Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2piNWHCXX8jG_3oL2lNzOozh0yI.roa
File: 2piNWHCXX8jG_3oL2lNzOozh0yI.roa (raw, json)
Hash identifier: Lxceho99CUTUdZSYm0fTwsTbr6Fr/O0ptdRxe/LeVo4=
Subject key identifier: DA:98:8D:58:70:97:5F:C8:C6:FF:7A:0B:DA:53:73:3A:8C:E1:D3:22
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EAC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2piNWHCXX8jG_3oL2lNzOozh0yI.roa
Signing time: Tue 29 Sep 2020 09:56:00 +0000
ROA not before: Tue 29 Sep 2020 09:56:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3756 (0xeac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:00 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DA988D5870975FC8C6FF7A0BDA53733A8CE1D322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:1c:2a:56:9f:ae:b6:bf:db:cf:b6:64:d9:
2b:9f:bc:3a:7a:36:65:ad:1e:be:8b:e8:5e:d7:5f:
ef:cf:30:f6:73:08:f7:cb:16:a9:e5:7e:4b:0e:57:
a1:90:75:39:e4:9e:e1:f8:b6:b4:88:e7:51:d1:10:
48:4e:26:f0:cd:e0:18:41:94:c0:11:b6:d9:7c:88:
e9:8f:94:89:1b:28:7c:30:2b:1b:15:96:b1:58:2a:
d3:bc:da:cf:f6:41:a4:fe:60:6c:a0:6a:f4:d4:fe:
e9:35:e4:8a:9d:40:81:39:5a:d9:43:3e:0c:14:54:
8e:93:f8:6a:d1:72:a2:59:26:63:6c:e6:e5:f5:ec:
f3:71:27:f1:7b:93:bb:a3:2e:be:4e:2d:06:59:fd:
bf:13:b0:20:0f:aa:83:e1:a6:08:3c:23:bd:be:ae:
cf:ad:96:3d:fc:88:e9:84:09:0d:64:f3:63:a4:9f:
51:95:51:5e:73:00:64:0c:84:3f:f8:d3:54:99:7d:
81:cd:32:53:e4:0a:66:0f:25:bb:2c:a9:70:69:f9:
ef:35:9f:c1:25:19:6e:4a:95:db:64:c2:84:56:49:
c3:25:b5:9d:5e:ff:dd:95:b1:16:4e:63:4c:d3:1a:
c1:d7:e7:23:18:ec:be:e8:08:2b:aa:3b:2f:36:27:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:98:8D:58:70:97:5F:C8:C6:FF:7A:0B:DA:53:73:3A:8C:E1:D3:22
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2piNWHCXX8jG_3oL2lNzOozh0yI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ad:1c:35:a8:91:3e:24:1b:a8:11:7e:bb:eb:e2:e1:1c:c7:
dd:65:b0:ca:79:79:1c:9e:d9:48:28:aa:0e:b5:c4:6a:8f:f6:
d6:e8:79:40:18:57:9a:7a:27:26:db:ac:aa:75:5c:c6:2d:e0:
31:82:6b:e9:f2:37:1b:b7:ef:61:ae:dc:74:6a:bb:c9:7c:ac:
7e:bc:53:7e:49:f6:67:c7:8f:46:2b:17:be:29:1d:eb:16:dc:
d4:24:5e:ff:77:65:d6:ba:5e:b4:97:9b:20:70:b7:ad:1b:1b:
07:d9:0f:8c:95:3f:14:49:c7:48:67:40:bc:32:08:c0:35:1a:
30:bf:33:84:91:cc:78:ab:b3:b8:32:a6:f8:38:1e:c5:03:8d:
86:43:f9:60:62:05:b9:c0:be:18:59:06:9c:2e:a1:37:f9:24:
ca:62:59:a7:04:fe:fc:b5:f9:22:1c:05:9d:8c:85:88:1d:9a:
c0:91:7f:2f:2a:6d:5f:19:87:d0:e7:99:bd:9b:32:9f:53:51:
40:a9:ae:58:81:99:de:48:28:17:98:2a:d3:8e:8e:a6:b8:6e:
e8:61:08:38:78:d6:3c:e5:4b:dc:8c:c4:f1:b9:ce:a0:68:18:
11:32:d8:6a:6e:ec:0b:23:d0:1e:b6:cd:87:65:e5:1d:f3:26:
a3:6b:f5:df
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDqwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKERBOTg4RDU4NzA5NzVG
QzhDNkZGN0EwQkRBNTM3MzNBOENFMUQzMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6eBwqVp+utr/bz7Zk2SufvDp6NmWtHr6L6F7XX+/PMPZzCPfL
FqnlfksOV6GQdTnknuH4trSI51HREEhOJvDN4BhBlMARttl8iOmPlIkbKHwwKxsV
lrFYKtO82s/2QaT+YGygavTU/uk15IqdQIE5WtlDPgwUVI6T+GrRcqJZJmNs5uX1
7PNxJ/F7k7ujLr5OLQZZ/b8TsCAPqoPhpgg8I72+rs+tlj38iOmECQ1k82Okn1GV
UV5zAGQMhD/401SZfYHNMlPkCmYPJbssqXBp+e81n8ElGW5KldtkwoRWScMltZ1e
/92VsRZOY0zTGsHX5yMY7L7oCCuqOy82J7yZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2piNWHCXX8jG/3oL2lNzOozh0yIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJwaU5XSENYWDhqR18zb0wy
bE56T296aDB5SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AYYwDQYJKoZIhvcNAQELBQADggEBAGqtHDWokT4kG6gRfrvr4uEcx91lsMp5eRye
2Ugoqg61xGqP9tboeUAYV5p6JybbrKp1XMYt4DGCa+nyNxu372Gu3HRqu8l8rH68
U35J9mfHj0YrF74pHesW3NQkXv93Zda6XrSXmyBwt60bGwfZD4yVPxRJx0hnQLwy
CMA1GjC/M4SRzHirs7gypvg4HsUDjYZD+WBiBbnAvhhZBpwuoTf5JMpiWacE/vy1
+SIcBZ2MhYgdmsCRfy8qbV8Zh9Dnmb2bMp9TUUCprliBmd5IKBeYKtOOjqa4buhh
CDh41jzlS9yMxPG5zqBoGBEy2Gpu7Asj0B62zYdl5R3zJqNr9d8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:15 2025 by rpki-client