Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9RVmT3bj8-a_ERKa5ys1MzDu0fs.roa
File: 9RVmT3bj8-a_ERKa5ys1MzDu0fs.roa (raw, json)
Hash identifier: rGO6Myn6bv1FTQrWVEmxfudvf5Rl25V03S6D19Pq9Ws=
Subject key identifier: F5:15:66:4F:76:E3:F3:E6:BF:11:12:9A:E7:2B:35:33:30:EE:D1:FB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9RVmT3bj8-a_ERKa5ys1MzDu0fs.roa
Signing time: Thu 15 Sep 2022 02:52:18 +0000
ROA not before: Thu 15 Sep 2022 02:52:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.108.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F515664F76E3F3E6BF11129AE72B353330EED1FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6d:53:ab:bc:e6:70:f9:c8:37:9a:57:20:75:
ed:db:19:23:8c:cf:4f:56:5e:65:3f:33:0a:7a:6b:
21:45:ea:7f:75:a4:51:d7:e7:10:1a:63:0e:e5:b9:
06:2e:04:51:fe:57:73:61:dc:f3:31:d7:92:25:aa:
4b:89:c3:84:46:52:b0:fa:f8:79:33:e7:44:0b:c1:
0c:96:e1:cf:13:cf:54:ca:dd:69:5c:b9:11:56:04:
58:e5:d3:f8:81:df:b9:e3:42:53:ab:b1:45:55:c5:
e5:b7:85:f6:fe:d6:5f:80:91:ce:69:e0:4f:73:dc:
ed:42:94:e5:ce:e0:e9:54:25:b1:ed:bd:63:cf:d1:
77:1c:7a:e6:e2:c5:57:1f:0c:87:3c:f4:39:6f:11:
21:a5:c6:10:01:00:2a:27:08:76:85:50:bd:18:43:
a4:b3:f7:d5:28:13:18:02:80:65:f0:37:c0:1e:e9:
47:78:74:2c:97:41:26:b0:c5:a6:d7:4c:92:a0:fb:
ad:95:d1:dc:5f:8d:ae:82:d7:08:a3:ba:d0:3a:29:
36:fe:21:1c:76:8e:b0:cc:55:a7:12:67:7a:4e:f9:
73:3f:6c:f8:de:03:ee:f6:62:23:d9:d6:d4:55:f0:
24:f2:b4:3b:c6:3d:dc:67:97:56:3d:64:83:3f:0d:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:15:66:4F:76:E3:F3:E6:BF:11:12:9A:E7:2B:35:33:30:EE:D1:FB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9RVmT3bj8-a_ERKa5ys1MzDu0fs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.108.0/23
Signature Algorithm: sha256WithRSAEncryption
84:00:3b:70:6f:4c:57:73:9d:23:f1:0e:f0:cd:81:bc:7f:7a:
ed:e2:9f:aa:c8:22:40:1c:96:bc:f2:13:5d:b0:40:02:d2:61:
24:31:8f:9d:c8:3a:f8:e9:55:86:b6:87:db:73:ab:8f:7e:b9:
1d:ba:5d:a4:ad:b7:4f:8c:fa:16:6a:a2:a5:75:2f:76:e0:e5:
9e:a6:d4:ab:eb:4f:b8:6a:9b:a1:85:ea:2a:84:cf:5f:98:49:
ac:62:08:c3:8b:42:cb:70:a2:20:4f:f6:8b:09:d5:c3:4e:97:
b1:51:f2:70:7d:d4:b8:8c:d5:6e:4e:c8:97:77:15:ae:98:20:
7c:18:78:bf:41:91:be:34:81:aa:b4:8e:5e:cb:d6:8a:5c:05:
a3:d6:fd:06:15:16:d1:c1:42:49:31:3f:ec:0c:19:b4:20:5d:
3d:ad:c8:a4:f5:47:d6:b6:e0:6e:94:73:15:5d:a0:96:01:64:
e5:78:42:25:11:ca:90:bd:eb:e2:ff:a8:53:bf:85:77:f9:53:
63:ec:b5:b1:ae:03:83:78:98:e8:38:9d:77:81:3b:79:3c:8e:
c4:fa:62:0a:03:e0:f6:7f:9d:c5:c2:dc:8e:34:eb:83:3e:2e:
f9:b4:2c:ed:36:2c:29:43:93:99:9d:06:f1:64:5e:78:61:21:
67:50:66:21
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyMThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEY1MTU2NjRGNzZFM0Yz
RTZCRjExMTI5QUU3MkIzNTMzMzBFRUQxRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsbVOrvOZw+cg3mlcgde3bGSOMz09WXmU/Mwp6ayFF6n91pFHX
5xAaYw7luQYuBFH+V3Nh3PMx15IlqkuJw4RGUrD6+Hkz50QLwQyW4c8Tz1TK3Wlc
uRFWBFjl0/iB37njQlOrsUVVxeW3hfb+1l+Akc5p4E9z3O1ClOXO4OlUJbHtvWPP
0XcceubixVcfDIc89DlvESGlxhABAConCHaFUL0YQ6Sz99UoExgCgGXwN8Ae6Ud4
dCyXQSawxabXTJKg+62V0dxfja6C1wijutA6KTb+IRx2jrDMVacSZ3pO+XM/bPje
A+72YiPZ1tRV8CTytDvGPdxnl1Y9ZIM/DY67AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU9RVmT3bj8+a/ERKa5ys1MzDu0fswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzlSVm1UM2JqOC1hX0VSS2E1
eXMxTXpEdTBmcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq
AWwwDQYJKoZIhvcNAQELBQADggEBAIQAO3BvTFdznSPxDvDNgbx/eu3in6rIIkAc
lrzyE12wQALSYSQxj53IOvjpVYa2h9tzq49+uR26XaStt0+M+hZqoqV1L3bg5Z6m
1KvrT7hqm6GF6iqEz1+YSaxiCMOLQstwoiBP9osJ1cNOl7FR8nB91LiM1W5OyJd3
Fa6YIHwYeL9Bkb40gaq0jl7L1opcBaPW/QYVFtHBQkkxP+wMGbQgXT2tyKT1R9a2
4G6UcxVdoJYBZOV4QiURypC96+L/qFO/hXf5U2PstbGuA4N4mOg4nXeBO3k8jsT6
YgoD4PZ/ncXC3I4064M+Lvm0LO02LClDk5mdBvFkXnhhIWdQZiE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:05 2025 by rpki-client