Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7noVokSToeyRIhaMgyurCokpyFA.roa
File: 7noVokSToeyRIhaMgyurCokpyFA.roa (raw, json)
Hash identifier: SHfJVBljkS1asU2ODb0vT9xIGIPX8L7CtHOJxPcZG94=
Subject key identifier: EE:7A:15:A2:44:93:A1:EC:91:22:16:8C:83:2B:AB:0A:89:29:C8:50
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F8A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7noVokSToeyRIhaMgyurCokpyFA.roa
Signing time: Tue 29 Sep 2020 09:57:05 +0000
ROA not before: Tue 29 Sep 2020 09:57:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3978 (0xf8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:57:05 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EE7A15A24493A1EC9122168C832BAB0A8929C850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:85:3d:be:ab:2e:ee:76:91:15:7f:f1:ba:
a6:0d:60:91:f9:61:77:bb:8f:17:4a:b7:48:0d:ee:
bd:da:2f:82:24:c9:34:91:ef:0b:85:55:0c:20:cc:
b5:2b:5d:e0:94:b3:7a:70:76:02:f2:02:41:f5:ed:
cb:5d:d5:08:0c:b3:0d:8a:8e:57:07:77:68:de:97:
5f:ec:25:ac:7b:ae:47:fa:02:bc:ed:fc:e7:1e:b5:
4d:7c:04:70:01:76:f9:95:09:4e:94:99:5b:76:74:
0a:3e:26:07:83:b7:ff:3e:d2:07:2c:4b:fc:f6:6c:
13:09:ef:db:ba:96:04:f7:23:89:67:7a:d5:ce:8c:
8e:11:be:8e:0c:49:06:2a:df:30:5d:6e:80:fc:3b:
c2:21:96:98:3e:e1:49:ba:15:f6:5d:ca:8a:e8:4c:
aa:b5:a2:d4:bb:c8:7f:dd:2a:27:fe:22:55:ed:64:
56:0a:65:aa:20:ab:b4:81:83:60:33:b3:a0:8e:43:
56:73:51:0b:f7:f8:99:e2:31:e3:e8:e6:10:b2:1b:
d1:4c:63:6c:47:3e:88:89:63:44:9a:54:ed:2d:2b:
bf:22:4d:9b:15:fb:d5:35:98:63:11:21:20:25:19:
8a:84:0b:9c:de:62:5c:a4:73:da:c4:e6:b2:0c:94:
28:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7A:15:A2:44:93:A1:EC:91:22:16:8C:83:2B:AB:0A:89:29:C8:50
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7noVokSToeyRIhaMgyurCokpyFA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.45.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b1:5b:3d:1c:42:92:e2:f5:4d:70:0f:8b:b8:fc:a7:1d:fd:
30:9a:24:b2:25:e7:52:12:83:10:b0:3d:09:1f:ec:86:86:b1:
56:3a:71:47:35:dd:35:f7:de:a3:93:1e:68:fb:e4:2f:7b:5f:
4d:53:71:52:96:2a:7b:e5:7a:3e:58:ae:63:08:6b:d8:33:20:
5a:7e:b6:06:2d:c9:ed:ac:aa:b4:19:c4:e5:59:6e:0a:1d:c5:
b5:29:43:7b:5c:93:2f:70:0f:01:5f:63:6b:36:1d:ac:f6:01:
a0:72:10:4c:39:86:ba:ce:28:63:6e:b7:ee:cc:cd:56:f4:13:
fc:e4:9d:ce:1f:53:83:34:09:84:5c:c2:f5:e9:ee:2c:6a:76:
b3:7d:13:50:dd:26:bc:a9:bd:e9:c6:88:12:af:ee:77:fe:99:
8d:38:18:f7:66:74:f6:bc:fa:e3:75:c9:a9:c2:14:cb:e2:a1:
58:e3:dd:5c:c6:6b:be:8c:50:4e:3a:e5:92:98:c9:c1:b4:42:
28:c7:e8:fe:fb:c4:f6:b0:2c:78:40:30:fe:f3:d7:7d:4e:c4:
2f:16:61:ea:33:b6:d8:eb:7d:47:50:29:ec:de:7c:74:05:df:
ef:5c:77:2c:e2:f5:ff:30:d1:b1:47:5d:a2:4b:ae:21:6e:db:
3d:21:81:12
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU3MDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEVFN0ExNUEyNDQ5M0Ex
RUM5MTIyMTY4QzgzMkJBQjBBODkyOUM4NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCs9IU9vqsu7naRFX/xuqYNYJH5YXe7jxdKt0gN7r3aL4IkyTSR
7wuFVQwgzLUrXeCUs3pwdgLyAkH17ctd1QgMsw2KjlcHd2jel1/sJax7rkf6Arzt
/OcetU18BHABdvmVCU6UmVt2dAo+JgeDt/8+0gcsS/z2bBMJ79u6lgT3I4lnetXO
jI4Rvo4MSQYq3zBdboD8O8Ihlpg+4Um6FfZdyoroTKq1otS7yH/dKif+IlXtZFYK
Zaogq7SBg2Azs6COQ1ZzUQv3+JniMePo5hCyG9FMY2xHPoiJY0SaVO0tK78iTZsV
+9U1mGMRISAlGYqEC5zeYlykc9rE5rIMlCjZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7noVokSToeyRIhaMgyurCokpyFAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdub1Zva1NUb2V5UkloYU1n
eXVyQ29rcHlGQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AS0wDQYJKoZIhvcNAQELBQADggEBAFOxWz0cQpLi9U1wD4u4/Kcd/TCaJLIl51IS
gxCwPQkf7IaGsVY6cUc13TX33qOTHmj75C97X01TcVKWKnvlej5YrmMIa9gzIFp+
tgYtye2sqrQZxOVZbgodxbUpQ3tcky9wDwFfY2s2Haz2AaByEEw5hrrOKGNut+7M
zVb0E/zknc4fU4M0CYRcwvXp7ixqdrN9E1DdJrypvenGiBKv7nf+mY04GPdmdPa8
+uN1yanCFMvioVjj3VzGa76MUE465ZKYycG0QijH6P77xPawLHhAMP7z131OxC8W
YeozttjrfUdQKezefHQF3+9cdyzi9f8w0bFHXaJLriFu2z0hgRI=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:10 2023 by rpki-client on console-ams.rpki-client.org