Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M-qf6qeKT7G_UA1jfUTGrqJjQ2g.roa
File: M-qf6qeKT7G_UA1jfUTGrqJjQ2g.roa (raw, json)
Hash identifier: txsAcEYefmWhiyIMmRz6rGjehEMCbgXdcyPfHpxe6rQ=
Subject key identifier: 33:EA:9F:EA:A7:8A:4F:B1:BF:50:0D:63:7D:44:C6:AE:A2:63:43:68
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2376
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M-qf6qeKT7G_UA1jfUTGrqJjQ2g.roa
Signing time: Fri 16 Dec 2022 03:25:09 +0000
ROA not before: Fri 16 Dec 2022 03:25:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9078 (0x2376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Dec 16 03:25:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=33EA9FEAA78A4FB1BF500D637D44C6AEA2634368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:33:33:32:41:bd:a5:78:41:e5:ca:7d:60:
c3:0a:50:e6:c9:0b:61:2b:59:b2:8d:81:7f:90:5e:
2d:09:6c:fd:74:db:c6:69:91:a1:3f:de:82:a2:ce:
2b:51:2a:45:63:d7:75:30:f0:10:82:6c:de:ad:e5:
c2:11:c5:8e:25:c4:8e:32:17:7f:33:5f:19:99:d5:
f1:18:c0:fc:c4:05:6e:95:3a:e0:44:55:03:32:50:
f6:75:d1:ec:e8:74:76:8f:34:d1:d3:e4:ae:ab:27:
b8:41:18:4a:7f:17:36:1c:b7:02:2e:86:77:df:0c:
db:fe:7b:ca:29:9d:de:53:77:c6:64:fb:39:37:54:
ff:e1:c7:0f:a1:4f:0e:a0:cf:69:b3:2b:de:2d:30:
3e:d3:27:1d:6f:62:e6:26:23:b9:32:20:22:4f:40:
6e:d7:e2:f4:0a:11:04:27:b2:84:52:9b:49:b4:a9:
c9:7f:57:86:79:60:ba:fe:2c:75:6b:35:2f:9e:45:
8c:2f:29:7d:4d:f2:e3:f8:71:cf:e2:d4:e5:ad:9b:
03:57:05:fb:d6:0c:4c:92:d9:ed:82:43:27:43:a2:
a5:5b:80:36:ed:65:7c:bf:55:7d:f8:6c:d0:1a:a8:
39:58:45:8e:4b:33:4f:1c:08:e1:78:8b:64:6f:da:
c3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EA:9F:EA:A7:8A:4F:B1:BF:50:0D:63:7D:44:C6:AE:A2:63:43:68
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M-qf6qeKT7G_UA1jfUTGrqJjQ2g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.44.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:5b:59:ba:74:b4:d7:82:89:de:87:ea:0a:f8:ab:7f:02:40:
2d:23:04:c0:9b:8d:40:4f:52:00:0e:74:2a:09:5f:57:e2:d5:
a3:06:c1:66:a6:03:94:49:62:45:5d:a2:00:45:4b:62:53:8f:
df:92:10:67:f9:cb:0e:af:0f:4c:31:8d:e7:71:a5:3c:d9:62:
fa:80:9d:25:61:68:59:e4:de:09:49:4f:6c:69:0f:e1:60:9c:
dd:ba:c6:f3:e3:4f:ff:f5:7c:8a:24:af:95:91:32:ac:32:e1:
8b:8d:7e:46:03:af:c1:25:05:eb:a7:02:88:e3:35:c4:e9:bb:
35:d3:be:b1:40:49:26:77:d7:ed:ae:04:2d:91:c3:e6:20:c8:
ed:6b:78:84:8c:99:a1:9b:b5:81:b8:c5:4a:dd:ea:f5:ee:81:
57:d6:9b:9a:aa:b5:50:4f:ab:3d:10:65:63:ad:df:ec:bb:88:
85:18:b9:3c:23:76:70:20:56:89:c3:62:65:67:5e:2f:3c:11:
54:bc:51:52:10:d6:da:9f:41:69:a7:06:8f:8a:6f:16:45:e0:
64:35:11:fc:d4:50:fa:32:25:ac:36:c7:c5:1b:40:02:ad:e5:
58:22:6d:72:87:86:41:59:fb:9c:e8:7d:a6:bb:16:eb:68:c6:
ce:14:85:f1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICI3YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjEyMTYw
MzI1MDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDMzRUE5RkVBQTc4QTRG
QjFCRjUwMEQ2MzdENDRDNkFFQTI2MzQzNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC56DMzMkG9pXhB5cp9YMMKUObJC2ErWbKNgX+QXi0JbP1028Zp
kaE/3oKizitRKkVj13Uw8BCCbN6t5cIRxY4lxI4yF38zXxmZ1fEYwPzEBW6VOuBE
VQMyUPZ10ezodHaPNNHT5K6rJ7hBGEp/FzYctwIuhnffDNv+e8opnd5Td8Zk+zk3
VP/hxw+hTw6gz2mzK94tMD7TJx1vYuYmI7kyICJPQG7X4vQKEQQnsoRSm0m0qcl/
V4Z5YLr+LHVrNS+eRYwvKX1N8uP4cc/i1OWtmwNXBfvWDEyS2e2CQydDoqVbgDbt
ZXy/VX34bNAaqDlYRY5LM08cCOF4i2Rv2sPzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUM+qf6qeKT7G/UA1jfUTGrqJjQ2gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL00tcWY2cWVLVDdHX1VBMWpm
VVRHcnFKalEyZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
ASwwDQYJKoZIhvcNAQELBQADggEBAB5bWbp0tNeCid6H6gr4q38CQC0jBMCbjUBP
UgAOdCoJX1fi1aMGwWamA5RJYkVdogBFS2JTj9+SEGf5yw6vD0wxjedxpTzZYvqA
nSVhaFnk3glJT2xpD+FgnN26xvPjT//1fIokr5WRMqwy4YuNfkYDr8ElBeunAojj
NcTpuzXTvrFASSZ31+2uBC2Rw+YgyO1reISMmaGbtYG4xUrd6vXugVfWm5qqtVBP
qz0QZWOt3+y7iIUYuTwjdnAgVonDYmVnXi88EVS8UVIQ1tqfQWmnBo+KbxZF4GQ1
EfzUUPoyJaw2x8UbQAKt5VgibXKHhkFZ+5zofaa7Futoxs4UhfE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org