Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OIxei6jJR00O0SgMabsT6NPFYks.roa
File: OIxei6jJR00O0SgMabsT6NPFYks.roa (raw, json)
Hash identifier: LdRBP1aSAA+cNV2CSw6Jb+Q9nq6jEfzW86s2U1V/kRo=
Subject key identifier: 38:8C:5E:8B:A8:C9:47:4D:0E:D1:28:0C:69:BB:13:E8:D3:C5:62:4B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OIxei6jJR00O0SgMabsT6NPFYks.roa
Signing time: Thu 15 Sep 2022 02:46:23 +0000
ROA not before: Thu 15 Sep 2022 02:46:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=388C5E8BA8C9474D0ED1280C69BB13E8D3C5624B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:1d:16:e8:73:4b:89:87:be:de:0e:4f:0e:
67:e1:54:5e:ec:6f:30:8e:ee:31:09:ee:7e:88:78:
2b:e5:7a:cf:da:03:6a:5a:49:a3:25:87:6c:b5:28:
97:33:97:60:a4:b2:11:fe:c9:a2:e4:4e:de:83:03:
c7:de:b1:96:63:fb:22:66:67:18:92:9d:90:2b:d5:
f9:b5:c8:45:6d:ee:76:bd:18:71:42:26:f1:af:ed:
7b:c6:1b:63:0f:96:b8:4c:b4:e2:40:09:6c:75:03:
6d:4f:86:47:d7:cb:ab:58:d6:87:3b:47:c6:dc:20:
17:ea:0d:07:be:fd:1e:e7:f6:6c:a8:6f:67:cd:d5:
e8:b9:70:7b:d2:fa:c0:1e:c3:19:4c:69:7d:eb:e6:
f8:eb:b2:a6:62:d6:d0:f6:03:66:58:1a:31:4d:00:
a5:9d:6d:87:60:e4:f6:91:12:2c:9c:cc:6d:26:1a:
00:d4:1c:17:6c:9d:89:ad:70:0f:33:49:55:05:2a:
c7:fc:06:d9:2e:81:1e:32:d2:14:3d:ab:ab:47:f5:
3b:78:2d:cd:56:d1:3d:02:cd:02:06:24:6d:1b:e9:
57:06:b2:e5:8a:e9:11:66:af:5f:b9:10:78:96:ef:
5d:47:5c:9d:0d:20:d1:d9:78:8d:2c:fa:63:94:e9:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8C:5E:8B:A8:C9:47:4D:0E:D1:28:0C:69:BB:13:E8:D3:C5:62:4B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OIxei6jJR00O0SgMabsT6NPFYks.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.216.0/22
Signature Algorithm: sha256WithRSAEncryption
98:54:11:53:6d:1f:50:64:c1:b5:c7:8b:0d:34:d6:65:a8:f4:
6a:61:ef:b1:7f:f5:d6:38:0b:9c:e6:ba:36:af:27:f0:3c:ed:
83:96:da:d5:1e:9c:e5:db:a9:63:5b:1a:7c:9b:ba:a1:af:65:
73:6b:a2:9a:fe:cd:03:96:72:99:3e:a5:9a:69:e4:73:dc:74:
08:ef:7c:a2:ed:32:bd:39:af:e7:1c:47:36:1d:5b:a1:c6:89:
0c:77:1a:c7:54:f1:ac:3d:d2:7c:55:db:7e:06:4a:13:3e:bc:
d4:fc:71:f6:5e:a5:b3:93:28:7e:e9:5f:0e:1e:78:19:3e:b8:
3f:5f:74:20:f0:3e:0e:ba:2d:93:19:96:18:c8:07:83:cc:2b:
92:36:36:74:ce:1d:ba:44:0a:be:4c:33:f8:a4:4b:95:93:01:
fc:1c:79:6f:69:a3:4f:a7:3c:b6:6e:f6:22:51:f7:dd:a7:3a:
2e:f4:41:e8:5d:15:7d:68:df:2f:23:03:24:09:9f:52:bc:24:
c2:f6:a9:ec:7f:a2:e0:bc:20:66:9b:f4:8a:c7:77:8a:fe:8f:
93:2b:4e:1f:da:b7:4a:08:88:ff:5b:8c:08:2d:0a:8d:4a:42:
e0:88:ea:3d:a6:45:c5:88:d7:bc:84:63:99:ec:52:e7:8e:11:
68:98:d5:be
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MjNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDM4OEM1RThCQThDOTQ3
NEQwRUQxMjgwQzY5QkIxM0U4RDNDNTYyNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCVpB0W6HNLiYe+3g5PDmfhVF7sbzCO7jEJ7n6IeCvles/aA2pa
SaMlh2y1KJczl2CkshH+yaLkTt6DA8fesZZj+yJmZxiSnZAr1fm1yEVt7na9GHFC
JvGv7XvGG2MPlrhMtOJACWx1A21PhkfXy6tY1oc7R8bcIBfqDQe+/R7n9myob2fN
1ei5cHvS+sAewxlMaX3r5vjrsqZi1tD2A2ZYGjFNAKWdbYdg5PaREiyczG0mGgDU
HBdsnYmtcA8zSVUFKsf8BtkugR4y0hQ9q6tH9Tt4Lc1W0T0CzQIGJG0b6VcGsuWK
6RFmr1+5EHiW711HXJ0NINHZeI0s+mOU6YrdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUOIxei6jJR00O0SgMabsT6NPFYkswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09JeGVpNmpKUjAwTzBTZ01h
YnNUNk5QRllrcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AdgwDQYJKoZIhvcNAQELBQADggEBAJhUEVNtH1BkwbXHiw001mWo9Gph77F/9dY4
C5zmujavJ/A87YOW2tUenOXbqWNbGnybuqGvZXNropr+zQOWcpk+pZpp5HPcdAjv
fKLtMr05r+ccRzYdW6HGiQx3GsdU8aw90nxV234GShM+vNT8cfZepbOTKH7pXw4e
eBk+uD9fdCDwPg66LZMZlhjIB4PMK5I2NnTOHbpECr5MM/ikS5WTAfwceW9po0+n
PLZu9iJR992nOi70QehdFX1o3y8jAyQJn1K8JML2qex/ouC8IGab9IrHd4r+j5Mr
Th/at0oIiP9bjAgtCo1KQuCI6j2mRcWI17yEY5nsUueOEWiY1b4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:07 2025 by rpki-client