Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xkESjFKU3334kCcQ8O0nGbG2ZqA.roa
File: xkESjFKU3334kCcQ8O0nGbG2ZqA.roa (raw, json)
Hash identifier: 9QGvS7gHNb7AKuEZ4IUEW7Uf9qwHudhNaGryK/oVYf4=
Subject key identifier: C6:41:12:8C:52:94:DF:7D:F8:90:27:10:F0:ED:27:19:B1:B6:66:A0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1F05
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xkESjFKU3334kCcQ8O0nGbG2ZqA.roa
Signing time: Fri 01 Jul 2022 02:03:51 +0000
ROA not before: Fri 01 Jul 2022 02:03:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.238.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7941 (0x1f05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Jul 1 02:03:51 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C641128C5294DF7DF8902710F0ED2719B1B666A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:8e:8c:6a:ba:a9:79:ee:63:92:5e:e6:7c:
6c:1f:97:3f:d4:33:2f:2c:38:a1:8e:7c:a2:a4:e1:
8c:71:3c:91:0c:36:3b:34:75:cc:1c:af:5c:ad:f7:
5d:80:a3:69:e9:58:b6:28:9f:a4:fb:cd:71:ef:a3:
67:22:20:83:eb:36:40:5c:b4:42:9a:a0:94:6e:d0:
c5:5a:56:44:11:f5:3e:e4:8c:57:50:e9:69:8e:8d:
a3:a5:3f:f4:07:1c:35:b0:5e:fb:bf:85:8e:f6:72:
59:7f:e5:d7:2a:90:cf:7f:16:76:89:51:77:d0:2d:
ab:eb:18:c1:e2:ea:c0:f1:50:e8:29:72:57:de:99:
8a:a0:95:27:7c:73:26:5d:66:ba:6e:16:fe:7c:48:
91:24:b7:00:9d:2f:07:4c:76:ba:5d:1a:a8:6a:45:
3d:9a:2a:f2:d7:d6:1a:88:24:54:72:a6:c1:79:4a:
ae:f7:0d:d8:23:b1:fa:c5:d7:b9:8c:01:0d:c6:1a:
c2:3e:d3:91:86:5a:69:a5:06:9a:6b:e8:37:41:aa:
8b:44:66:fc:97:ae:d2:9f:e5:e7:f3:f3:50:cb:55:
be:83:ff:f9:3e:47:ef:23:dd:80:27:aa:3e:e2:76:
b9:30:f3:1a:67:95:ef:49:e5:fa:e4:5d:59:62:eb:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:41:12:8C:52:94:DF:7D:F8:90:27:10:F0:ED:27:19:B1:B6:66:A0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xkESjFKU3334kCcQ8O0nGbG2ZqA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.238.0/23
Signature Algorithm: sha256WithRSAEncryption
24:10:2b:54:45:fb:10:ac:65:c1:4c:80:00:2d:87:6c:69:eb:
6d:14:04:c5:a9:1e:89:89:52:03:35:3e:83:ee:39:8a:1f:ac:
bd:66:8a:21:08:82:5c:7e:7e:82:7e:99:3e:5e:40:29:08:e2:
6b:fa:74:2e:ef:db:7e:65:54:37:a7:a1:ed:33:2a:fb:60:c5:
82:d0:7a:55:98:ee:21:0b:94:6e:be:7d:58:16:76:33:e2:03:
1d:3d:ff:47:0c:c8:b6:38:12:95:39:66:ad:d2:37:81:82:24:
00:f3:33:e1:0a:f3:d0:69:de:49:a1:e6:c8:5b:64:92:8f:93:
f6:28:cf:21:ec:af:f9:32:84:a2:52:0e:28:28:4b:70:09:b3:
e8:51:81:46:db:7c:bf:b5:3c:a4:f6:61:3d:14:8f:c6:2e:4d:
a1:b6:e9:94:45:8d:0d:1a:7a:04:90:90:f3:cf:f0:d3:ff:67:
8b:d7:86:60:a5:7d:67:e9:32:11:96:08:0d:7f:5c:2c:50:68:
8c:b4:7f:49:43:79:8a:a3:f7:3a:7b:41:ed:7d:f3:33:91:c4:
ba:71:84:93:60:13:a5:30:a9:c7:2c:6f:66:8b:1d:c5:e0:22:
64:5e:40:9a:28:2f:6d:43:cd:42:0f:1c:ea:1e:6f:4f:51:e8:
e8:5b:fe:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:08 2025 by rpki-client