Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1byfclwJpz0jK-GsiyRtGLiWDew.roa
File: 1byfclwJpz0jK-GsiyRtGLiWDew.roa (raw, json)
Hash identifier: 20tcnwb82DPeDPhLk6FiowXlmuExFCZhMC847HPuRFg=
Subject key identifier: D5:BC:9F:72:5C:09:A7:3D:23:2B:E1:AC:8B:24:6D:18:B8:96:0D:EC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 174D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1byfclwJpz0jK-GsiyRtGLiWDew.roa
Signing time: Sun 07 Feb 2021 12:18:11 +0000
ROA not before: Sun 07 Feb 2021 12:18:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5965 (0x174d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:18:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D5BC9F725C09A73D232BE1AC8B246D18B8960DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:32:f6:60:19:03:13:05:6e:89:ed:20:00:
53:c6:90:b6:68:c5:7a:8c:e1:67:96:df:f8:d8:72:
28:19:d1:c0:ec:66:05:f1:1b:57:1b:6a:95:19:6e:
1f:a3:df:e2:35:2c:f0:53:d0:2e:f5:9a:d6:39:8c:
fc:a9:82:5e:a6:23:e3:f7:56:5c:1a:e9:11:84:b6:
26:97:07:cc:38:da:90:31:59:ed:4c:97:45:67:93:
62:4a:85:9b:0e:f2:ef:a9:98:0c:80:d1:95:ea:8f:
aa:d4:53:c3:9c:c1:e3:7f:3b:b3:24:a1:a0:28:4c:
f3:30:fa:0f:15:a4:e7:37:4b:13:fe:22:03:6f:ca:
20:a3:e1:db:95:54:f0:2e:5e:4c:bf:11:5f:be:77:
e9:fd:08:a2:a7:e9:01:71:0c:a7:58:d6:a5:85:5a:
bf:3e:c0:b3:8a:aa:bd:45:5f:81:16:0c:2e:20:e0:
d1:2b:c8:cf:ea:ce:eb:60:6a:4b:65:7d:4b:51:d8:
e5:3f:78:6f:11:96:62:d2:98:57:a9:48:10:38:7f:
67:c2:2d:c9:5d:d4:4e:c7:00:2a:14:ff:69:f4:37:
ec:d9:b9:dc:c2:53:0d:a1:03:5d:af:2a:e9:91:27:
7e:e3:9f:f6:c6:71:85:08:9c:d9:cc:77:19:af:74:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BC:9F:72:5C:09:A7:3D:23:2B:E1:AC:8B:24:6D:18:B8:96:0D:EC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1byfclwJpz0jK-GsiyRtGLiWDew.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.20.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:9d:15:69:ca:7e:e0:30:bd:f2:ed:98:9c:52:ea:65:a6:8e:
06:78:e5:0e:02:7f:e2:4f:4f:37:c0:0f:f3:5e:71:68:a6:71:
ab:b0:a1:5b:bb:41:b8:94:01:f2:87:bb:2b:7a:09:41:8b:e9:
a5:9c:fe:59:a4:d7:d6:df:01:59:60:ec:8e:ec:6b:3e:8a:2b:
0d:f0:87:bc:67:93:69:bb:7a:2a:e0:96:05:87:8f:92:f5:58:
86:15:d1:cf:d3:96:be:27:fd:05:79:14:2b:17:90:3d:5f:a0:
a0:5c:fe:5f:67:02:81:32:3c:b1:bf:c1:df:ed:7f:91:d1:3b:
c3:e9:4b:7a:de:df:e8:f0:1c:72:1d:36:b2:80:a2:ae:dd:cf:
c2:ca:13:8a:cb:9c:7f:e0:32:8a:42:67:41:21:bc:bb:4f:98:
e3:60:56:ab:bc:75:98:c1:17:14:cc:11:4c:d5:a7:4c:3a:58:
a1:e2:1b:6d:83:44:e8:d0:01:9b:78:2b:b7:81:7f:0b:47:74:
7e:ef:03:a5:93:17:da:1d:28:cb:ed:8f:2f:e9:1d:eb:13:0d:
6e:56:3b:9c:7f:4d:69:9d:ef:55:0a:c2:c0:49:b5:f5:e0:df:
83:7c:45:30:07:d7:74:0a:30:98:f6:4d:01:d0:9f:6a:3e:89:
99:ed:18:f9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF00wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjE4MTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQ1QkM5RjcyNUMwOUE3
M0QyMzJCRTFBQzhCMjQ2RDE4Qjg5NjBERUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCk9zL2YBkDEwVuie0gAFPGkLZoxXqM4WeW3/jYcigZ0cDsZgXx
G1cbapUZbh+j3+I1LPBT0C71mtY5jPypgl6mI+P3Vlwa6RGEtiaXB8w42pAxWe1M
l0Vnk2JKhZsO8u+pmAyA0ZXqj6rUU8OcweN/O7MkoaAoTPMw+g8VpOc3SxP+IgNv
yiCj4duVVPAuXky/EV++d+n9CKKn6QFxDKdY1qWFWr8+wLOKqr1FX4EWDC4g4NEr
yM/qzutgaktlfUtR2OU/eG8RlmLSmFepSBA4f2fCLcld1E7HACoU/2n0N+zZudzC
Uw2hA12vKumRJ37jn/bGcYUInNnMdxmvdNg9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU1byfclwJpz0jK+GsiyRtGLiWDewwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzFieWZjbHdKcHowakstR3Np
eVJ0R0xpV0Rldy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
ARQwDQYJKoZIhvcNAQELBQADggEBAKqdFWnKfuAwvfLtmJxS6mWmjgZ45Q4Cf+JP
TzfAD/NecWimcauwoVu7QbiUAfKHuyt6CUGL6aWc/lmk19bfAVlg7I7saz6KKw3w
h7xnk2m7eirglgWHj5L1WIYV0c/Tlr4n/QV5FCsXkD1foKBc/l9nAoEyPLG/wd/t
f5HRO8PpS3re3+jwHHIdNrKAoq7dz8LKE4rLnH/gMopCZ0EhvLtPmONgVqu8dZjB
FxTMEUzVp0w6WKHiG22DROjQAZt4K7eBfwtHdH7vA6WTF9odKMvtjy/pHesTDW5W
O5x/TWmd71UKwsBJtfXg34N8RTAH13QKMJj2TQHQn2o+iZntGPk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org