Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-kNOa3_KFTVqc2S5YkvivdYWuBA.roa
File: -kNOa3_KFTVqc2S5YkvivdYWuBA.roa (raw, json)
Hash identifier: rQPqDdRdNxMGU0VPc3T4fkgCv95nAW3TccF81754Wbk=
Subject key identifier: FA:43:4E:6B:7F:CA:15:35:6A:73:64:B9:62:4B:E2:BD:D6:16:B8:10
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 13BF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-kNOa3_KFTVqc2S5YkvivdYWuBA.roa
Signing time: Sun 07 Feb 2021 11:56:03 +0000
ROA not before: Sun 07 Feb 2021 11:56:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5055 (0x13bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:56:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FA434E6B7FCA15356A7364B9624BE2BDD616B810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:4d:a7:94:de:6a:57:fb:07:07:06:16:1f:
e2:91:8c:5f:7e:71:13:2e:89:73:12:66:4e:4e:62:
e5:bb:79:2f:ca:66:2a:45:60:32:a8:fb:4a:03:99:
07:af:0a:cb:99:74:c6:21:4e:e7:dd:56:98:7c:8b:
1f:2b:a0:5d:5d:45:45:ad:b0:65:b6:55:8c:98:bc:
98:7d:e1:76:dd:8c:e7:48:68:42:5c:0d:67:81:61:
18:37:66:96:4a:e5:11:41:6b:6c:1b:94:da:20:dd:
8e:aa:8f:ca:c4:e6:09:63:c5:f3:2f:1b:22:18:f9:
6f:b7:6c:e5:b4:7c:d9:ce:e5:64:06:46:b7:e4:26:
e6:08:24:5a:02:ea:92:ca:89:8c:75:cd:e5:4c:3a:
18:4b:eb:2c:65:62:eb:aa:b1:2d:f7:d0:f4:33:6d:
37:0c:98:75:cb:00:4b:89:58:03:64:75:f7:6a:8e:
c7:1d:18:79:87:18:5d:c0:17:3a:41:f4:7b:15:d3:
c6:b9:c0:8e:74:a0:59:56:2f:9d:62:e9:19:b5:0e:
3a:c4:9c:24:a5:7b:c2:3f:e2:8a:a6:9b:c0:38:c2:
7e:66:31:c3:1f:4c:0b:da:fc:9b:c1:3e:a3:66:4e:
25:68:89:6e:ea:97:b2:79:00:ca:34:80:f6:a8:a8:
14:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:43:4E:6B:7F:CA:15:35:6A:73:64:B9:62:4B:E2:BD:D6:16:B8:10
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-kNOa3_KFTVqc2S5YkvivdYWuBA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.100.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:0e:c5:a4:88:5e:b9:a7:1b:bb:54:c9:fe:d5:6f:28:18:b5:
16:40:43:ee:ec:2e:e0:9a:b1:3d:26:3e:bd:7d:cf:1f:c8:55:
ab:b2:ab:6a:6a:b1:79:91:17:9c:e0:37:e6:6e:ab:ea:11:7a:
fc:35:fc:d9:e9:d5:77:50:2d:3b:c5:6d:1e:35:f0:29:28:0b:
30:ea:78:66:c0:72:69:32:3e:5f:83:8e:86:be:f2:13:9f:41:
73:dd:f2:a4:d2:10:ca:fe:17:6a:94:52:55:00:f2:0d:ad:ce:
37:4a:d3:f7:46:96:9a:53:5d:ae:3e:31:59:66:43:03:d1:c9:
21:d5:af:3d:2f:3b:7b:11:b0:1f:b3:fb:67:45:99:98:93:3d:
0c:a6:c9:74:58:e7:5d:f9:47:2c:1c:6e:46:8b:7a:54:3a:ee:
c9:1a:1c:2b:85:41:b6:16:72:6b:e2:14:f8:48:64:99:46:67:
0d:8c:58:29:86:63:78:6b:70:43:e8:58:c5:35:e4:71:c8:c4:
dc:c5:7e:bf:85:71:c7:48:22:5e:01:4c:a4:8d:99:a8:e5:e6:
d9:35:97:9b:6b:c4:f5:7e:d4:14:c2:6f:36:19:5a:b4:79:57:
7a:d4:56:f4:26:36:cf:69:7e:21:f7:9d:f2:cf:e7:50:c7:76:
1a:95:21:7a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE78wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU2MDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZBNDM0RTZCN0ZDQTE1
MzU2QTczNjRCOTYyNEJFMkJERDYxNkI4MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+vU2nlN5qV/sHBwYWH+KRjF9+cRMuiXMSZk5OYuW7eS/KZipF
YDKo+0oDmQevCsuZdMYhTufdVph8ix8roF1dRUWtsGW2VYyYvJh94XbdjOdIaEJc
DWeBYRg3ZpZK5RFBa2wblNog3Y6qj8rE5gljxfMvGyIY+W+3bOW0fNnO5WQGRrfk
JuYIJFoC6pLKiYx1zeVMOhhL6yxlYuuqsS330PQzbTcMmHXLAEuJWANkdfdqjscd
GHmHGF3AFzpB9HsV08a5wI50oFlWL51i6Rm1DjrEnCSle8I/4oqmm8A4wn5mMcMf
TAva/JvBPqNmTiVoiW7ql7J5AMo0gPaoqBRJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+kNOa3/KFTVqc2S5YkvivdYWuBAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1rTk9hM19LRlRWcWMyUzVZ
a3ZpdmRZV3VCQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AWQwDQYJKoZIhvcNAQELBQADggEBALcOxaSIXrmnG7tUyf7VbygYtRZAQ+7sLuCa
sT0mPr19zx/IVauyq2pqsXmRF5zgN+Zuq+oRevw1/Nnp1XdQLTvFbR418CkoCzDq
eGbAcmkyPl+Djoa+8hOfQXPd8qTSEMr+F2qUUlUA8g2tzjdK0/dGlppTXa4+MVlm
QwPRySHVrz0vO3sRsB+z+2dFmZiTPQymyXRY5135RywcbkaLelQ67skaHCuFQbYW
cmviFPhIZJlGZw2MWCmGY3hrcEPoWMU15HHIxNzFfr+FccdIIl4BTKSNmajl5tk1
l5trxPV+1BTCbzYZWrR5V3rUVvQmNs9pfiH3nfLP51DHdhqVIXo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:35 2025 by rpki-client