Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ILVPRG_QS4txCjBj_VQHkDh4O6s.roa
File: ILVPRG_QS4txCjBj_VQHkDh4O6s.roa (raw, json)
Hash identifier: GBKPRUrFVX5NEQE5KnycNk/LJsPkBosJmrmvafhnyuM=
Subject key identifier: 20:B5:4F:44:6F:D0:4B:8B:71:0A:30:63:FD:54:07:90:38:78:3B:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BC9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ILVPRG_QS4txCjBj_VQHkDh4O6s.roa
Signing time: Wed 29 Sep 2021 02:47:00 +0000
ROA not before: Wed 29 Sep 2021 02:47:00 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7113 (0x1bc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:00 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=20B54F446FD04B8B710A3063FD54079038783BAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:ae:22:95:f8:be:fa:5f:30:4c:2a:0f:12:
61:ac:4f:84:5c:87:12:cf:56:31:1f:59:17:c9:2f:
d6:12:a8:21:32:1a:90:0a:26:5a:da:fd:a6:ed:5a:
ba:95:3a:60:06:00:1a:ec:c4:fd:14:9a:ed:0e:10:
dd:35:03:df:33:24:65:a8:49:43:2c:68:e5:e2:3e:
82:e7:d1:7f:c6:46:09:13:0d:f2:5c:0a:86:e3:2d:
61:6c:3e:6f:39:fe:e2:8e:78:be:86:97:dd:dc:cf:
42:7f:7b:ca:55:85:e9:59:9a:c6:f8:27:2f:00:4b:
a0:7f:b1:b6:e5:c7:ca:24:db:9b:02:9b:64:cf:3e:
de:ce:05:33:35:76:85:4e:9d:3f:23:d4:c6:67:71:
69:e8:9c:ab:c6:41:b5:cc:98:0e:e8:e2:25:35:44:
53:1f:f1:19:96:93:29:77:f2:a3:11:7a:a7:24:99:
93:c6:b8:ee:14:c1:96:2a:8b:f1:27:ee:7f:95:e3:
ed:0d:f7:4a:21:62:8a:3a:1b:3b:02:a8:8c:de:c0:
cb:92:e7:fe:63:96:58:ac:5f:05:4a:04:bb:35:cf:
7a:aa:73:a9:ae:c1:53:58:77:0b:c7:87:7f:bb:af:
3a:1c:2f:eb:1c:04:a5:c3:bb:35:d9:63:63:a4:0c:
13:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B5:4F:44:6F:D0:4B:8B:71:0A:30:63:FD:54:07:90:38:78:3B:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ILVPRG_QS4txCjBj_VQHkDh4O6s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.220.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c6:47:01:07:78:96:d0:05:21:51:e8:e8:b1:19:d2:5d:66:
3a:41:26:a2:72:0e:9e:f5:c1:94:54:17:3a:fe:be:ca:17:b2:
1a:d1:67:4e:b5:f4:b5:92:f1:c5:2d:fb:9b:2a:ab:7a:94:b7:
84:2e:f8:f1:53:81:29:9b:12:71:4b:4e:b1:66:14:15:39:f5:
fa:65:4c:c4:96:84:a6:96:9f:3b:af:f6:c5:e4:70:98:6b:20:
dc:b6:9a:dc:fa:74:a0:f1:ac:0e:28:fe:3e:95:9f:79:7f:fc:
74:13:83:c7:95:5f:69:80:88:93:e7:2a:86:e2:10:da:84:93:
6e:c7:4c:23:40:02:1f:2a:95:7e:64:b3:56:49:4d:69:07:d2:
40:ec:ca:df:19:17:54:7b:9d:15:8a:41:f7:f3:fb:55:35:52:
d8:bc:4f:98:80:74:4f:cc:a9:be:86:38:1f:2a:05:30:6a:a9:
2a:fb:6b:7b:e0:7f:9c:d6:57:30:b1:db:02:b2:9f:e8:ea:41:
e5:b0:2d:99:7a:46:ab:57:56:4a:35:6e:5e:70:2b:fd:bf:18:
9b:cf:d7:65:9c:e0:3f:d3:63:a8:8f:92:2b:d9:5c:a4:26:6d:
49:c6:ff:16:b8:fc:56:cb:3b:5f:66:e9:6a:da:8e:4b:50:78:
c4:67:c2:f2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG8kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3MDBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDIwQjU0RjQ0NkZEMDRC
OEI3MTBBMzA2M0ZENTQwNzkwMzg3ODNCQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCT9K4ilfi++l8wTCoPEmGsT4RchxLPVjEfWRfJL9YSqCEyGpAK
Jlra/abtWrqVOmAGABrsxP0Umu0OEN01A98zJGWoSUMsaOXiPoLn0X/GRgkTDfJc
CobjLWFsPm85/uKOeL6Gl93cz0J/e8pVhelZmsb4Jy8AS6B/sbblx8ok25sCm2TP
Pt7OBTM1doVOnT8j1MZncWnonKvGQbXMmA7o4iU1RFMf8RmWkyl38qMReqckmZPG
uO4UwZYqi/En7n+V4+0N90ohYoo6GzsCqIzewMuS5/5jllisXwVKBLs1z3qqc6mu
wVNYdwvHh3+7rzocL+scBKXDuzXZY2OkDBPjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUILVPRG/QS4txCjBj/VQHkDh4O6swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lMVlBSR19RUzR0eENqQmpf
VlFIa0RoNE82cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AdwwDQYJKoZIhvcNAQELBQADggEBAHLGRwEHeJbQBSFR6OixGdJdZjpBJqJyDp71
wZRUFzr+vsoXshrRZ0619LWS8cUt+5sqq3qUt4Qu+PFTgSmbEnFLTrFmFBU59fpl
TMSWhKaWnzuv9sXkcJhrINy2mtz6dKDxrA4o/j6Vn3l//HQTg8eVX2mAiJPnKobi
ENqEk27HTCNAAh8qlX5ks1ZJTWkH0kDsyt8ZF1R7nRWKQffz+1U1Uti8T5iAdE/M
qb6GOB8qBTBqqSr7a3vgf5zWVzCx2wKyn+jqQeWwLZl6RqtXVko1bl5wK/2/GJvP
12Wc4D/TY6iPkivZXKQmbUnG/xa4/FbLO19m6WrajktQeMRnwvI=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-fra.rpki-client.org