Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B5mX6FUQM8zCI_cqYq_QlBGSZn0.roa
File: B5mX6FUQM8zCI_cqYq_QlBGSZn0.roa (raw, json)
Hash identifier: TBU+mLvATckaAAhXgNbOWmHX3SiIs7iovrMiW0Up7zg=
Subject key identifier: 07:99:97:E8:55:10:33:CC:C2:23:F7:2A:62:AF:D0:94:11:92:66:7D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CB2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B5mX6FUQM8zCI_cqYq_QlBGSZn0.roa
Signing time: Wed 29 Sep 2021 02:48:04 +0000
ROA not before: Wed 29 Sep 2021 02:48:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7346 (0x1cb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=079997E8551033CCC223F72A62AFD0941192667D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:61:ff:41:4b:97:6f:6d:5b:77:8a:4c:5a:
cc:fd:43:26:50:31:e8:17:3e:4e:49:b7:48:91:6f:
5f:29:20:bc:86:59:48:ef:8c:33:13:fc:76:d0:b8:
bc:a9:02:50:9d:c2:ed:ea:92:10:25:f5:6e:22:ca:
0c:18:dd:dd:90:15:cf:0c:76:b5:e7:1d:c3:a1:23:
21:7c:58:cc:83:f1:fe:bf:49:77:ee:d2:0d:f8:c0:
e7:d0:68:50:ef:25:94:4b:c4:bb:b6:d9:f3:90:3b:
67:57:61:64:1b:ee:96:83:8e:05:b9:aa:bf:ee:53:
d0:23:a3:6a:1c:e7:7e:c0:61:6f:f8:90:04:45:8b:
a9:cd:8b:50:d4:d4:ca:8e:7f:15:a1:92:f6:05:f2:
23:c4:37:af:0f:67:67:84:ea:3d:30:48:03:ba:6e:
d6:a2:43:00:34:64:11:ff:f8:3d:fb:66:1f:94:a5:
cd:2c:a0:b9:ae:5e:6c:fc:ca:95:ca:39:28:96:6f:
6c:3e:0d:99:03:fa:e5:d2:73:31:55:86:ef:79:5b:
43:7d:6b:0c:5c:8f:92:bc:25:32:85:d8:47:e0:e1:
f5:c6:be:ed:5a:b2:95:a5:f9:09:9f:8a:48:94:f6:
21:9a:e3:1b:2a:2c:84:87:fa:57:83:c9:48:e7:36:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:99:97:E8:55:10:33:CC:C2:23:F7:2A:62:AF:D0:94:11:92:66:7D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B5mX6FUQM8zCI_cqYq_QlBGSZn0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:54:5e:fd:2f:0b:58:79:7d:0b:ed:d5:a6:7c:e3:7c:f3:ce:
a0:ab:24:28:1c:d8:40:eb:e6:10:9e:f7:4b:20:e9:b8:96:cc:
f7:bd:47:b2:92:9c:1f:ee:8b:ad:d3:5c:cb:04:a5:19:1a:04:
b0:ca:1d:2a:2e:5f:85:99:00:3f:47:65:c6:41:03:7b:0a:77:
03:8c:55:7f:35:4e:1e:49:1b:e8:98:1e:50:9b:6d:6b:0d:b8:
a2:67:bf:f6:73:38:e6:ac:2c:aa:c1:5c:73:66:a8:bd:1e:06:
a7:91:ff:c4:d4:d5:9a:77:55:75:a0:d5:b2:9c:79:62:31:5b:
9b:6e:65:10:db:3e:a8:a7:c2:9a:f1:ed:9a:0c:e1:b8:67:c5:
f6:05:a6:6f:b3:8f:e1:ed:09:56:90:96:6d:56:d0:46:15:d8:
34:8e:40:dc:90:98:1c:4d:c2:53:a5:14:5e:e7:20:80:c3:ca:
76:e8:9c:ca:2d:71:d3:1c:5a:c4:10:82:00:e1:0d:7b:bb:8b:
f0:6c:8e:10:8e:78:5f:6f:e6:ec:c2:cc:38:91:76:93:7f:db:
c2:1e:43:e2:9c:4f:d8:b6:7c:a8:e7:32:41:fe:d7:74:05:49:
1c:45:ea:78:67:39:c9:40:f8:07:03:3d:7e:b7:14:d0:32:34:
84:4e:5a:a0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHLIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4MDRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDA3OTk5N0U4NTUxMDMz
Q0NDMjIzRjcyQTYyQUZEMDk0MTE5MjY2N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIiWH/QUuXb21bd4pMWsz9QyZQMegXPk5Jt0iRb18pILyGWUjv
jDMT/HbQuLypAlCdwu3qkhAl9W4iygwY3d2QFc8MdrXnHcOhIyF8WMyD8f6/SXfu
0g34wOfQaFDvJZRLxLu22fOQO2dXYWQb7paDjgW5qr/uU9Ajo2oc537AYW/4kARF
i6nNi1DU1MqOfxWhkvYF8iPEN68PZ2eE6j0wSAO6btaiQwA0ZBH/+D37Zh+Upc0s
oLmuXmz8ypXKOSiWb2w+DZkD+uXSczFVhu95W0N9awxcj5K8JTKF2Efg4fXGvu1a
spWl+QmfikiU9iGa4xsqLISH+leDyUjnNniJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUB5mX6FUQM8zCI/cqYq/QlBGSZn0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0I1bVg2RlVRTTh6Q0lfY3FZ
cV9RbEJHU1puMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AaQwDQYJKoZIhvcNAQELBQADggEBAAxUXv0vC1h5fQvt1aZ843zzzqCrJCgc2EDr
5hCe90sg6biWzPe9R7KSnB/ui63TXMsEpRkaBLDKHSouX4WZAD9HZcZBA3sKdwOM
VX81Th5JG+iYHlCbbWsNuKJnv/ZzOOasLKrBXHNmqL0eBqeR/8TU1Zp3VXWg1bKc
eWIxW5tuZRDbPqinwprx7ZoM4bhnxfYFpm+zj+HtCVaQlm1W0EYV2DSOQNyQmBxN
wlOlFF7nIIDDynbonMotcdMcWsQQggDhDXu7i/BsjhCOeF9v5uzCzDiRdpN/28Ie
Q+KcT9i2fKjnMkH+13QFSRxF6nhnOclA+AcDPX63FNAyNIROWqA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org