Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XCAFuZqhxRulBBmiQSWbBgKMKwc.roa
File: XCAFuZqhxRulBBmiQSWbBgKMKwc.roa (raw, json)
Hash identifier: 9UgpM0ggsxUHs0ucfi/vwO9EMkrB1cQYIocQRmL8Ivo=
Subject key identifier: 5C:20:05:B9:9A:A1:C5:1B:A5:04:19:A2:41:25:9B:06:02:8C:2B:07
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17A1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XCAFuZqhxRulBBmiQSWbBgKMKwc.roa
Signing time: Sun 07 Feb 2021 12:20:51 +0000
ROA not before: Sun 07 Feb 2021 12:20:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6049 (0x17a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:20:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5C2005B99AA1C51BA50419A241259B06028C2B07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:1d:b8:52:b7:36:0d:64:79:38:77:dd:d3:
4f:8b:28:4b:f1:f9:b5:d1:50:bb:ef:28:ed:38:d2:
73:03:dd:40:df:9f:f4:dd:2f:00:cf:8e:78:97:86:
7c:6c:99:91:93:b0:1e:e5:96:be:70:bd:ba:02:63:
2e:73:d7:23:35:b1:bb:be:83:da:6a:04:10:73:4b:
28:36:31:a9:88:5d:68:62:14:25:00:e9:fb:9c:12:
27:c7:ad:c7:c3:52:0a:6a:ef:19:8d:1d:a6:a6:a9:
26:37:2f:c2:fd:e3:6a:2d:33:03:8b:f0:f0:90:b3:
36:07:fc:cc:f8:4e:e6:fb:92:ca:03:d3:ef:35:33:
b5:49:e3:92:55:ac:ce:5c:95:86:37:30:e6:d1:2b:
62:1d:08:79:9e:db:6c:31:29:e3:40:07:3c:de:46:
2e:bb:a2:42:2b:f3:dc:92:6e:11:48:2d:ed:3f:ff:
eb:4c:1e:f4:97:b3:ac:b5:ab:df:23:f3:57:9d:25:
67:2c:58:ea:79:54:98:c3:ab:8a:70:15:8e:a8:89:
d3:ac:28:ea:27:71:d8:bb:4e:71:28:e5:80:e2:91:
40:23:02:7a:14:04:47:a4:75:01:4e:fc:05:e1:4b:
1c:aa:d5:f0:3f:67:ec:63:6f:1b:e9:47:5c:80:24:
7c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:20:05:B9:9A:A1:C5:1B:A5:04:19:A2:41:25:9B:06:02:8C:2B:07
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XCAFuZqhxRulBBmiQSWbBgKMKwc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:fb:08:bf:b3:b3:a0:b4:54:e0:cd:0d:5f:50:07:b4:ed:61:
bf:05:66:cf:c9:55:6b:80:41:fb:26:cf:41:26:75:37:c2:54:
85:57:b1:23:99:5a:3a:3d:87:b9:79:a9:c9:12:d4:cd:32:19:
a1:86:89:16:11:72:0c:29:ec:5b:4d:47:1e:9c:fd:95:d6:5b:
04:dd:27:ba:0b:19:8c:0a:ee:d6:a2:f0:ec:b3:c8:eb:82:a9:
5f:60:18:fc:67:ca:62:39:83:8e:b5:72:00:9c:0e:09:fa:34:
27:99:cb:3d:1a:4a:41:35:19:ce:6f:04:54:89:7e:4b:53:b8:
c1:05:33:44:2e:5f:b4:12:3f:b8:41:94:07:4d:91:d2:44:a9:
05:a4:56:ab:ae:57:ec:87:c4:fb:ad:3c:62:57:d1:c4:38:4e:
1d:ce:52:69:9e:22:46:68:10:35:5e:ef:15:03:dd:0e:f3:6c:
5b:4b:82:00:04:47:86:0d:6a:39:af:0c:ff:4a:ac:ba:82:92:
a7:11:17:d7:26:06:54:6c:9c:31:51:c5:13:16:e6:5a:4f:ff:
73:85:dc:2b:90:f0:f7:1a:a6:bd:4a:60:4c:51:8d:6a:31:ca:
8a:a6:03:2a:8a:87:fc:5d:f1:5b:e6:6a:77:b9:43:9b:5a:19:
d5:3d:ae:f2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF6EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjIwNTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVDMjAwNUI5OUFBMUM1
MUJBNTA0MTlBMjQxMjU5QjA2MDI4QzJCMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVzh24Urc2DWR5OHfd00+LKEvx+bXRULvvKO040nMD3UDfn/Td
LwDPjniXhnxsmZGTsB7llr5wvboCYy5z1yM1sbu+g9pqBBBzSyg2MamIXWhiFCUA
6fucEifHrcfDUgpq7xmNHaamqSY3L8L942otMwOL8PCQszYH/Mz4Tub7ksoD0+81
M7VJ45JVrM5clYY3MObRK2IdCHme22wxKeNABzzeRi67okIr89ySbhFILe0//+tM
HvSXs6y1q98j81edJWcsWOp5VJjDq4pwFY6oidOsKOoncdi7TnEo5YDikUAjAnoU
BEekdQFO/AXhSxyq1fA/Z+xjbxvpR1yAJHwhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUXCAFuZqhxRulBBmiQSWbBgKMKwcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hDQUZ1WnFoeFJ1bEJCbWlR
U1diQmdLTUt3Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
Af4wDQYJKoZIhvcNAQELBQADggEBAI77CL+zs6C0VODNDV9QB7TtYb8FZs/JVWuA
Qfsmz0EmdTfCVIVXsSOZWjo9h7l5qckS1M0yGaGGiRYRcgwp7FtNRx6c/ZXWWwTd
J7oLGYwK7tai8OyzyOuCqV9gGPxnymI5g461cgCcDgn6NCeZyz0aSkE1Gc5vBFSJ
fktTuMEFM0QuX7QSP7hBlAdNkdJEqQWkVquuV+yHxPutPGJX0cQ4Th3OUmmeIkZo
EDVe7xUD3Q7zbFtLggAER4YNajmvDP9KrLqCkqcRF9cmBlRsnDFRxRMW5lpP/3OF
3CuQ8Pcapr1KYExRjWoxyoqmAyqKh/xd8Vvmane5Q5taGdU9rvI=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:21 2023 by rpki-client on console-ams.rpki-client.org