Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zYElsCsTy2ZLITresUBvboPN5CA.roa
File: zYElsCsTy2ZLITresUBvboPN5CA.roa (raw, json)
Hash identifier: CLhn1ctwcrqgagf21t4w/CoDMqghlNqtruhiH9Xv0/Y=
Subject key identifier: CD:81:25:B0:2B:13:CB:66:4B:21:3A:DE:B1:40:6F:6E:83:CD:E4:20
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AC0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zYElsCsTy2ZLITresUBvboPN5CA.roa
Signing time: Wed 29 Sep 2021 02:45:43 +0000
ROA not before: Wed 29 Sep 2021 02:45:43 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6848 (0x1ac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:43 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=CD8125B02B13CB664B213ADEB1406F6E83CDE420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:ae:68:70:cb:27:36:c9:a0:57:f8:a7:bf:
33:37:c5:70:63:9a:34:f7:a2:89:69:43:11:74:ea:
71:58:66:57:92:76:f3:54:df:3a:f7:31:eb:f5:53:
e6:88:9b:7e:a4:be:be:62:b9:c0:93:3b:d8:40:34:
f2:a9:5d:83:cc:20:dc:b7:87:28:ab:7d:a1:c3:66:
fa:ee:e2:9a:e1:e1:96:eb:32:3a:d3:1d:5e:99:40:
cd:a9:52:30:cb:d6:17:2b:1d:05:f5:9f:fa:7a:6a:
ed:fb:a0:ff:0a:e0:c1:d3:b7:0d:40:31:c4:ed:59:
66:0c:30:57:95:89:6f:dd:ae:c6:8f:45:33:7d:53:
ef:1b:e1:17:dd:7f:8d:75:14:c0:ff:57:d9:14:19:
da:5d:9a:f3:cf:63:99:e4:71:69:7f:9a:a6:a4:f4:
31:ea:9f:11:62:fa:6d:e6:b1:04:5f:01:63:d9:9a:
01:fe:c5:39:90:5f:20:be:3a:88:46:f3:f8:8d:e8:
d8:ba:e9:3c:71:14:58:97:63:04:4e:5c:3c:13:5c:
b5:bc:46:6e:67:c0:2e:29:20:f3:59:a7:d4:2d:7b:
50:05:89:02:d4:e2:e5:ee:61:92:f0:a6:5d:0a:7a:
ee:72:65:c0:dd:4a:dc:91:fb:22:20:65:ce:01:f0:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:81:25:B0:2B:13:CB:66:4B:21:3A:DE:B1:40:6F:6E:83:CD:E4:20
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zYElsCsTy2ZLITresUBvboPN5CA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.170.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a7:d0:a6:67:b2:8a:22:df:ef:0c:5f:6c:e2:75:11:90:1f:
5f:05:cb:63:b2:26:06:99:90:ad:b2:37:32:05:6b:6b:6d:0d:
12:60:10:3f:94:c5:4c:36:bf:41:e0:2a:e9:87:f3:eb:d1:74:
11:18:fc:70:bc:2b:72:04:89:d7:04:f3:d2:71:46:9b:d6:51:
86:76:02:f6:16:27:aa:2a:c1:55:c7:72:d7:0f:a0:85:d3:35:
dc:2e:35:ca:f9:99:da:45:eb:38:af:f9:27:e4:b8:40:5c:14:
1b:25:e5:eb:17:0c:f8:a8:3c:dc:e3:a2:13:ae:27:4a:b9:1c:
98:20:cc:91:9d:4d:fb:6d:b8:55:0a:b6:4f:bd:4d:98:a8:99:
56:d7:81:93:9b:dc:63:00:63:e2:ea:cf:37:43:76:2a:63:3e:
c4:6b:9c:67:56:48:05:a0:a3:a7:c2:34:2c:10:44:2f:f3:54:
8b:e9:1b:45:6c:94:9f:cb:74:42:df:fd:46:a3:66:7a:41:a9:
be:ee:57:dd:94:8f:d1:0f:ab:82:fc:4a:1c:fb:61:e1:67:c4:
3c:77:f1:9f:3f:66:d8:a5:e0:6d:55:71:17:67:19:53:43:b3:
3e:52:4c:58:58:5e:1f:73:16:46:dc:6c:a7:d5:e7:bf:5c:9c:
78:d5:16:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org