Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WQLkY8QC5s075tYdVEDoHoHXqC4.roa
File: WQLkY8QC5s075tYdVEDoHoHXqC4.roa (raw, json)
Hash identifier: Qt9cAumWQMu51eMjMGhS0vLu1fPOuDQxOEmTGfALEMA=
Subject key identifier: 59:02:E4:63:C4:02:E6:CD:3B:E6:D6:1D:54:40:E8:1E:81:D7:A8:2E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BC4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WQLkY8QC5s075tYdVEDoHoHXqC4.roa
Signing time: Wed 29 Sep 2021 02:46:58 +0000
ROA not before: Wed 29 Sep 2021 02:46:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7108 (0x1bc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5902E463C402E6CD3BE6D61D5440E81E81D7A82E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:b4:64:96:43:c4:a0:c7:4c:b6:7a:96:e4:
0c:f6:be:cd:a2:0f:3f:74:53:e9:ce:5a:f9:d4:15:
2c:d1:58:aa:d6:d3:17:8c:34:65:7b:c7:33:c7:5c:
4e:2d:73:66:8f:b9:21:8a:bd:53:c6:62:0a:97:a1:
e7:07:fa:ff:71:49:d7:17:23:5d:9e:ba:50:95:7a:
87:e1:04:2a:3d:c6:e7:d6:f5:dd:e3:9c:0d:00:4f:
08:1c:62:b6:b4:72:40:e8:64:a4:50:4e:da:b6:c6:
fd:9e:b0:d3:f6:77:49:c5:f9:4a:bd:0d:18:2b:17:
20:3e:55:09:7a:4b:a9:f4:73:eb:1e:da:18:b0:7e:
38:87:b3:7c:c3:23:8e:69:57:0d:ac:63:1b:aa:a6:
08:ce:4a:6e:3e:37:b1:c4:0c:64:3e:ae:77:c7:85:
9f:57:3f:91:ff:07:bb:5a:95:b9:82:a7:4a:e6:89:
31:20:79:5c:df:43:ec:d1:80:3a:e1:15:4b:b5:ae:
f2:4e:5d:44:ec:a9:43:89:11:b1:bc:1e:4f:de:9b:
1e:b7:46:c8:94:0f:48:25:5f:8f:19:13:5f:f9:24:
6f:81:ec:82:f7:d6:4b:35:0d:5f:29:59:eb:1d:cb:
02:c0:fd:f2:b7:bd:c2:43:50:23:ba:d4:38:cf:3f:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:02:E4:63:C4:02:E6:CD:3B:E6:D6:1D:54:40:E8:1E:81:D7:A8:2E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WQLkY8QC5s075tYdVEDoHoHXqC4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.212.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:b5:6b:82:7f:c1:bd:83:51:1e:35:4d:cf:60:82:7a:46:4d:
3e:63:87:17:5c:2d:e3:c6:64:f4:50:13:8b:66:09:b3:e2:3c:
1e:e7:47:f1:95:eb:b6:22:3a:94:fa:27:d8:a7:2c:22:ee:e6:
c6:aa:d1:02:a6:fd:b9:80:ce:7e:53:c0:b8:38:13:c0:52:7a:
f1:33:55:71:09:7a:ff:9b:27:d2:d0:c5:f1:68:31:f5:cb:91:
b7:16:1d:71:1e:e2:f0:e8:09:bd:31:79:4f:f1:3c:34:c5:a4:
a3:e7:07:f0:4f:08:79:f7:75:aa:19:3c:68:c6:f7:e6:37:c7:
98:8c:67:57:d8:d9:f6:54:bd:a7:0c:60:a4:1b:cf:57:fd:c7:
cb:aa:8e:21:bb:0a:0f:db:4c:78:6e:55:cc:09:75:5b:4a:a9:
b0:ef:ff:49:98:63:0e:bd:66:33:35:07:7f:2e:ee:b9:f3:9d:
a7:be:83:f5:00:28:df:17:f1:5e:7f:88:ab:7e:94:3e:45:04:
22:df:fd:b3:dd:df:e0:04:71:91:0c:f6:3d:03:15:a4:69:53:
02:ef:ad:ae:c2:1e:f4:af:00:82:c9:34:8f:d7:4e:6f:7d:e2:
33:54:a6:4f:ce:63:3b:ad:16:5a:48:92:39:8f:d1:3e:e9:af:
5e:62:08:a7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2NThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDU5MDJFNDYzQzQwMkU2
Q0QzQkU2RDYxRDU0NDBFODFFODFEN0E4MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCV27RklkPEoMdMtnqW5Az2vs2iDz90U+nOWvnUFSzRWKrW0xeM
NGV7xzPHXE4tc2aPuSGKvVPGYgqXoecH+v9xSdcXI12eulCVeofhBCo9xufW9d3j
nA0ATwgcYra0ckDoZKRQTtq2xv2esNP2d0nF+Uq9DRgrFyA+VQl6S6n0c+se2hiw
fjiHs3zDI45pVw2sYxuqpgjOSm4+N7HEDGQ+rnfHhZ9XP5H/B7talbmCp0rmiTEg
eVzfQ+zRgDrhFUu1rvJOXUTsqUOJEbG8Hk/emx63RsiUD0glX48ZE1/5JG+B7IL3
1ks1DV8pWesdywLA/fK3vcJDUCO61DjPPyCZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWQLkY8QC5s075tYdVEDoHoHXqC4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dRTGtZOFFDNXMwNzV0WWRW
RURvSG9IWHFDNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AdQwDQYJKoZIhvcNAQELBQADggEBAHy1a4J/wb2DUR41Tc9ggnpGTT5jhxdcLePG
ZPRQE4tmCbPiPB7nR/GV67YiOpT6J9inLCLu5saq0QKm/bmAzn5TwLg4E8BSevEz
VXEJev+bJ9LQxfFoMfXLkbcWHXEe4vDoCb0xeU/xPDTFpKPnB/BPCHn3daoZPGjG
9+Y3x5iMZ1fY2fZUvacMYKQbz1f9x8uqjiG7Cg/bTHhuVcwJdVtKqbDv/0mYYw69
ZjM1B38u7rnznae+g/UAKN8X8V5/iKt+lD5FBCLf/bPd3+AEcZEM9j0DFaRpUwLv
ra7CHvSvAILJNI/XTm994jNUpk/OYzutFlpIkjmP0T7pr15iCKc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org