Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ml10RXFJdWGiADysW5XJfiPa5O8.roa
File: Ml10RXFJdWGiADysW5XJfiPa5O8.roa (raw, json)
Hash identifier: zk+1yl75UWBOuBbKNhkc7wvRqW1QkZOxasPyd86bNKY=
Subject key identifier: 32:5D:74:45:71:49:75:61:A2:00:3C:AC:5B:95:C9:7E:23:DA:E4:EF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F4E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ml10RXFJdWGiADysW5XJfiPa5O8.roa
Signing time: Tue 29 Sep 2020 09:56:46 +0000
ROA not before: Tue 29 Sep 2020 09:56:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3918 (0xf4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=325D744571497561A2003CAC5B95C97E23DAE4EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:96:1d:20:3b:11:3e:0d:36:dd:25:7d:74:
87:b5:bf:0b:43:72:ec:f6:7c:96:86:83:35:77:c0:
cc:c8:fb:32:eb:61:2b:e7:22:02:56:ea:65:1d:0f:
5f:ef:d0:3f:2e:fd:dc:59:46:24:69:de:6c:ec:db:
d0:bc:f2:7d:8b:f3:15:3b:1d:61:5e:a5:76:c7:6b:
94:b0:12:28:43:98:0c:26:d0:76:79:50:fd:54:89:
0f:bf:3c:d1:fb:d8:d7:a5:8d:9f:c5:80:12:0a:15:
bb:bb:b5:9d:bf:cb:6c:3d:99:0a:63:2d:59:da:69:
76:d0:5a:a6:13:b8:00:8a:8a:00:7b:fa:1d:24:ee:
15:7f:37:21:8c:2c:18:26:f3:b5:fa:75:51:34:10:
79:a6:77:92:c6:9b:e1:70:8c:db:f5:0b:bd:84:64:
d5:47:54:ea:c8:ad:a3:43:a6:05:c8:cd:d6:54:ce:
6c:37:5d:05:d3:24:f9:75:31:e5:ea:aa:ef:02:2d:
7a:b5:70:45:ee:50:48:87:3e:1a:df:10:f6:2a:b6:
30:5a:f0:1c:db:be:6a:28:68:24:fc:ba:d7:11:77:
b3:c9:b4:36:48:02:7a:a1:b9:01:93:f8:e5:7a:90:
b8:7e:79:77:10:db:4d:a6:4a:f1:f5:2b:8e:d8:92:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5D:74:45:71:49:75:61:A2:00:3C:AC:5B:95:C9:7E:23:DA:E4:EF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ml10RXFJdWGiADysW5XJfiPa5O8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:11:07:33:14:79:dd:9b:5c:31:ca:5c:bb:90:ab:63:ab:45:
9a:85:93:2a:9f:fa:53:5f:dc:85:7c:40:09:e0:3e:ee:64:24:
52:46:8b:1e:2e:a2:fe:8b:75:b5:ba:a0:ce:f3:f6:82:43:ad:
ea:17:e9:e9:fe:8d:43:d6:81:27:3c:74:ea:f6:f0:64:34:63:
74:a0:e7:b6:fb:7e:89:14:40:de:e9:8d:66:9c:8c:ed:1e:0e:
48:0c:34:83:98:7a:69:55:7e:4a:ed:a6:4e:44:8f:cf:d3:40:
d4:ae:8d:9e:be:38:43:c3:28:5f:04:3b:90:22:93:2d:2e:71:
f4:b0:fa:ad:60:83:2b:1a:04:4d:c5:ca:42:c2:74:2b:96:0f:
21:8e:d4:fc:26:62:10:f8:0f:45:75:56:70:28:86:6e:7a:c2:
7e:4b:ce:b7:2a:ad:a7:81:25:a5:7e:f4:4a:00:74:3d:d7:6f:
17:fe:d5:92:ab:3e:ea:4f:27:f2:6a:38:3c:e8:ad:4b:82:18:
87:42:3a:fe:d5:bf:59:55:c4:22:ab:a8:02:30:68:eb:a6:d8:
fa:8f:dd:04:49:0a:97:9f:c4:b1:25:42:bd:72:00:b6:ea:13:
33:74:1d:d7:c4:b1:1c:fe:60:3a:95:ad:24:8d:08:13:f3:f6:
e7:66:27:e0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD04wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2NDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDMyNUQ3NDQ1NzE0OTc1
NjFBMjAwM0NBQzVCOTVDOTdFMjNEQUU0RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK0ZYdIDsRPg023SV9dIe1vwtDcuz2fJaGgzV3wMzI+zLrYSvn
IgJW6mUdD1/v0D8u/dxZRiRp3mzs29C88n2L8xU7HWFepXbHa5SwEihDmAwm0HZ5
UP1UiQ+/PNH72NeljZ/FgBIKFbu7tZ2/y2w9mQpjLVnaaXbQWqYTuACKigB7+h0k
7hV/NyGMLBgm87X6dVE0EHmmd5LGm+FwjNv1C72EZNVHVOrIraNDpgXIzdZUzmw3
XQXTJPl1MeXqqu8CLXq1cEXuUEiHPhrfEPYqtjBa8BzbvmooaCT8utcRd7PJtDZI
AnqhuQGT+OV6kLh+eXcQ202mSvH1K47YkulLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUMl10RXFJdWGiADysW5XJfiPa5O8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL01sMTBSWEZKZFdHaUFEeXNX
NVhKZmlQYTVPOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AaYwDQYJKoZIhvcNAQELBQADggEBAH8RBzMUed2bXDHKXLuQq2OrRZqFkyqf+lNf
3IV8QAngPu5kJFJGix4uov6LdbW6oM7z9oJDreoX6en+jUPWgSc8dOr28GQ0Y3Sg
57b7fokUQN7pjWacjO0eDkgMNIOYemlVfkrtpk5Ej8/TQNSujZ6+OEPDKF8EO5Ai
ky0ucfSw+q1ggysaBE3FykLCdCuWDyGO1PwmYhD4D0V1VnAohm56wn5LzrcqraeB
JaV+9EoAdD3Xbxf+1ZKrPupPJ/JqODzorUuCGIdCOv7Vv1lVxCKrqAIwaOum2PqP
3QRJCpefxLElQr1yALbqEzN0HdfEsRz+YDqVrSSNCBPz9udmJ+A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org