Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/52WF_Eex_nwDc9EhUOONtoztb08.roa
File: 52WF_Eex_nwDc9EhUOONtoztb08.roa (raw, json)
Hash identifier: YiSUpwuFxFWmy3lAfGp4e0l04xKoMQgcRKzw7ByeOQs=
Subject key identifier: E7:65:85:FC:47:B1:FE:7C:03:73:D1:21:50:E3:8D:B6:8C:ED:6F:4F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C14
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/52WF_Eex_nwDc9EhUOONtoztb08.roa
Signing time: Wed 29 Sep 2021 02:47:20 +0000
ROA not before: Wed 29 Sep 2021 02:47:20 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7188 (0x1c14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:20 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E76585FC47B1FE7C0373D12150E38DB68CED6F4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:ab:e2:ec:6f:f7:98:da:8b:0a:f1:d7:69:
d7:ab:4a:e5:8b:ce:96:56:43:9d:79:1a:80:2e:5a:
e0:1e:56:34:73:f4:a1:ec:93:ba:eb:5f:36:c2:71:
51:db:87:97:03:1f:2c:48:b2:01:26:d2:b8:f7:74:
77:79:46:97:1b:36:50:5f:92:e5:df:aa:29:91:75:
d9:f7:c3:09:d8:0a:ae:f1:99:2c:2b:ad:5f:5a:30:
9e:a3:d0:6b:e4:61:2a:90:a4:02:ce:94:d6:28:65:
2b:20:3d:71:7b:c0:5e:23:9e:97:6d:5c:a2:5d:eb:
d6:fc:13:c4:df:9a:22:fd:bd:69:59:d6:9e:31:ed:
47:8c:a5:ab:47:8a:cd:88:44:38:8e:b0:d7:61:f2:
1e:1a:da:de:d9:05:f2:9a:aa:0a:85:59:24:42:f2:
3f:86:b6:38:84:83:08:a9:af:1c:9f:27:97:78:c3:
75:21:c0:e2:ae:cc:7a:6e:01:56:1e:0f:2e:b3:ec:
f4:9b:60:58:a1:51:34:00:c4:dc:71:9d:db:63:31:
8f:7c:e7:22:70:2c:98:be:43:45:69:9b:94:72:b6:
9d:cb:bc:03:4e:ee:63:d6:a2:d5:26:85:91:70:82:
68:03:41:91:32:5d:ec:41:21:c1:33:f8:f3:d8:93:
80:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:65:85:FC:47:B1:FE:7C:03:73:D1:21:50:E3:8D:B6:8C:ED:6F:4F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/52WF_Eex_nwDc9EhUOONtoztb08.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.205.0/24
Signature Algorithm: sha256WithRSAEncryption
56:67:3a:b6:91:4a:dd:50:cd:3d:04:e6:02:87:12:0c:95:e1:
da:7f:53:b2:46:6c:b6:6e:e5:14:88:c9:b7:21:a8:60:7b:9b:
01:7c:b4:5b:c5:f9:1a:52:d8:f2:e9:d0:69:02:ba:f9:25:4a:
8d:bd:a9:70:6b:ed:f5:ad:ab:88:64:0e:06:d6:3f:0f:06:3b:
a7:77:36:df:f6:f5:4b:dd:f0:2f:61:68:fd:04:35:d3:a4:91:
5f:94:e8:f8:61:1d:6a:32:c3:65:3f:89:e8:14:0e:1c:bc:ea:
c6:4d:6a:82:68:fc:9b:a5:46:95:0c:fb:3d:8f:5b:ea:2b:03:
8f:84:b7:3a:7c:b2:a2:f6:c3:c7:1d:18:b8:65:b2:2e:90:b7:
de:fa:64:10:b5:38:3e:2b:22:20:f6:68:fe:7a:59:1a:ca:e5:
f8:dd:34:15:cb:22:e6:5c:63:f4:55:61:79:8c:4e:0c:47:fd:
dd:39:0d:e9:0a:c8:14:f4:ff:33:40:14:85:25:a9:d2:b9:d3:
f3:df:c1:ba:08:5e:21:0c:b6:c9:4b:32:cf:04:77:6a:3e:0f:
3a:51:fd:83:b0:86:0c:79:86:d9:17:e1:30:ce:e3:2f:e8:13:
47:5e:a4:0c:13:97:20:93:7a:f1:07:76:ec:fa:cc:78:1b:61:
96:e1:7f:25
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHBQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3MjBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEU3NjU4NUZDNDdCMUZF
N0MwMzczRDEyMTUwRTM4REI2OENFRDZGNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjzavi7G/3mNqLCvHXaderSuWLzpZWQ515GoAuWuAeVjRz9KHs
k7rrXzbCcVHbh5cDHyxIsgEm0rj3dHd5RpcbNlBfkuXfqimRddn3wwnYCq7xmSwr
rV9aMJ6j0GvkYSqQpALOlNYoZSsgPXF7wF4jnpdtXKJd69b8E8TfmiL9vWlZ1p4x
7UeMpatHis2IRDiOsNdh8h4a2t7ZBfKaqgqFWSRC8j+GtjiEgwiprxyfJ5d4w3Uh
wOKuzHpuAVYeDy6z7PSbYFihUTQAxNxxndtjMY985yJwLJi+Q0Vpm5Rytp3LvANO
7mPWotUmhZFwgmgDQZEyXexBIcEz+PPYk4BLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU52WF/Eex/nwDc9EhUOONtoztb08wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzUyV0ZfRWV4X253RGM5RWhV
T09OdG96dGIwOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
Ac0wDQYJKoZIhvcNAQELBQADggEBAFZnOraRSt1QzT0E5gKHEgyV4dp/U7JGbLZu
5RSIybchqGB7mwF8tFvF+RpS2PLp0GkCuvklSo29qXBr7fWtq4hkDgbWPw8GO6d3
Nt/29Uvd8C9haP0ENdOkkV+U6PhhHWoyw2U/iegUDhy86sZNaoJo/JulRpUM+z2P
W+orA4+Etzp8sqL2w8cdGLhlsi6Qt976ZBC1OD4rIiD2aP56WRrK5fjdNBXLIuZc
Y/RVYXmMTgxH/d05DekKyBT0/zNAFIUlqdK50/PfwboIXiEMtslLMs8Ed2o+DzpR
/YOwhgx5htkX4TDO4y/oE0depAwTlyCTevEHduz6zHgbYZbhfyU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org