Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VVY1cfzSr3DnXP8AYJgy7ACEvRM.roa
File: VVY1cfzSr3DnXP8AYJgy7ACEvRM.roa (raw, json)
Hash identifier: AUU/tFF8fNoaLYvLApPEqP1eHDzQ5rTwveFc5FG8cFs=
Subject key identifier: 55:56:35:71:FC:D2:AF:70:E7:5C:FF:00:60:98:32:EC:00:84:BD:13
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VVY1cfzSr3DnXP8AYJgy7ACEvRM.roa
Signing time: Thu 15 Sep 2022 02:52:24 +0000
ROA not before: Thu 15 Sep 2022 02:52:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.56.0/21 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=55563571FCD2AF70E75CFF00609832EC0084BD13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:8a:63:84:a0:22:2f:53:78:97:fa:7b:18:
92:9d:34:03:51:0e:e2:7b:6f:d9:82:7b:89:b1:f3:
8e:05:43:c4:19:86:ab:a3:7f:10:a3:25:1b:2b:36:
d0:3c:1d:15:e5:d8:0a:9d:4c:e1:5d:b1:bf:40:c2:
d9:b9:b6:e2:09:31:24:a7:fa:85:d4:24:11:2c:52:
d8:a7:07:00:d7:dd:9d:f5:4f:a7:41:64:5f:a9:43:
2b:d7:e9:1b:60:60:13:84:f3:58:4a:8f:a5:89:d5:
bb:12:e5:ad:50:88:ee:27:cb:42:6b:f3:a6:2b:6d:
2b:6a:19:f6:80:93:cb:95:b7:a6:c6:ef:41:b9:3e:
61:cf:92:e9:53:42:64:83:c6:94:cf:ad:26:ee:8f:
f1:07:7a:9b:9e:41:21:ee:32:8a:e8:fb:0d:3e:35:
b9:dd:2c:c2:d2:82:41:b3:c9:bf:72:cb:03:73:1b:
8a:02:5d:84:1a:47:01:88:f6:36:07:b0:66:ce:3c:
bb:11:ff:60:9c:bd:9c:bd:28:4a:5b:c3:4b:f1:e1:
dd:6f:19:68:66:5f:87:64:85:e9:82:a9:47:c8:11:
5c:cc:71:82:2a:59:8c:64:55:90:d9:bd:ec:99:dd:
8d:4c:13:0c:c3:18:d8:c9:61:16:64:1e:72:b7:70:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:56:35:71:FC:D2:AF:70:E7:5C:FF:00:60:98:32:EC:00:84:BD:13
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VVY1cfzSr3DnXP8AYJgy7ACEvRM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.56.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:f5:46:be:f5:5f:7e:68:01:2a:65:29:82:e2:d5:e6:d8:14:
26:26:af:3e:9b:98:c5:bc:13:17:ef:83:b4:c0:26:01:d2:02:
87:5b:bd:b4:09:89:20:38:dd:d6:77:18:fd:22:1b:78:2b:43:
b0:22:af:4e:fe:f8:61:c9:65:8b:0f:13:d4:33:4d:1f:52:8f:
62:27:80:71:e3:f6:5e:3a:3f:58:3e:41:46:2c:1a:3f:d4:77:
d4:c0:61:69:df:ed:ca:07:f1:c5:ea:c5:ee:d1:7b:33:cb:6d:
4b:b8:c0:6b:96:f7:2b:a7:ee:3f:ce:b2:2f:ba:63:c2:05:11:
d7:cc:96:0c:32:04:db:97:da:7f:39:bd:fd:51:39:0a:b5:78:
01:91:5b:63:00:47:ac:7b:6c:f3:b9:36:55:fe:d8:ed:c6:39:
a7:6d:ef:7c:6d:13:00:93:21:8e:82:b0:49:f8:37:bd:80:24:
93:6c:87:a4:ea:6c:5c:1c:b8:15:65:e2:a0:53:dc:cf:b1:62:
e2:f5:1a:c6:d2:79:3a:77:ee:20:52:7a:9d:22:87:e9:a2:2e:
ba:5d:9c:e4:0d:07:dc:b7:b8:87:5e:23:b7:5e:7b:ef:01:44:
84:31:34:23:bf:78:70:cd:11:70:3c:6e:08:7f:e3:ec:47:b6:
c8:ba:22:9a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyMjRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU1NTYzNTcxRkNEMkFG
NzBFNzVDRkYwMDYwOTgzMkVDMDA4NEJEMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBxIpjhKAiL1N4l/p7GJKdNANRDuJ7b9mCe4mx844FQ8QZhquj
fxCjJRsrNtA8HRXl2AqdTOFdsb9Awtm5tuIJMSSn+oXUJBEsUtinBwDX3Z31T6dB
ZF+pQyvX6RtgYBOE81hKj6WJ1bsS5a1QiO4ny0Jr86YrbStqGfaAk8uVt6bG70G5
PmHPkulTQmSDxpTPrSbuj/EHepueQSHuMoro+w0+NbndLMLSgkGzyb9yywNzG4oC
XYQaRwGI9jYHsGbOPLsR/2CcvZy9KEpbw0vx4d1vGWhmX4dkhemCqUfIEVzMcYIq
WYxkVZDZveyZ3Y1MEwzDGNjJYRZkHnK3cBBNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVVY1cfzSr3DnXP8AYJgy7ACEvRMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZWWTFjZnpTcjNEblhQOEFZ
Smd5N0FDRXZSTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq
ATgwDQYJKoZIhvcNAQELBQADggEBAGv1Rr71X35oASplKYLi1ebYFCYmrz6bmMW8
Exfvg7TAJgHSAodbvbQJiSA43dZ3GP0iG3grQ7Air07++GHJZYsPE9QzTR9Sj2In
gHHj9l46P1g+QUYsGj/Ud9TAYWnf7coH8cXqxe7RezPLbUu4wGuW9yun7j/Osi+6
Y8IFEdfMlgwyBNuX2n85vf1ROQq1eAGRW2MAR6x7bPO5NlX+2O3GOadt73xtEwCT
IY6CsEn4N72AJJNsh6TqbFwcuBVl4qBT3M+xYuL1GsbSeTp37iBSep0ih+miLrpd
nOQNB9y3uIdeI7dee+8BRIQxNCO/eHDNEXA8bgh/4+xHtsi6Ipo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org