb:d0:45:04:55:1a:19:e9:29:ef:de:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:53:85:F5:8F:18:B3:1A:86:68:E1:72:2C:EF:9E:A9:6A:7B:4D:6D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t1OF9Y8YsxqGaOFyLO-eqWp7TW0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.146.0/23
Signature Algorithm: sha256WithRSAEncryption
64:0c:10:78:e4:d4:43:dd:b0:af:0e:44:e9:d8:ec:24:84:b8:
37:a0:66:e8:5e:0a:6b:ad:76:92:aa:60:4f:06:eb:5d:d0:5f:
c6:7e:53:33:b9:3a:0b:3a:04:12:8f:2a:2a:ff:a2:9d:8f:f7:
85:22:11:0f:4c:7a:89:19:7f:60:4f:0f:6a:ac:f5:8d:f0:91:
78:79:7e:8b:5c:78:9a:93:87:5b:5f:6c:e4:17:06:81:84:d0:
1e:6b:81:16:c3:08:fd:75:a6:7e:34:20:d0:53:bb:d6:4f:1b:
37:7b:bb:f0:22:79:c9:65:b2:7c:ac:e3:74:1d:5a:f7:e7:27:
54:5d:a2:66:94:8a:19:17:b2:fa:3d:30:11:c0:9f:aa:f6:58:
0e:e0:5e:d9:3b:8f:51:e3:1b:6f:c1:fd:59:91:75:78:ab:19:
1c:ef:97:10:2a:bd:1d:f4:ff:37:62:8d:3c:43:64:97:45:58:
00:1b:68:a5:f1:14:9e:07:4c:8d:c6:b0:8c:e5:68:80:29:73:
9f:40:32:df:6e:83:86:13:ee:f5:c0:ec:85:1d:1b:30:7d:48:
e1:fd:69:35:13:78:d2:0e:fb:df:40:af:98:3b:ee:c4:c7:8a:
d8:8d:7c:71:13:6d:b7:fd:ab:d0:e1:5a:ae:10:cf:f2:1e:07:
40:7a:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org