Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AcptWdrP9Ehbl2_JPxrOaTcQJ4o.roa
File: AcptWdrP9Ehbl2_JPxrOaTcQJ4o.roa (raw, json)
Hash identifier: eWhvU3t/eGqqrSB82CHE5IJeyE9bEku3M8wh2tUevuI=
Subject key identifier: 01:CA:6D:59:DA:CF:F4:48:5B:97:6F:C9:3F:1A:CE:69:37:10:27:8A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2830
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AcptWdrP9Ehbl2_JPxrOaTcQJ4o.roa
Signing time: Fri 01 Sep 2023 10:05:03 +0000
ROA not before: Fri 01 Sep 2023 10:05:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10288 (0x2830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=01CA6D59DACFF4485B976FC93F1ACE693710278A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:68:e2:e7:f0:7f:f1:58:fe:8e:1f:5f:ac:
ea:6f:34:4f:91:cf:dc:0f:82:22:c3:db:8a:1a:8a:
da:dc:60:ff:4b:63:3d:70:31:32:90:c5:70:0a:af:
5e:e5:81:a6:b5:66:b2:d3:c1:20:c5:59:c0:31:fc:
6f:f1:1e:67:76:34:2f:bb:5b:0c:3b:af:46:e3:65:
39:fe:fb:02:71:2f:65:63:0c:99:45:6a:b7:87:84:
65:de:65:70:49:63:ca:10:1d:0a:da:ec:04:47:66:
f5:6f:36:0e:22:06:85:9a:4a:35:64:09:d6:3c:fd:
fe:2b:c5:b4:02:b1:a3:e1:3d:f5:26:f9:70:5c:c2:
f0:b4:f9:3f:a9:30:62:d1:64:76:ab:17:4c:8e:22:
1c:e3:45:1f:80:d9:a8:4a:02:0a:8e:0b:1c:b9:55:
2f:b4:21:84:05:16:47:b8:9e:0f:ed:74:a3:d7:89:
e0:6d:89:59:2f:fd:54:e6:77:ad:00:25:19:10:ba:
6d:9a:c2:88:87:c9:bf:a0:18:3c:a4:f2:db:fc:ae:
9f:0c:45:f3:10:b6:d2:c4:9b:3d:b1:c8:b5:ba:ae:
7d:db:64:07:72:bb:b9:ab:9e:81:c0:0c:93:1e:0e:
d4:ee:f6:0e:07:3a:29:4b:93:e2:44:63:37:b9:a6:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CA:6D:59:DA:CF:F4:48:5B:97:6F:C9:3F:1A:CE:69:37:10:27:8A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AcptWdrP9Ehbl2_JPxrOaTcQJ4o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.24.0/21
Signature Algorithm: sha256WithRSAEncryption
18:4a:bb:0e:6a:e3:35:8b:d8:2b:1a:30:9b:b6:66:da:53:85:
f6:5b:bb:36:01:5a:fc:f1:93:9b:c4:98:03:7f:aa:60:7a:da:
d1:5d:b4:92:e2:4a:3d:c6:64:f9:14:08:8c:68:4c:51:c7:a2:
a7:2b:dd:aa:9b:ac:06:40:c8:e1:57:35:85:45:e5:1e:f7:b2:
ae:e3:0e:45:3a:76:55:92:fc:33:fa:d4:eb:22:18:55:d6:82:
43:f0:d6:93:65:2d:50:ea:e7:9f:85:db:b4:fb:83:6d:12:ef:
77:8d:2c:eb:92:18:ab:26:96:00:22:68:28:1d:f5:32:35:2c:
9c:69:9a:61:21:49:9f:3e:92:a3:9f:af:19:4e:c4:c1:92:1a:
7c:6b:66:9b:50:ea:0e:50:17:ec:6d:4a:5c:16:36:96:60:1e:
42:4d:0a:ef:2d:35:31:05:3e:d6:9b:d4:ef:c4:5f:41:36:51:
7e:b6:6c:49:85:c9:bb:fd:75:d1:8c:c5:a5:23:c4:f6:d3:99:
77:ff:16:9c:74:02:c4:78:23:3c:78:6a:93:36:25:a5:33:45:
28:bf:b7:1a:3a:40:b4:89:97:3b:4a:e3:2f:cc:d7:43:2f:45:
b8:86:9e:44:77:27:7d:3d:30:e0:ba:3e:d9:83:d7:c6:a3:b2:
78:bb:0e:ee
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKDAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAxQ0E2RDU5REFDRkY0
NDg1Qjk3NkZDOTNGMUFDRTY5MzcxMDI3OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXWWji5/B/8Vj+jh9frOpvNE+Rz9wPgiLD24oaitrcYP9LYz1w
MTKQxXAKr17lgaa1ZrLTwSDFWcAx/G/xHmd2NC+7Www7r0bjZTn++wJxL2VjDJlF
areHhGXeZXBJY8oQHQra7ARHZvVvNg4iBoWaSjVkCdY8/f4rxbQCsaPhPfUm+XBc
wvC0+T+pMGLRZHarF0yOIhzjRR+A2ahKAgqOCxy5VS+0IYQFFke4ng/tdKPXieBt
iVkv/VTmd60AJRkQum2awoiHyb+gGDyk8tv8rp8MRfMQttLEmz2xyLW6rn3bZAdy
u7mrnoHADJMeDtTu9g4HOilLk+JEYze5pqCVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAcptWdrP9Ehbl2/JPxrOaTcQJ4owHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FjcHRXZHJQOUVoYmwyX0pQ
eHJPYVRjUUo0by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq
ARgwDQYJKoZIhvcNAQELBQADggEBABhKuw5q4zWL2CsaMJu2ZtpThfZbuzYBWvzx
k5vEmAN/qmB62tFdtJLiSj3GZPkUCIxoTFHHoqcr3aqbrAZAyOFXNYVF5R73sq7j
DkU6dlWS/DP61OsiGFXWgkPw1pNlLVDq55+F27T7g20S73eNLOuSGKsmlgAiaCgd
9TI1LJxpmmEhSZ8+kqOfrxlOxMGSGnxrZptQ6g5QF+xtSlwWNpZgHkJNCu8tNTEF
Ptab1O/EX0E2UX62bEmFybv9ddGMxaUjxPbTmXf/Fpx0AsR4Izx4apM2JaUzRSi/
txo6QLSJlztK4y/M10MvRbiGnkR3J309MOC6PtmD18ajsni7Du4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:34 2025 by rpki-client