Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8g-9f6SkAX1CIuWg6pGADUKRxL4.roa
File: 8g-9f6SkAX1CIuWg6pGADUKRxL4.roa (raw, json)
Hash identifier: LhIe6kukCdhburWfBlnJ6LnehYpZqU1h4B0UE7A+g/g=
Subject key identifier: F2:0F:BD:7F:A4:A4:01:7D:42:22:E5:A0:EA:91:80:0D:42:91:C4:BE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8g-9f6SkAX1CIuWg6pGADUKRxL4.roa
Signing time: Thu 15 Sep 2022 02:53:16 +0000
ROA not before: Thu 15 Sep 2022 02:53:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F20FBD7FA4A4017D4222E5A0EA91800D4291C4BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:a7:f6:d9:10:29:7e:b3:25:36:59:9b:fc:
4e:93:79:5f:a1:48:fb:e5:49:59:16:21:b3:f5:36:
cd:93:58:06:92:4f:ae:ef:2e:85:98:9f:85:64:db:
d4:05:58:5b:02:3a:3d:18:7c:7f:d2:54:dd:97:20:
3a:51:6a:5c:39:bd:7a:ea:0f:d4:6c:06:36:73:26:
54:e2:9c:8c:cf:18:e4:ba:ef:a0:2d:b2:12:36:e7:
ee:f2:10:a9:1a:b6:ae:92:0d:0b:67:76:c1:f9:86:
20:66:eb:1f:31:f4:86:48:7c:dc:f5:4b:36:5b:91:
b9:f4:b5:33:d4:2c:37:76:11:53:a0:ca:02:b3:8e:
ac:11:a3:77:76:4d:ef:bf:c0:84:81:54:49:6b:12:
98:16:47:5a:b4:80:f7:75:3d:e1:8a:4c:d0:c6:ba:
e9:f1:7f:25:35:9e:4f:b8:99:56:6f:ee:28:f2:ba:
bf:6b:62:04:ae:5b:3b:fd:72:87:24:aa:4c:c9:bc:
b3:77:a3:dd:0a:c4:52:48:f7:3c:b6:5b:24:39:7c:
6c:60:94:e6:0c:84:05:b4:e4:2d:d0:cb:45:33:18:
bf:2c:50:b5:dd:c4:a8:89:d8:4e:b4:b8:a2:9f:d4:
93:11:84:f6:61:c7:a5:42:21:95:f3:5a:94:db:46:
bf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0F:BD:7F:A4:A4:01:7D:42:22:E5:A0:EA:91:80:0D:42:91:C4:BE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8g-9f6SkAX1CIuWg6pGADUKRxL4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.236.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:73:0c:b1:a2:4f:29:dd:9c:a0:c8:38:2e:5b:81:7c:a5:b0:
7f:74:be:b4:12:20:d9:3a:f2:2b:53:33:b7:f2:c7:b5:e3:60:
0b:0b:1e:4b:81:97:a4:1f:20:71:09:3a:0d:ba:9e:6b:93:57:
fc:0f:21:39:bb:ab:88:87:f0:8a:07:3a:ea:84:33:26:91:e2:
5f:e7:23:44:61:a9:43:c4:3a:bd:1e:dc:da:22:21:05:9b:b5:
b2:94:28:93:69:a7:04:69:ec:8f:71:d8:f3:55:4e:20:d1:ba:
d4:85:2f:e4:6d:98:62:5e:b6:ba:91:23:ee:5c:aa:4a:eb:42:
8e:1b:51:a3:2d:33:72:a3:35:57:59:41:52:c7:d3:a5:01:94:
20:8c:c1:55:2d:58:e4:d8:36:d2:de:5d:29:a7:54:cc:97:c0:
7f:cd:a8:92:d5:b2:d4:aa:68:bb:65:63:40:44:75:f3:89:07:
54:65:7f:a1:be:bf:0a:fc:81:56:22:f0:c9:48:fd:e2:91:d6:
79:f9:aa:a6:33:1c:a7:2d:c9:4c:ae:df:ab:8c:7b:f7:6f:ea:
64:bd:89:e1:a7:3e:e2:e5:75:c2:f0:bc:d7:18:26:75:54:84:
b1:1a:eb:57:f9:80:04:30:a4:21:08:d9:cb:e2:a2:76:18:e5:
14:b9:b2:45
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzMTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEYyMEZCRDdGQTRBNDAx
N0Q0MjIyRTVBMEVBOTE4MDBENDI5MUM0QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5s6f22RApfrMlNlmb/E6TeV+hSPvlSVkWIbP1Ns2TWAaST67v
LoWYn4Vk29QFWFsCOj0YfH/SVN2XIDpRalw5vXrqD9RsBjZzJlTinIzPGOS676At
shI25+7yEKkatq6SDQtndsH5hiBm6x8x9IZIfNz1SzZbkbn0tTPULDd2EVOgygKz
jqwRo3d2Te+/wISBVElrEpgWR1q0gPd1PeGKTNDGuunxfyU1nk+4mVZv7ijyur9r
YgSuWzv9cockqkzJvLN3o90KxFJI9zy2WyQ5fGxglOYMhAW05C3Qy0UzGL8sULXd
xKiJ2E60uKKf1JMRhPZhx6VCIZXzWpTbRr+7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8g+9f6SkAX1CIuWg6pGADUKRxL4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhnLTlmNlNrQVgxQ0l1V2c2
cEdBRFVLUnhMNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AewwDQYJKoZIhvcNAQELBQADggEBADxzDLGiTyndnKDIOC5bgXylsH90vrQSINk6
8itTM7fyx7XjYAsLHkuBl6QfIHEJOg26nmuTV/wPITm7q4iH8IoHOuqEMyaR4l/n
I0RhqUPEOr0e3NoiIQWbtbKUKJNppwRp7I9x2PNVTiDRutSFL+RtmGJetrqRI+5c
qkrrQo4bUaMtM3KjNVdZQVLH06UBlCCMwVUtWOTYNtLeXSmnVMyXwH/NqJLVstSq
aLtlY0BEdfOJB1Rlf6G+vwr8gVYi8MlI/eKR1nn5qqYzHKctyUyu36uMe/dv6mS9
ieGnPuLldcLwvNcYJnVUhLEa61f5gAQwpCEI2cvionYY5RS5skU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org