Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8FmjM5Te6BD9LZFqsxclPsPFCs4.roa
File: 8FmjM5Te6BD9LZFqsxclPsPFCs4.roa (raw, json)
Hash identifier: lO0pfGEyoTYrn0xLG1Nm1QsHHiAc5+F6QEa9a0/SUKo=
Subject key identifier: F0:59:A3:33:94:DE:E8:10:FD:2D:91:6A:B3:17:25:3E:C3:C5:0A:CE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8FmjM5Te6BD9LZFqsxclPsPFCs4.roa
Signing time: Thu 15 Sep 2022 02:53:42 +0000
ROA not before: Thu 15 Sep 2022 02:53:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F059A33394DEE810FD2D916AB317253EC3C50ACE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8b:fb:99:7d:80:bd:01:ed:c9:9b:e9:64:14:
1b:79:aa:c9:f9:1f:72:9d:02:f4:6f:6c:9d:cf:3f:
13:ed:08:33:85:a7:96:bb:d6:e2:b9:9e:24:e3:ce:
58:6d:d5:fc:9a:bf:37:44:af:83:99:fe:7d:dd:a5:
dc:42:9b:0a:2c:f6:41:d5:48:72:64:6e:15:f6:52:
23:7f:14:2b:df:4a:b5:f5:b6:24:46:91:a2:1b:e4:
c6:29:9c:f2:a5:47:a3:98:15:96:f8:de:29:4f:7c:
68:54:ed:a3:0a:ec:6d:58:56:13:e4:79:9e:54:19:
d0:64:e5:de:5e:6f:3d:b1:83:34:e8:c8:09:92:a8:
8a:4b:18:09:9d:9e:30:7d:68:9a:9f:94:91:cc:67:
01:a3:29:89:5e:ba:7b:9a:e0:6f:27:79:c2:de:57:
d6:92:6b:dd:84:35:69:6c:bc:b4:13:1b:7d:fc:b1:
3b:51:19:4a:6f:56:e8:c9:bd:59:02:46:d7:d3:28:
eb:5c:ae:d8:47:80:71:89:fc:8f:7f:3b:e4:ad:9c:
7c:96:b7:c9:f4:a5:b3:10:78:1e:18:5c:5c:3d:1f:
f3:64:af:5a:77:aa:3d:12:2a:00:dd:db:51:12:25:
2e:5f:9f:0d:44:7f:76:a0:d4:98:f1:26:4e:18:94:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:59:A3:33:94:DE:E8:10:FD:2D:91:6A:B3:17:25:3E:C3:C5:0A:CE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8FmjM5Te6BD9LZFqsxclPsPFCs4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.144.0/22
Signature Algorithm: sha256WithRSAEncryption
89:42:7f:0b:60:4d:8f:a1:38:2c:a2:43:e1:af:0f:85:4a:e7:
f3:e0:bf:0a:3c:83:23:f7:9e:ff:d5:af:04:15:e9:3b:20:32:
07:55:49:01:e0:d0:cb:d7:70:45:9f:e9:be:aa:22:3d:50:16:
76:49:bb:78:69:6f:3b:7c:82:13:85:54:f9:7b:b8:2b:c3:21:
c7:d1:10:b4:4f:0a:2f:7b:19:6f:f3:3c:63:14:14:97:7c:2d:
5a:19:1e:a5:91:ca:88:8c:eb:3d:09:76:11:a1:75:d7:16:ca:
fa:3d:0b:d1:17:a9:ed:7a:f7:fe:40:4d:1f:f8:23:77:ae:3b:
fc:f4:ba:d8:21:03:c0:6a:d4:b8:e0:22:eb:ba:40:aa:94:f9:
a9:4c:b0:7b:58:81:f3:7b:58:95:b8:c5:23:1e:43:e0:3c:8f:
b4:b7:1e:ca:f9:21:52:01:c8:3f:81:49:34:88:5e:41:29:3e:
30:8f:97:7a:2e:f3:07:ac:91:04:35:f1:eb:23:fb:a2:ae:76:
17:0e:8d:bd:f4:49:f5:c3:00:8b:dd:95:bd:21:c7:03:70:db:
61:78:64:d8:9c:db:f2:a9:cd:1e:86:ab:0f:22:aa:61:be:d8:
fe:8a:4d:e6:6a:cd:b5:73:e0:0e:36:60:62:61:b8:f1:2e:e7:
f3:6d:81:b4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzNDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEYwNTlBMzMzOTRERUU4
MTBGRDJEOTE2QUIzMTcyNTNFQzNDNTBBQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4i/uZfYC9Ae3Jm+lkFBt5qsn5H3KdAvRvbJ3PPxPtCDOFp5a7
1uK5niTjzlht1fyavzdEr4OZ/n3dpdxCmwos9kHVSHJkbhX2UiN/FCvfSrX1tiRG
kaIb5MYpnPKlR6OYFZb43ilPfGhU7aMK7G1YVhPkeZ5UGdBk5d5ebz2xgzToyAmS
qIpLGAmdnjB9aJqflJHMZwGjKYleunua4G8necLeV9aSa92ENWlsvLQTG338sTtR
GUpvVujJvVkCRtfTKOtcrthHgHGJ/I9/O+StnHyWt8n0pbMQeB4YXFw9H/Nkr1p3
qj0SKgDd21ESJS5fnw1Ef3ag1JjxJk4YlGnLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8FmjM5Te6BD9LZFqsxclPsPFCs4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhGbWpNNVRlNkJEOUxaRnFz
eGNsUHNQRkNzNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AZAwDQYJKoZIhvcNAQELBQADggEBAIlCfwtgTY+hOCyiQ+GvD4VK5/Pgvwo8gyP3
nv/VrwQV6TsgMgdVSQHg0MvXcEWf6b6qIj1QFnZJu3hpbzt8ghOFVPl7uCvDIcfR
ELRPCi97GW/zPGMUFJd8LVoZHqWRyoiM6z0JdhGhddcWyvo9C9EXqe169/5ATR/4
I3euO/z0utghA8Bq1LjgIuu6QKqU+alMsHtYgfN7WJW4xSMeQ+A8j7S3Hsr5IVIB
yD+BSTSIXkEpPjCPl3ou8weskQQ18esj+6KudhcOjb30SfXDAIvdlb0hxwNw22F4
ZNic2/KpzR6Gqw8iqmG+2P6KTeZqzbVz4A42YGJhuPEu5/NtgbQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org