Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xh0A9Olp1H3j_DnogRZZKZF5dcg.roa
File: xh0A9Olp1H3j_DnogRZZKZF5dcg.roa (raw, json)
Hash identifier: xMsCRoZ+PID3UgxoqhkUOgwSuGS5320GlYzrsO4obVw=
Subject key identifier: C6:1D:00:F4:E9:69:D4:7D:E3:FC:39:E8:81:16:59:29:91:79:75:C8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 210D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xh0A9Olp1H3j_DnogRZZKZF5dcg.roa
Signing time: Fri 25 Nov 2022 04:39:27 +0000
ROA not before: Fri 25 Nov 2022 04:39:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8461 (0x210d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C61D00F4E969D47DE3FC39E881165929917975C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:07:a4:cc:65:4d:54:89:f4:21:d5:b4:41:
47:0e:ac:8d:24:fc:b5:c1:9e:fa:55:c3:2c:91:60:
0a:f2:13:61:90:0c:85:53:f7:aa:2c:a7:1b:ed:9b:
b3:c6:ba:94:32:14:b8:ea:72:1f:b2:ea:bf:e5:f2:
76:d8:15:ab:e6:75:41:6d:dd:c4:15:ec:68:0c:33:
e9:c3:30:20:d9:fc:1c:09:88:ae:5a:cc:1e:8e:80:
b8:0d:7a:d0:c2:5f:8c:1c:ac:e9:04:88:d5:9c:f9:
9c:7d:bd:86:f0:2c:a9:40:f0:31:26:f3:0a:66:ad:
99:54:b4:1c:92:00:81:fa:53:60:ef:f8:73:33:18:
a4:6f:5a:fc:21:9c:49:d5:38:e2:92:a2:b3:e3:53:
6a:ad:55:3f:73:d8:d7:ed:70:38:b5:6c:88:2d:95:
be:83:de:77:15:a4:13:81:5d:97:73:2e:b8:e0:7d:
d7:e8:de:b1:2f:ec:8a:51:b5:bd:85:9e:a6:aa:af:
ab:6c:59:93:63:86:61:94:7d:5e:60:a9:05:cb:82:
43:66:fe:ad:97:d1:0c:75:85:ee:9b:68:28:25:8a:
ad:d9:68:80:c2:aa:df:e1:e7:97:ca:66:d0:fa:6c:
d0:7b:fe:5b:19:12:d0:c0:b1:e4:28:57:89:0d:d0:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1D:00:F4:E9:69:D4:7D:E3:FC:39:E8:81:16:59:29:91:79:75:C8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xh0A9Olp1H3j_DnogRZZKZF5dcg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.98.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ae:ce:63:5d:29:8c:55:1e:6b:35:b7:d0:73:24:a5:c1:68:
a2:ff:8d:0e:be:b5:e3:9b:70:57:4e:a5:1f:d9:56:e5:dc:8e:
42:bf:16:75:b1:12:66:3a:eb:f9:01:0d:63:f3:b7:d8:b7:65:
f2:f5:89:63:16:fd:ae:2c:41:fb:71:7a:26:a2:00:29:2b:65:
b5:96:8a:ab:62:01:83:22:74:48:8b:dd:0b:0e:61:0d:df:30:
b6:be:a3:8e:c6:26:44:55:54:39:62:94:0a:06:c2:8e:25:25:
52:5c:fb:8f:8f:16:d0:1f:89:97:d5:82:93:39:fd:fa:0f:31:
21:a7:4e:03:08:38:d0:b9:09:76:fe:fb:1a:3f:9e:be:b2:a4:
92:fd:30:22:cd:0f:c3:e1:f8:e4:46:9a:88:c0:29:e9:dd:9f:
5f:7f:ec:94:3a:c5:66:04:cd:8a:ae:71:c4:0a:19:22:38:f7:
3c:cd:23:92:d9:cf:6f:33:a5:5f:66:4b:0a:c4:7c:7c:26:f8:
1d:04:11:34:20:b2:08:f6:84:cf:c2:37:e9:7c:af:85:f2:61:
1c:93:4a:7e:51:7d:aa:5d:60:20:63:f7:2c:15:47:75:62:29:
5c:1d:0f:70:f4:58:87:17:44:94:95:9d:f3:55:2c:26:74:c6:
f5:5d:f1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org