Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xql2CTofgndVt4Bse2AxS2-gNuM.roa
File: xql2CTofgndVt4Bse2AxS2-gNuM.roa (raw, json)
Hash identifier: 4WAfK+2ARkOERW36+HpPCe/EQ8FV+b5gOTmIe490CqE=
Subject key identifier: C6:A9:76:09:3A:1F:82:77:55:B7:80:6C:7B:60:31:4B:6F:A0:36:E3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FAC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xql2CTofgndVt4Bse2AxS2-gNuM.roa
Signing time: Wed 21 Sep 2022 09:41:22 +0000
ROA not before: Wed 21 Sep 2022 09:41:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8108 (0x1fac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 21 09:41:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C6A976093A1F827755B7806C7B60314B6FA036E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:90:c2:2b:f0:9a:1c:70:d3:4a:c0:39:79:
65:78:75:ef:a4:01:99:a9:3a:3f:06:8d:6f:d7:59:
92:fa:a3:e5:89:9a:58:11:a5:2d:ef:4d:c6:5b:ee:
a7:b2:0e:4a:d8:75:81:dd:50:98:2e:21:96:ae:dd:
11:3c:e2:d5:3e:7d:15:e4:52:f2:7c:11:73:b0:48:
1b:e3:be:b5:2b:f3:0d:ee:2d:75:30:ec:cd:0d:7d:
f7:b8:28:f3:a2:34:d9:54:70:2d:db:ed:b1:2f:c4:
2f:fb:e5:a4:93:5b:e1:a2:96:9f:48:46:77:40:6d:
cd:10:a6:c2:6b:c3:60:b4:ed:74:f9:cb:3a:a7:35:
d8:7b:e0:37:21:1b:cc:75:08:ee:60:cb:38:6c:9d:
f5:f0:49:37:00:9a:c0:ab:d6:f0:58:ed:67:04:c9:
91:07:b2:9c:1e:db:15:c7:fb:42:7c:b8:c8:85:f1:
f7:01:d0:9c:22:13:08:a5:91:0e:15:11:7d:77:62:
bf:69:9d:3a:75:19:e1:fb:d9:51:c8:09:bf:3f:f9:
8d:ca:2c:70:9a:74:12:94:63:fc:ac:65:c2:1a:9e:
87:c0:69:a0:e9:30:0a:aa:6d:8f:54:c5:8e:3e:5d:
47:7b:1c:4f:4b:8d:db:4c:23:d4:8f:bc:41:e7:fe:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A9:76:09:3A:1F:82:77:55:B7:80:6C:7B:60:31:4B:6F:A0:36:E3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xql2CTofgndVt4Bse2AxS2-gNuM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.180.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:bb:1c:1d:e0:a0:86:25:e1:2e:c2:2e:66:4c:4a:bc:b5:eb:
dd:bb:90:65:a2:91:ce:17:2c:62:87:0a:0b:cd:4d:f3:c1:d1:
3b:56:e8:24:93:3a:e6:48:94:95:2d:93:c0:c1:b4:34:6e:62:
01:e8:d0:8c:58:f6:7f:08:93:45:7b:17:a5:de:58:19:bd:73:
0b:ea:a3:24:2a:e0:de:62:23:22:f2:cb:7d:09:1c:ca:62:dc:
6d:32:9b:cb:2f:f2:88:14:83:96:28:05:3f:c5:ed:cc:8e:cd:
20:d3:a9:56:48:28:eb:3f:f5:12:af:dd:85:ad:53:cb:2a:ba:
93:dc:4e:58:5e:1e:0a:f5:c5:fc:71:00:65:b1:76:5d:89:98:
22:37:5b:91:bd:1c:60:59:1d:2d:b7:e2:55:6e:cf:dd:bd:f1:
0b:93:05:bd:61:53:54:33:8e:35:f6:b8:22:7d:d0:6c:a0:c6:
3e:94:81:92:d0:67:7b:76:ab:e2:76:f4:2e:88:51:01:95:61:
5e:f3:31:c3:bd:82:75:dd:a9:84:d1:0e:e4:2a:bc:bc:0d:27:
d1:b4:c9:18:66:a8:65:a3:37:ac:9b:ce:ea:80:dd:b0:44:67:
c7:86:d1:8f:ea:ff:0f:fe:0a:0d:d4:ad:39:20:a1:14:cf:fb:
39:f1:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org