Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SqBFKv2A6bLBzcDEYCM8G42_6yM.roa
File: SqBFKv2A6bLBzcDEYCM8G42_6yM.roa (raw, json)
Hash identifier: L7KMhQvdbCJlF6spbC7Xi2bc6Y6V37yI/n1FUdIqByY=
Subject key identifier: 4A:A0:45:2A:FD:80:E9:B2:C1:CD:C0:C4:60:23:3C:1B:8D:BF:EB:23
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21AA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SqBFKv2A6bLBzcDEYCM8G42_6yM.roa
Signing time: Fri 25 Nov 2022 04:40:10 +0000
ROA not before: Fri 25 Nov 2022 04:40:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8618 (0x21aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4AA0452AFD80E9B2C1CDC0C460233C1B8DBFEB23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a6:4d:46:5a:dc:37:41:e3:8d:ac:2b:67:58:
68:52:89:d8:81:74:40:0b:9c:49:cf:d4:35:7d:01:
36:6d:82:32:a7:33:05:b8:32:0b:4f:1f:14:82:e3:
0e:50:ba:95:0b:14:fb:ed:9d:ef:c8:a5:b6:e6:f5:
35:12:6c:2e:df:2b:42:ae:db:64:76:4f:5b:39:8e:
f3:98:91:34:9c:b1:ae:4f:e2:f3:1d:1f:c0:4b:2e:
1a:12:59:bf:15:f4:3e:2a:f3:85:7f:63:f9:06:36:
21:da:d8:d1:10:c1:80:68:c9:b9:47:ef:30:4a:0c:
62:6a:83:b4:6d:ea:d0:2e:25:d6:4c:cf:b2:a9:91:
45:9b:63:e5:68:20:e6:39:c6:11:ee:f2:3b:70:58:
82:b4:d2:e7:6a:1c:83:b7:a6:3d:35:16:06:a2:81:
85:c3:7a:f9:93:48:f2:71:e2:d3:40:78:9a:7f:4c:
6b:5a:82:94:b6:e6:35:2e:e0:81:d0:02:6f:2c:01:
a7:4f:65:c1:e0:6f:0f:d1:b5:71:00:3e:3c:67:f8:
c3:e0:ee:a2:cf:60:1f:d7:c0:60:96:35:70:b5:3a:
93:6d:b2:d9:d0:89:20:c7:80:70:6f:79:2e:39:5c:
22:5c:82:cf:69:89:09:72:35:ff:49:86:6c:83:cd:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A0:45:2A:FD:80:E9:B2:C1:CD:C0:C4:60:23:3C:1B:8D:BF:EB:23
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SqBFKv2A6bLBzcDEYCM8G42_6yM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.192.0/22
Signature Algorithm: sha256WithRSAEncryption
61:16:12:87:0e:82:d8:92:b3:cd:1b:f0:39:c6:c3:84:8e:84:
a7:a3:f5:4b:bf:a9:a9:77:f9:28:2e:4f:11:9c:75:41:b6:0d:
f8:2f:ce:91:55:d3:5d:f6:b0:0f:c0:cc:e3:95:bf:30:bd:65:
b0:0d:2d:a8:14:5b:97:a4:01:f3:ee:a5:2f:18:5b:2b:78:48:
27:74:d8:ad:e3:f6:03:b5:be:6f:8d:16:ac:4a:2c:eb:91:9b:
9f:8a:b6:f4:e7:92:93:15:49:4b:8a:52:bd:9c:0e:eb:dc:11:
01:6b:82:13:03:61:57:ce:8b:ef:69:42:f0:67:71:59:3c:d6:
b1:3a:23:92:13:06:22:b5:1b:26:8b:cb:b6:48:10:26:72:d6:
10:02:71:d3:19:99:e3:cb:0e:ae:a2:18:9a:29:83:4c:95:fb:
63:f0:9d:3a:62:1a:f7:a3:ee:9c:49:7f:6a:a0:ba:c8:c3:84:
9f:00:50:db:aa:9a:81:ac:79:c8:9f:fb:f2:98:4a:4d:c2:13:
c5:87:68:c6:83:ac:ba:d0:34:b5:c3:c2:c0:f4:1a:19:ae:74:
02:c1:ad:dc:f7:56:13:0a:f5:0d:9f:9a:eb:5a:e6:f9:f1:9b:
30:00:e3:8f:9a:87:60:61:0d:1a:c1:6d:aa:0c:d3:2f:63:dd:
60:6c:0f:9c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIaowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDRBQTA0NTJBRkQ4MEU5
QjJDMUNEQzBDNDYwMjMzQzFCOERCRkVCMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCapk1GWtw3QeONrCtnWGhSidiBdEALnEnP1DV9ATZtgjKnMwW4
MgtPHxSC4w5QupULFPvtne/Ipbbm9TUSbC7fK0Ku22R2T1s5jvOYkTScsa5P4vMd
H8BLLhoSWb8V9D4q84V/Y/kGNiHa2NEQwYBoyblH7zBKDGJqg7Rt6tAuJdZMz7Kp
kUWbY+VoIOY5xhHu8jtwWIK00udqHIO3pj01FgaigYXDevmTSPJx4tNAeJp/TGta
gpS25jUu4IHQAm8sAadPZcHgbw/RtXEAPjxn+MPg7qLPYB/XwGCWNXC1OpNtstnQ
iSDHgHBveS45XCJcgs9piQlyNf9JhmyDzUwzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSqBFKv2A6bLBzcDEYCM8G42/6yMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1NxQkZLdjJBNmJMQnpjREVZ
Q004RzQyXzZ5TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AcAwDQYJKoZIhvcNAQELBQADggEBAGEWEocOgtiSs80b8DnGw4SOhKej9Uu/qal3
+SguTxGcdUG2DfgvzpFV0132sA/AzOOVvzC9ZbANLagUW5ekAfPupS8YWyt4SCd0
2K3j9gO1vm+NFqxKLOuRm5+KtvTnkpMVSUuKUr2cDuvcEQFrghMDYVfOi+9pQvBn
cVk81rE6I5ITBiK1GyaLy7ZIECZy1hACcdMZmePLDq6iGJopg0yV+2PwnTpiGvej
7pxJf2qgusjDhJ8AUNuqmoGsecif+/KYSk3CE8WHaMaDrLrQNLXDwsD0GhmudALB
rdz3VhMK9Q2fmuta5vnxmzAA44+ah2BhDRrBbaoM0y9j3WBsD5w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org