Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X2i4ZAfP_TpU9Tzp0VI-ir6VGRU.roa
File: X2i4ZAfP_TpU9Tzp0VI-ir6VGRU.roa (raw, json)
Hash identifier: y6M1gTmVacJftD/ynW452Jp/5cnBiZneceVBbYqZsy0=
Subject key identifier: 5F:68:B8:64:07:CF:FD:3A:54:F5:3C:E9:D1:52:3E:8A:BE:95:19:15
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F4C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X2i4ZAfP_TpU9Tzp0VI-ir6VGRU.roa
Signing time: Tue 29 Sep 2020 09:56:46 +0000
ROA not before: Tue 29 Sep 2020 09:56:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3916 (0xf4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5F68B86407CFFD3A54F53CE9D1523E8ABE951915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e4:d6:0a:9b:df:66:6e:29:0f:05:9f:f4:e7:
5f:45:2d:22:8f:09:f0:46:af:4f:00:7a:78:23:c1:
19:bb:b9:24:1c:a7:2c:0c:cf:9e:73:1d:16:d1:af:
bc:57:e9:53:6c:c4:7a:8c:65:93:85:e9:b0:70:2e:
cf:6f:56:21:55:f0:77:e8:8c:44:02:10:8b:37:87:
fd:b7:cc:34:7c:47:2d:1a:8b:ff:6c:90:b3:5e:28:
e8:24:a4:41:6c:1b:bb:c0:e3:6d:56:57:4d:c1:30:
b3:a3:91:6b:2c:b0:e4:90:d8:b4:c8:25:6c:c8:c5:
8c:6e:72:87:4f:4c:02:f5:7e:37:e0:d2:bc:86:59:
fe:04:f1:da:49:59:6f:c2:06:f1:88:7b:43:9d:3d:
49:e5:1e:27:b0:d1:d8:f0:7c:45:c3:2b:76:10:63:
97:da:43:de:67:69:5d:c3:9a:27:8d:af:75:0b:bf:
dd:3c:2c:38:5e:32:ca:94:d4:32:18:5a:58:b4:76:
ac:0e:d2:05:bc:0f:14:a7:8c:a0:4e:98:3f:a3:34:
81:c9:13:03:1b:6d:5c:24:80:4f:dd:1e:b2:23:0f:
c3:63:af:0d:9c:63:c6:74:79:20:a9:90:f4:ba:77:
c8:5a:6d:4f:89:77:81:c3:cf:7b:a8:d1:91:87:e8:
0c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:68:B8:64:07:CF:FD:3A:54:F5:3C:E9:D1:52:3E:8A:BE:95:19:15
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X2i4ZAfP_TpU9Tzp0VI-ir6VGRU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.99.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:da:c3:ed:b5:a1:f4:9e:25:1a:00:51:70:c7:5c:fe:33:27:
71:fe:29:14:31:97:eb:94:8a:b2:a4:65:93:73:30:31:96:6c:
aa:cf:d0:96:8e:92:8b:8c:9d:b4:07:47:22:4b:95:79:a2:e5:
34:40:50:e9:8e:f9:45:a4:7f:01:04:16:09:0f:2f:29:12:d4:
7a:0f:ac:96:7f:d2:96:40:20:aa:40:e4:92:52:0c:fd:1d:e4:
05:9a:71:56:17:3e:7e:c3:5f:44:69:6a:17:ae:e5:0f:e4:ef:
e2:d0:39:cf:60:c1:a0:a1:c2:40:38:a9:30:db:1b:c9:7b:c4:
4b:1d:55:40:59:35:79:80:58:cd:ab:2c:35:c4:64:ae:3a:a9:
65:75:e8:17:b2:24:86:e2:b9:d9:80:48:e0:25:c7:09:b7:64:
9b:41:8d:3c:e5:f7:f9:2b:6c:9e:f0:5f:99:23:0d:c4:03:91:
f5:31:18:93:3d:23:02:3a:5d:81:a6:ae:47:74:20:2d:5b:9c:
7a:ad:02:66:52:14:d8:24:7a:d8:8f:d5:8d:18:3e:96:0a:ba:
dd:e6:32:0f:5c:78:0b:fe:d0:e5:8b:0d:38:f2:e1:37:d4:5f:
84:0f:07:37:c2:f9:51:d4:6c:54:68:c0:da:38:d9:2c:1d:ec:
f3:b6:5c:1d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD0wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2NDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVGNjhCODY0MDdDRkZE
M0E1NEY1M0NFOUQxNTIzRThBQkU5NTE5MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDo5NYKm99mbikPBZ/0519FLSKPCfBGr08AengjwRm7uSQcpywM
z55zHRbRr7xX6VNsxHqMZZOF6bBwLs9vViFV8HfojEQCEIs3h/23zDR8Ry0ai/9s
kLNeKOgkpEFsG7vA421WV03BMLOjkWsssOSQ2LTIJWzIxYxucodPTAL1fjfg0ryG
Wf4E8dpJWW/CBvGIe0OdPUnlHiew0djwfEXDK3YQY5faQ95naV3DmieNr3ULv908
LDheMsqU1DIYWli0dqwO0gW8DxSnjKBOmD+jNIHJEwMbbVwkgE/dHrIjD8Njrw2c
Y8Z0eSCpkPS6d8habU+Jd4HDz3uo0ZGH6AwpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUX2i4ZAfP/TpU9Tzp0VI+ir6VGRUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1gyaTRaQWZQX1RwVTlUenAw
VkktaXI2VkdSVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AWMwDQYJKoZIhvcNAQELBQADggEBALLaw+21ofSeJRoAUXDHXP4zJ3H+KRQxl+uU
irKkZZNzMDGWbKrP0JaOkouMnbQHRyJLlXmi5TRAUOmO+UWkfwEEFgkPLykS1HoP
rJZ/0pZAIKpA5JJSDP0d5AWacVYXPn7DX0Rpaheu5Q/k7+LQOc9gwaChwkA4qTDb
G8l7xEsdVUBZNXmAWM2rLDXEZK46qWV16BeyJIbiudmASOAlxwm3ZJtBjTzl9/kr
bJ7wX5kjDcQDkfUxGJM9IwI6XYGmrkd0IC1bnHqtAmZSFNgketiP1Y0YPpYKut3m
Mg9ceAv+0OWLDTjy4TfUX4QPBzfC+VHUbFRowNo42Swd7PO2XB0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org