Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FDVhJ5wMR_yD9pOT2k0De5NayzM.roa
File: FDVhJ5wMR_yD9pOT2k0De5NayzM.roa (raw, json)
Hash identifier: h2eZ8AfMnImfEmmY2mq3fQZ1eVOOZAT7cZJTdkTiCgk=
Subject key identifier: 14:35:61:27:9C:0C:47:FC:83:F6:93:93:DA:4D:03:7B:93:5A:CB:33
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FF6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FDVhJ5wMR_yD9pOT2k0De5NayzM.roa
Signing time: Wed 23 Nov 2022 08:29:19 +0000
ROA not before: Wed 23 Nov 2022 08:29:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8182 (0x1ff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 23 08:29:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=143561279C0C47FC83F69393DA4D037B935ACB33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:8d:e1:da:f4:7c:51:76:8a:0c:64:1c:81:
5c:48:ad:2a:cf:15:35:b9:c3:a7:59:c1:b5:db:36:
af:03:ef:77:fb:a2:c8:f8:28:40:de:d3:f0:22:a0:
a1:dd:9e:fc:77:95:11:ab:eb:ec:2f:d7:b6:ed:47:
05:37:46:c0:66:d9:1b:2e:fd:dd:59:b5:f2:87:f5:
3d:e8:c8:00:2a:39:df:21:08:23:8a:e9:dd:a4:78:
48:23:88:30:97:eb:4e:96:12:e6:24:e3:86:8f:d8:
67:5c:bd:25:1c:14:c7:e1:e7:75:f3:4c:e9:8d:aa:
80:21:03:ee:04:f2:a8:5d:7e:0a:94:1e:13:90:43:
10:59:8c:7e:57:74:b8:a8:d7:e1:ce:bd:08:2d:72:
c5:5b:7f:67:64:2b:9e:e6:51:7e:37:17:1a:33:7f:
29:cf:4e:69:b8:9d:68:d5:4e:b6:c5:63:cf:7d:64:
b6:e5:8c:50:96:16:d0:8d:f5:3c:73:8a:c7:3f:88:
6c:e3:fc:ae:94:58:96:27:4b:d3:72:91:3b:9b:dc:
6e:03:30:c0:1d:3b:7b:76:1d:07:08:7e:6f:9f:a5:
8f:f2:e9:e0:f5:a3:00:28:52:fb:b2:fb:4b:3b:46:
32:cc:3f:0c:28:e6:88:fe:cb:a8:5b:7a:1e:6f:26:
5a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:35:61:27:9C:0C:47:FC:83:F6:93:93:DA:4D:03:7B:93:5A:CB:33
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FDVhJ5wMR_yD9pOT2k0De5NayzM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.100.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:3b:8d:60:64:91:2f:c5:5e:85:6f:2e:8e:f8:70:cd:22:5b:
1c:3d:63:79:f5:9e:0d:c0:f3:a5:40:b7:89:7f:a7:1e:05:1a:
62:21:f0:3d:7c:86:d3:14:ba:1c:90:69:08:20:36:fe:7b:74:
fc:bd:28:62:88:83:52:5a:3a:7b:11:e3:ff:9d:e5:db:23:a3:
4f:d1:10:8a:8e:44:43:68:fd:ec:26:8d:c3:ec:70:16:cd:e2:
37:ca:31:f5:fd:66:ef:9d:ec:4f:63:66:53:71:9e:91:cf:56:
28:4b:94:29:54:52:b5:09:4e:a6:c0:e8:0a:2c:b9:ac:97:08:
e9:b4:32:49:f5:bd:26:7d:d1:62:fe:56:8d:ec:54:e6:f4:08:
47:6f:7d:2e:6f:17:3c:e5:47:36:6e:18:01:25:96:14:f9:77:
f4:c7:bb:f4:c3:3a:d3:73:8f:51:d8:69:37:76:e1:ee:c3:f1:
cf:24:34:10:05:0a:38:a1:d9:07:84:ee:c4:f8:18:01:c1:59:
51:39:41:63:4d:b9:2d:8a:06:0c:55:71:24:e0:b8:37:be:a8:
cb:e3:e2:22:db:44:9e:ea:94:98:70:98:a8:0b:80:11:c4:52:
61:06:d6:d4:d9:33:ef:70:a0:35:0a:1b:8c:ea:6c:42:73:4d:
40:55:80:e7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH/YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjMw
ODI5MTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE0MzU2MTI3OUMwQzQ3
RkM4M0Y2OTM5M0RBNEQwMzdCOTM1QUNCMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAT43h2vR8UXaKDGQcgVxIrSrPFTW5w6dZwbXbNq8D73f7osj4
KEDe0/AioKHdnvx3lRGr6+wv17btRwU3RsBm2Rsu/d1ZtfKH9T3oyAAqOd8hCCOK
6d2keEgjiDCX606WEuYk44aP2GdcvSUcFMfh53XzTOmNqoAhA+4E8qhdfgqUHhOQ
QxBZjH5XdLio1+HOvQgtcsVbf2dkK57mUX43FxozfynPTmm4nWjVTrbFY899ZLbl
jFCWFtCN9Txzisc/iGzj/K6UWJYnS9NykTub3G4DMMAdO3t2HQcIfm+fpY/y6eD1
owAoUvuy+0s7RjLMPwwo5oj+y6hbeh5vJlodAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFDVhJ5wMR/yD9pOT2k0De5NayzMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZEVmhKNXdNUl95RDlwT1Qy
azBEZTVOYXl6TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AWQwDQYJKoZIhvcNAQELBQADggEBAJs7jWBkkS/FXoVvLo74cM0iWxw9Y3n1ng3A
86VAt4l/px4FGmIh8D18htMUuhyQaQggNv57dPy9KGKIg1JaOnsR4/+d5dsjo0/R
EIqORENo/ewmjcPscBbN4jfKMfX9Zu+d7E9jZlNxnpHPVihLlClUUrUJTqbA6Aos
uayXCOm0Mkn1vSZ90WL+Vo3sVOb0CEdvfS5vFzzlRzZuGAEllhT5d/THu/TDOtNz
j1HYaTd24e7D8c8kNBAFCjih2QeE7sT4GAHBWVE5QWNNuS2KBgxVcSTguDe+qMvj
4iLbRJ7qlJhwmKgLgBHEUmEG1tTZM+9woDUKG4zqbEJzTUBVgOc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org