Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LkvT1ssfadKgzFcol71NOhG4WvQ.roa
File: LkvT1ssfadKgzFcol71NOhG4WvQ.roa (raw, json)
Hash identifier: DxZJGEOQxCnyqyL7ZXbNcptB5Y+UBVnBW6HbuxWjAy0=
Subject key identifier: 2E:4B:D3:D6:CB:1F:69:D2:A0:CC:57:28:97:BD:4D:3A:11:B8:5A:F4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2148
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LkvT1ssfadKgzFcol71NOhG4WvQ.roa
Signing time: Fri 25 Nov 2022 04:39:44 +0000
ROA not before: Fri 25 Nov 2022 04:39:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.48.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8520 (0x2148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2E4BD3D6CB1F69D2A0CC572897BD4D3A11B85AF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:24:4b:50:47:6e:df:fa:33:95:bd:19:6a:
ee:3e:51:18:dc:bd:d8:1f:3d:bb:af:4e:6f:68:8e:
c7:50:5e:c2:da:11:96:10:5f:27:c1:22:19:04:7c:
73:63:c4:98:54:91:67:66:16:27:85:89:a1:93:4b:
6b:fa:e3:72:c5:a3:5a:a6:db:9e:97:b5:a6:03:56:
a5:9c:1c:0e:ca:32:2b:d5:a3:11:56:27:7d:47:21:
79:d4:f8:c0:13:fb:5a:fb:5d:99:b3:39:b6:4d:1b:
0c:a7:72:3c:2f:0f:4e:eb:89:c9:07:92:fb:39:08:
02:7c:5e:61:16:a5:ec:cd:70:bb:18:47:ac:ac:8e:
ed:16:12:48:99:a8:45:3e:44:a3:91:f7:6e:05:cb:
dd:f2:42:de:04:f3:d4:04:f4:d3:8c:e4:37:0d:c2:
74:9a:be:11:7b:c1:21:f7:94:05:70:7a:a8:f6:66:
50:73:46:8c:eb:75:64:cf:bd:59:95:b0:80:de:a6:
9a:97:1a:77:d5:77:c4:68:4b:c3:fd:f9:7b:47:7f:
32:b3:ed:d6:02:70:9b:2c:b7:d2:d6:8f:d4:00:41:
68:44:87:70:cf:8c:c7:94:7a:75:85:5d:3c:ec:94:
5b:68:7c:d2:5b:be:35:e6:13:a4:50:1b:4c:42:44:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4B:D3:D6:CB:1F:69:D2:A0:CC:57:28:97:BD:4D:3A:11:B8:5A:F4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LkvT1ssfadKgzFcol71NOhG4WvQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.48.0/23
Signature Algorithm: sha256WithRSAEncryption
87:4b:11:01:6a:76:b0:57:db:e7:8d:09:8f:46:2b:2a:47:be:
cb:94:82:8c:00:ae:d7:87:32:56:c1:66:67:16:68:75:6d:49:
aa:47:a5:3b:b5:ee:c1:e3:5e:5c:b0:10:5a:27:66:f5:66:4a:
61:fc:45:80:3d:d9:0b:58:e0:b8:ba:ef:2c:25:51:07:25:7c:
d3:3a:22:fb:0a:f7:f6:2c:be:e8:8d:8a:4e:55:81:c2:69:dd:
0a:c4:4d:d1:1b:a2:81:36:e9:7a:c7:37:42:18:b2:1f:94:7c:
97:34:38:f9:9c:e3:d7:6e:1c:f2:65:23:c7:54:b7:23:7d:e2:
da:d2:33:cd:ad:04:34:50:d1:31:cd:ff:fa:1a:1c:08:aa:c6:
5c:b7:55:e1:2c:bc:de:a1:78:09:86:b5:13:85:f9:47:3d:e3:
57:db:8e:2d:5d:95:0a:22:ce:b0:c1:48:93:f4:f4:db:18:4a:
a2:c6:a1:68:c4:ab:42:20:e6:84:ca:c5:36:d4:c4:c2:e8:4a:
ce:75:54:95:a8:c0:7f:fe:d0:60:85:36:d6:ca:61:92:5d:e3:
89:56:f3:f4:24:71:3f:37:a6:0e:37:90:80:c2:e3:58:6f:17:
25:de:75:91:32:aa:a8:7a:74:cb:34:c6:72:e0:4d:07:c5:f7:
22:d3:bd:92
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIUgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJFNEJEM0Q2Q0IxRjY5
RDJBMENDNTcyODk3QkQ0RDNBMTFCODVBRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCs4CRLUEdu3/ozlb0Zau4+URjcvdgfPbuvTm9ojsdQXsLaEZYQ
XyfBIhkEfHNjxJhUkWdmFieFiaGTS2v643LFo1qm256XtaYDVqWcHA7KMivVoxFW
J31HIXnU+MAT+1r7XZmzObZNGwyncjwvD07rickHkvs5CAJ8XmEWpezNcLsYR6ys
ju0WEkiZqEU+RKOR924Fy93yQt4E89QE9NOM5DcNwnSavhF7wSH3lAVweqj2ZlBz
RozrdWTPvVmVsIDeppqXGnfVd8RoS8P9+XtHfzKz7dYCcJsst9LWj9QAQWhEh3DP
jMeUenWFXTzslFtofNJbvjXmE6RQG0xCRON/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULkvT1ssfadKgzFcol71NOhG4WvQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0xrdlQxc3NmYWRLZ3pGY29s
NzFOT2hHNFd2US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq
ATAwDQYJKoZIhvcNAQELBQADggEBAIdLEQFqdrBX2+eNCY9GKypHvsuUgowArteH
MlbBZmcWaHVtSapHpTu17sHjXlywEFonZvVmSmH8RYA92QtY4Li67ywlUQclfNM6
IvsK9/YsvuiNik5VgcJp3QrETdEbooE26XrHN0IYsh+UfJc0OPmc49duHPJlI8dU
tyN94trSM82tBDRQ0THN//oaHAiqxly3VeEsvN6heAmGtROF+Uc941fbji1dlQoi
zrDBSJP09NsYSqLGoWjEq0Ig5oTKxTbUxMLoSs51VJWowH/+0GCFNtbKYZJd44lW
8/QkcT83pg43kIDC41hvFyXedZEyqqh6dMs0xnLgTQfF9yLTvZI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org