Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Kdo03xDiZ1DWOHL5-gXIPQ1LOE.roa
File: 7Kdo03xDiZ1DWOHL5-gXIPQ1LOE.roa (raw, json)
Hash identifier: hA/e8HmqjuzN8PB3XRx1A5M7YB6mCm1jb/xqG5iREgQ=
Subject key identifier: EC:A7:68:D3:7C:43:89:9D:43:58:E1:CB:E7:E8:17:20:F4:35:2C:E1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 235C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Kdo03xDiZ1DWOHL5-gXIPQ1LOE.roa
Signing time: Fri 25 Nov 2022 04:43:29 +0000
ROA not before: Fri 25 Nov 2022 04:43:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9052 (0x235c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:43:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ECA768D37C43899D4358E1CBE7E81720F4352CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:0a:dc:c9:01:4d:4e:c3:9d:45:44:21:90:
08:0d:9b:08:53:ff:5c:1a:58:40:88:34:ea:8c:58:
76:2b:13:1e:c9:ab:14:d9:7f:77:13:e1:14:d4:23:
de:5e:f2:6a:d5:f6:fa:2d:b1:76:7d:1e:27:62:82:
ec:24:22:38:38:4e:26:6e:49:db:ff:69:7f:19:2a:
87:ad:bb:70:1d:39:f8:c3:f1:32:93:b7:b9:0a:3a:
9f:03:84:5f:69:88:a5:95:ba:e0:a3:bd:18:9e:38:
73:2c:26:c4:d2:23:0c:22:a8:07:f3:64:68:18:19:
91:f3:a9:74:45:90:08:f8:54:1f:7c:68:ff:da:c1:
dc:98:35:bf:70:dd:29:af:cd:24:fc:5e:49:e5:a8:
60:b2:b2:f9:ef:c5:e7:45:f7:49:61:30:c9:3b:6e:
24:b9:21:01:cf:5f:3b:f0:3c:df:af:b4:38:a5:26:
57:6e:10:6b:75:6e:e3:43:03:0e:13:6d:1b:51:5f:
3b:2b:4a:17:e7:5b:0d:78:69:53:b3:02:65:1a:19:
fe:1a:16:be:56:37:8f:21:77:ab:21:9f:6d:3f:6c:
26:7c:a4:cf:07:c1:82:60:b5:77:2c:60:a8:f6:a6:
fe:14:2e:0a:76:d4:d6:d1:c9:73:2e:f4:d1:6f:f8:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A7:68:D3:7C:43:89:9D:43:58:E1:CB:E7:E8:17:20:F4:35:2C:E1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Kdo03xDiZ1DWOHL5-gXIPQ1LOE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a8:92:ca:29:10:db:be:9a:82:eb:0d:f7:05:86:40:e5:f7:
64:08:ad:df:b8:ce:ed:45:da:bb:78:ad:ad:38:32:67:e3:77:
5e:1e:54:71:06:0d:64:ce:07:cd:16:8d:d0:80:d4:db:d3:18:
23:7b:c9:06:ef:ef:7f:4c:ae:11:df:65:2f:aa:e5:f3:bc:e8:
93:20:9c:db:30:ca:e3:90:55:c9:9f:47:03:40:ef:52:08:5e:
54:f3:83:99:cc:f9:05:df:ea:2a:68:c8:29:bd:03:c7:be:88:
b0:fa:3c:a4:76:07:9b:ea:59:1d:58:a6:b4:ab:0b:9f:b9:01:
2e:53:80:81:87:91:73:2b:db:02:bb:97:e0:30:b1:06:49:4a:
23:cc:c3:62:71:d8:50:9c:0e:2a:68:8d:c7:3a:d5:84:3e:7f:
00:a1:b1:8b:b7:7e:ad:4c:15:91:af:a3:28:92:75:db:6e:01:
5a:f6:fc:62:d0:61:53:1f:ed:fb:b2:ab:88:79:97:ff:ea:d2:
5f:84:79:13:4f:4e:7c:58:b1:a6:61:93:b2:2f:c2:1e:4e:60:
81:8a:c9:bf:be:cd:76:5e:13:55:61:c5:38:e1:db:8f:89:fd:
54:16:df:84:52:b7:a7:f8:c0:7e:85:31:4d:ca:17:46:73:02:
c3:12:df:f7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICI1wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQzMjlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVDQTc2OEQzN0M0Mzg5
OUQ0MzU4RTFDQkU3RTgxNzIwRjQzNTJDRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHEwrcyQFNTsOdRUQhkAgNmwhT/1waWECINOqMWHYrEx7JqxTZ
f3cT4RTUI95e8mrV9votsXZ9HidiguwkIjg4TiZuSdv/aX8ZKoetu3AdOfjD8TKT
t7kKOp8DhF9piKWVuuCjvRieOHMsJsTSIwwiqAfzZGgYGZHzqXRFkAj4VB98aP/a
wdyYNb9w3SmvzST8XknlqGCysvnvxedF90lhMMk7biS5IQHPXzvwPN+vtDilJldu
EGt1buNDAw4TbRtRXzsrShfnWw14aVOzAmUaGf4aFr5WN48hd6shn20/bCZ8pM8H
wYJgtXcsYKj2pv4ULgp21NbRyXMu9NFv+JNpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7Kdo03xDiZ1DWOHL5+gXIPQ1LOEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdLZG8wM3hEaVoxRFdPSEw1
LWdYSVBRMUxPRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
Ad4wDQYJKoZIhvcNAQELBQADggEBAIqoksopENu+moLrDfcFhkDl92QIrd+4zu1F
2rt4ra04Mmfjd14eVHEGDWTOB80WjdCA1NvTGCN7yQbv739MrhHfZS+q5fO86JMg
nNswyuOQVcmfRwNA71IIXlTzg5nM+QXf6ipoyCm9A8e+iLD6PKR2B5vqWR1YprSr
C5+5AS5TgIGHkXMr2wK7l+AwsQZJSiPMw2Jx2FCcDipojcc61YQ+fwChsYu3fq1M
FZGvoyiSddtuAVr2/GLQYVMf7fuyq4h5l//q0l+EeRNPTnxYsaZhk7Ivwh5OYIGK
yb++zXZeE1VhxTjh24+J/VQW34RSt6f4wH6FMU3KF0ZzAsMS3/c=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:38 2025 by rpki-client