Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6F5OEyY73YTZ0IavNJGpZ7irD2M.roa
File: 6F5OEyY73YTZ0IavNJGpZ7irD2M.roa (raw, json)
Hash identifier: W/XFUg9EHFPWyEIfl4HhYjFmCwOXBMaWULAHYbvrAdM=
Subject key identifier: E8:5E:4E:13:26:3B:DD:84:D9:D0:86:AF:34:91:A9:67:B8:AB:0F:63
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21A0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6F5OEyY73YTZ0IavNJGpZ7irD2M.roa
Signing time: Fri 25 Nov 2022 04:40:08 +0000
ROA not before: Fri 25 Nov 2022 04:40:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8608 (0x21a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E85E4E13263BDD84D9D086AF3491A967B8AB0F63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:0a:aa:b9:39:e9:48:15:9a:01:b5:35:7b:
44:2a:a6:55:7d:36:6b:40:66:a9:58:25:75:5c:e1:
e6:57:a0:74:d0:bf:bf:6d:85:bf:15:39:0e:da:93:
58:e6:bb:8d:60:54:f5:38:7a:ea:4c:ec:4f:b5:24:
61:88:7e:88:28:f0:fa:45:97:46:76:c2:b6:19:00:
c9:cd:81:6d:cf:1f:f7:ba:3d:e4:a4:f3:b9:8c:03:
40:f2:88:86:85:44:8d:02:eb:2b:2d:80:52:a6:1c:
b7:6a:41:bf:59:21:03:fc:03:41:62:a4:a9:fe:2e:
8b:4a:65:97:18:57:61:05:4b:3b:d3:3c:18:42:a2:
68:da:fd:78:f1:64:16:44:8e:92:f5:62:8a:e3:c2:
52:7a:5d:6d:4f:97:17:09:7d:e9:6a:a9:d4:9f:db:
95:22:b1:7a:ff:97:03:74:de:f0:cf:f6:52:83:f7:
b4:b5:dd:07:d4:a5:f7:50:90:a0:31:33:a5:61:73:
c4:4b:42:2a:a0:6b:7d:98:18:8e:42:c3:a3:69:15:
6f:f2:ed:29:75:fc:40:da:40:06:94:c3:10:1b:04:
9a:5f:2b:ff:62:36:0d:84:c0:44:c1:ae:84:a4:ac:
65:8c:76:56:3f:d4:a1:97:5d:27:77:2a:11:00:07:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5E:4E:13:26:3B:DD:84:D9:D0:86:AF:34:91:A9:67:B8:AB:0F:63
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6F5OEyY73YTZ0IavNJGpZ7irD2M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:95:d5:a5:bf:fd:70:d3:68:03:cc:b7:4c:cd:ed:0f:67:8b:
44:07:e9:cf:86:e4:0a:a5:2e:a2:02:ac:d2:b1:6e:1f:34:b9:
62:ec:40:ec:c7:ec:db:6a:39:26:2b:95:b2:dc:2e:76:4c:8d:
ee:f6:26:29:7b:2f:bb:58:34:ad:62:ab:9b:05:d2:14:60:e1:
00:99:e5:8c:f8:3b:ec:3e:1a:c9:10:aa:81:08:ef:da:bb:b0:
c1:b3:f0:0e:ab:94:9b:d0:b0:f6:88:6d:ee:e3:38:f3:29:b0:
53:52:fb:ba:1b:1d:3d:0b:2b:b4:96:5b:00:68:45:47:28:89:
ea:d6:fa:2e:e8:74:2a:73:10:e0:85:59:45:29:2e:f4:60:b1:
09:2e:66:29:14:03:8c:47:52:b4:84:a1:9a:62:d3:4b:a4:75:
a5:a5:38:95:2a:84:64:4d:3f:e6:b0:bb:90:2f:2c:b9:c7:0f:
26:ef:a1:00:2e:52:9d:f6:44:98:6f:86:27:fc:12:6e:79:e3:
57:03:ac:88:bd:f9:f1:6d:33:79:8c:cc:83:89:93:0e:a6:a2:
a6:2f:27:e6:d8:20:9b:31:0e:c0:ea:25:d8:38:e1:2a:9b:b0:
df:6f:8c:40:fc:1e:87:b6:b7:61:97:04:d3:76:6f:51:f6:5e:
19:b9:68:b1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIaAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEU4NUU0RTEzMjYzQkRE
ODREOUQwODZBRjM0OTFBOTY3QjhBQjBGNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3KgqquTnpSBWaAbU1e0QqplV9NmtAZqlYJXVc4eZXoHTQv79t
hb8VOQ7ak1jmu41gVPU4eupM7E+1JGGIfogo8PpFl0Z2wrYZAMnNgW3PH/e6PeSk
87mMA0DyiIaFRI0C6ystgFKmHLdqQb9ZIQP8A0FipKn+LotKZZcYV2EFSzvTPBhC
omja/XjxZBZEjpL1YorjwlJ6XW1PlxcJfelqqdSf25UisXr/lwN03vDP9lKD97S1
3QfUpfdQkKAxM6Vhc8RLQiqga32YGI5Cw6NpFW/y7Sl1/EDaQAaUwxAbBJpfK/9i
Ng2EwETBroSkrGWMdlY/1KGXXSd3KhEAB90dAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6F5OEyY73YTZ0IavNJGpZ7irD2MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZGNU9FeVk3M1lUWjBJYXZO
SkdwWjdpckQyTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AXQwDQYJKoZIhvcNAQELBQADggEBAIqV1aW//XDTaAPMt0zN7Q9ni0QH6c+G5Aql
LqICrNKxbh80uWLsQOzH7NtqOSYrlbLcLnZMje72Jil7L7tYNK1iq5sF0hRg4QCZ
5Yz4O+w+GskQqoEI79q7sMGz8A6rlJvQsPaIbe7jOPMpsFNS+7obHT0LK7SWWwBo
RUcoierW+i7odCpzEOCFWUUpLvRgsQkuZikUA4xHUrSEoZpi00ukdaWlOJUqhGRN
P+awu5AvLLnHDybvoQAuUp32RJhvhif8Em5541cDrIi9+fFtM3mMzIOJkw6moqYv
J+bYIJsxDsDqJdg44SqbsN9vjED8Hoe2t2GXBNN2b1H2Xhm5aLE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org