Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KwzSOMeF-vXEYF1qdx3dzoXLInE.roa
File: KwzSOMeF-vXEYF1qdx3dzoXLInE.roa (raw, json)
Hash identifier: GgALtRhnmPaftvONvwPDXbyb+O2PByyhvXWcsM3KSPY=
Subject key identifier: 2B:0C:D2:38:C7:85:FA:F5:C4:60:5D:6A:77:1D:DD:CE:85:CB:22:71
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2235
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KwzSOMeF-vXEYF1qdx3dzoXLInE.roa
Signing time: Fri 25 Nov 2022 04:40:54 +0000
ROA not before: Fri 25 Nov 2022 04:40:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8757 (0x2235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2B0CD238C785FAF5C4605D6A771DDDCE85CB2271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:6d:97:ae:f9:67:ce:7d:17:17:73:f6:36:
d9:b7:07:55:26:9c:d5:ab:d7:ce:0c:22:c8:b2:8e:
93:2e:77:2d:7a:d9:45:2f:cf:b0:53:af:c2:19:54:
e7:f8:79:ab:35:f0:87:95:4e:ed:4b:b7:7a:fa:20:
06:3c:e0:5a:83:e1:34:66:b9:19:3c:bc:a0:17:9e:
d8:e9:b1:48:96:68:b0:f6:a9:f8:89:de:c4:f1:b0:
ad:c2:84:9f:c4:10:f9:ca:c9:3a:ad:b4:7b:bf:63:
c8:65:15:89:ce:68:c9:98:83:04:04:6f:d5:17:7d:
08:8e:2c:1c:70:1a:2f:d4:33:8d:ed:41:7a:23:6a:
d7:f9:c0:6f:10:77:94:03:b9:5b:5c:e3:1d:48:36:
28:b5:38:21:a2:d5:37:b6:6c:70:b1:31:31:7a:ff:
e6:f3:eb:24:ed:a4:f4:ca:84:15:1e:b6:da:35:dd:
af:4b:05:a3:66:fe:26:35:c3:f7:8e:4f:3c:a8:00:
24:e8:68:22:13:f5:89:44:17:b9:78:92:84:df:60:
40:08:c2:8f:5c:ec:8c:10:d1:62:55:ab:e5:33:cd:
0f:fd:41:6f:ef:c0:71:af:3a:06:09:52:ff:34:c9:
9a:8a:c8:d7:27:63:0f:15:50:fc:e1:9d:18:89:1a:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0C:D2:38:C7:85:FA:F5:C4:60:5D:6A:77:1D:DD:CE:85:CB:22:71
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KwzSOMeF-vXEYF1qdx3dzoXLInE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.69.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:85:f8:15:18:06:98:46:58:7f:b3:58:f2:c7:fa:53:ed:be:
be:fc:59:fc:17:36:fb:cd:72:15:0b:f2:a6:0b:6a:9e:06:a3:
49:01:8e:e3:06:53:92:be:40:bc:f2:a2:73:c3:39:b7:fe:1f:
e7:eb:68:1e:9b:a9:b2:33:38:c1:91:cc:e2:07:11:bc:38:af:
1e:c6:5c:36:e8:4c:ab:60:db:7a:5c:d6:69:9a:3d:0c:9f:c8:
56:3e:8e:51:aa:9e:55:d2:25:be:a8:d6:95:1d:f0:39:12:92:
00:b6:14:95:9b:f5:49:da:6b:79:0e:88:e5:e7:50:35:e0:81:
e2:9f:29:88:70:96:93:c4:0f:b7:7c:d0:f9:8c:9f:d0:37:6f:
9f:41:a8:52:f2:1d:c3:f8:ea:2f:75:4a:35:d4:4d:db:96:89:
9b:30:87:5e:9c:44:24:2c:dc:b5:44:1f:ac:4a:75:48:55:06:
9a:6b:dd:c1:5f:4f:f1:b2:71:b4:4c:dc:cb:59:cc:a3:4c:53:
97:d6:e2:a8:a8:c6:60:15:06:53:5e:5a:58:c3:61:b9:eb:9c:
f1:ab:45:6f:f4:9d:93:07:6d:da:76:ec:f8:0a:0d:e6:d4:9a:
92:b3:7b:9b:0c:37:cd:a3:39:3e:c9:e4:c5:2b:3e:ef:4d:03:
45:ea:5b:1c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIjUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwNTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJCMENEMjM4Qzc4NUZB
RjVDNDYwNUQ2QTc3MURERENFODVDQjIyNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQsW2Xrvlnzn0XF3P2Ntm3B1UmnNWr184MIsiyjpMudy162UUv
z7BTr8IZVOf4eas18IeVTu1Lt3r6IAY84FqD4TRmuRk8vKAXntjpsUiWaLD2qfiJ
3sTxsK3ChJ/EEPnKyTqttHu/Y8hlFYnOaMmYgwQEb9UXfQiOLBxwGi/UM43tQXoj
atf5wG8Qd5QDuVtc4x1INii1OCGi1Te2bHCxMTF6/+bz6yTtpPTKhBUetto13a9L
BaNm/iY1w/eOTzyoACToaCIT9YlEF7l4koTfYEAIwo9c7IwQ0WJVq+UzzQ/9QW/v
wHGvOgYJUv80yZqKyNcnYw8VUPzhnRiJGsF5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKwzSOMeF+vXEYF1qdx3dzoXLInEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0t3elNPTWVGLXZYRVlGMXFk
eDNkem9YTEluRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AUUwDQYJKoZIhvcNAQELBQADggEBAK6F+BUYBphGWH+zWPLH+lPtvr78WfwXNvvN
chUL8qYLap4Go0kBjuMGU5K+QLzyonPDObf+H+fraB6bqbIzOMGRzOIHEbw4rx7G
XDboTKtg23pc1mmaPQyfyFY+jlGqnlXSJb6o1pUd8DkSkgC2FJWb9Unaa3kOiOXn
UDXggeKfKYhwlpPED7d80PmMn9A3b59BqFLyHcP46i91SjXUTduWiZswh16cRCQs
3LVEH6xKdUhVBppr3cFfT/GycbRM3MtZzKNMU5fW4qioxmAVBlNeWljDYbnrnPGr
RW/0nZMHbdp27PgKDebUmpKze5sMN82jOT7J5MUrPu9NA0XqWxw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org