Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QiVsJsrovAl6p-59CeTAKLYh854.roa
File: QiVsJsrovAl6p-59CeTAKLYh854.roa (raw, json)
Hash identifier: q6QXmCzZOur7HNY1T2qF/HcLKVpxnuwCqhJk27Q07TM=
Subject key identifier: 42:25:6C:26:CA:E8:BC:09:7A:A7:EE:7D:09:E4:C0:28:B6:21:F3:9E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29F3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QiVsJsrovAl6p-59CeTAKLYh854.roa
Signing time: Fri 01 Sep 2023 10:07:18 +0000
ROA not before: Fri 01 Sep 2023 10:07:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10739 (0x29f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=42256C26CAE8BC097AA7EE7D09E4C028B621F39E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d0:7e:e6:87:be:57:59:a6:05:36:52:f8:a1:
7f:4d:cc:44:32:75:9b:da:c0:ce:7d:3b:48:92:5b:
41:95:e1:18:0d:d1:40:9f:e3:91:af:c7:af:85:98:
3d:99:7f:1b:05:46:52:9a:75:a1:b5:a9:ac:80:4e:
11:99:2d:a3:b2:78:35:1b:84:ec:ce:26:4d:41:e7:
a4:46:35:b8:ef:66:55:1b:d4:62:dd:29:4f:75:ce:
4a:55:7f:fd:a1:06:fd:19:bb:92:ea:d8:16:78:d3:
94:e0:d3:fc:c1:f4:68:46:78:e1:57:46:47:28:87:
ff:2d:a3:a9:08:b2:eb:e8:be:41:58:63:f5:a0:da:
6c:08:68:23:81:0c:1e:9c:6b:ec:de:38:22:33:d7:
07:99:0e:07:a0:8c:d4:bf:a2:d5:55:3c:eb:4c:eb:
40:ca:ab:be:d0:a8:4d:28:8f:2f:33:21:52:f1:da:
41:0d:68:e3:d6:07:e1:9c:32:1a:f9:5c:68:8b:5f:
87:c5:93:a8:aa:39:f8:ef:5b:a8:8b:3f:45:98:d7:
ab:8b:dc:77:25:9e:06:43:41:b7:0b:34:1b:00:4e:
45:c8:80:ea:83:91:9a:54:65:dd:4c:fc:4f:f3:ca:
58:b6:43:25:05:1e:48:67:8c:cf:54:6c:39:b8:7d:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:25:6C:26:CA:E8:BC:09:7A:A7:EE:7D:09:E4:C0:28:B6:21:F3:9E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QiVsJsrovAl6p-59CeTAKLYh854.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.36.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:b4:d7:9e:63:d0:2b:85:16:46:68:77:62:3f:2a:dd:62:96:
34:7d:b7:12:f7:6d:f5:3c:7c:85:a3:12:b6:34:2e:9b:64:b7:
f1:17:c0:57:ce:d8:48:5d:17:d5:49:53:01:6c:98:fd:b6:bf:
d7:56:13:f0:cd:01:3c:3a:e9:35:3c:50:98:6b:24:12:bc:b9:
e0:2b:2f:7c:94:06:95:75:4c:a0:83:82:e4:d3:b8:53:75:c3:
0e:cd:ae:8a:c2:d1:31:62:2c:f3:82:2f:3f:25:90:12:fa:a8:
b7:f6:97:ec:5a:c3:73:c3:47:58:f3:7d:32:48:8c:24:55:be:
f9:1c:9c:5e:40:55:36:e3:a3:e5:13:24:f7:64:fb:95:de:ea:
fa:fe:28:15:ce:d2:ee:c7:83:0d:33:90:bd:33:ff:5e:6f:5a:
dc:9c:18:50:15:83:fb:b9:36:61:ec:f1:44:cc:67:db:a3:b8:
6f:b5:95:da:60:79:e2:ee:c6:61:d1:1c:41:4d:07:6d:5d:11:
fd:b2:c0:e7:cc:08:28:d7:56:6b:5e:b6:1a:76:2b:fe:cc:bc:
34:b7:01:f5:46:ba:56:73:c7:a2:94:01:eb:f5:57:b5:a2:ee:
35:2c:ce:6f:aa:09:65:69:3f:a6:1f:87:49:9b:95:68:35:4d:
c3:dc:4b:c2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKfMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQyMjU2QzI2Q0FFOEJD
MDk3QUE3RUU3RDA5RTRDMDI4QjYyMUYzOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDj0H7mh75XWaYFNlL4oX9NzEQydZvawM59O0iSW0GV4RgN0UCf
45Gvx6+FmD2ZfxsFRlKadaG1qayAThGZLaOyeDUbhOzOJk1B56RGNbjvZlUb1GLd
KU91zkpVf/2hBv0Zu5Lq2BZ405Tg0/zB9GhGeOFXRkcoh/8to6kIsuvovkFYY/Wg
2mwIaCOBDB6ca+zeOCIz1weZDgegjNS/otVVPOtM60DKq77QqE0ojy8zIVLx2kEN
aOPWB+GcMhr5XGiLX4fFk6iqOfjvW6iLP0WY16uL3HclngZDQbcLNBsATkXIgOqD
kZpUZd1M/E/zyli2QyUFHkhnjM9UbDm4fctFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUQiVsJsrovAl6p+59CeTAKLYh854wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FpVnNKc3JvdkFsNnAtNTlD
ZVRBS0xZaDg1NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
ASQwDQYJKoZIhvcNAQELBQADggEBAK60155j0CuFFkZod2I/Kt1iljR9txL3bfU8
fIWjErY0Lptkt/EXwFfO2EhdF9VJUwFsmP22v9dWE/DNATw66TU8UJhrJBK8ueAr
L3yUBpV1TKCDguTTuFN1ww7NrorC0TFiLPOCLz8lkBL6qLf2l+xaw3PDR1jzfTJI
jCRVvvkcnF5AVTbjo+UTJPdk+5Xe6vr+KBXO0u7Hgw0zkL0z/15vWtycGFAVg/u5
NmHs8UTMZ9ujuG+1ldpgeeLuxmHRHEFNB21dEf2ywOfMCCjXVmtethp2K/7MvDS3
AfVGulZzx6KUAev1V7Wi7jUszm+qCWVpP6Yfh0mblWg1TcPcS8I=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:33 2025 by rpki-client