Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zg_WcJ9SaqPM3YGW-qLdFfIcho4.roa
File: Zg_WcJ9SaqPM3YGW-qLdFfIcho4.roa (raw, json)
Hash identifier: /yH5NhTKemzNBV7QBse+IGb7DDsfI6tM8s1+vXPuK9I=
Subject key identifier: 66:0F:D6:70:9F:52:6A:A3:CC:DD:81:96:FA:A2:DD:15:F2:1C:86:8E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EDC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zg_WcJ9SaqPM3YGW-qLdFfIcho4.roa
Signing time: Tue 29 Sep 2020 09:56:13 +0000
ROA not before: Tue 29 Sep 2020 09:56:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3804 (0xedc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:13 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=660FD6709F526AA3CCDD8196FAA2DD15F21C868E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8e:40:8a:bf:f3:a0:81:ad:ec:31:c9:2c:f9:
ad:67:5c:f6:81:0e:c7:06:11:a7:e5:23:cf:d1:77:
f9:3b:09:06:71:77:8e:01:0a:9a:e1:93:8b:ad:7d:
62:1a:cf:2a:77:48:65:0f:ac:26:3f:e8:3c:90:93:
be:83:dc:3b:89:49:d3:28:69:26:72:cc:bf:5d:04:
95:4e:1d:d1:f5:b2:9a:de:8b:5e:65:f2:ba:55:d3:
ad:be:70:e5:e5:ff:e9:14:ef:2e:39:3e:0f:e9:40:
4c:b4:41:c4:49:75:8a:a6:cf:43:f4:01:fe:2a:f7:
94:ef:f6:b7:74:4f:cc:6e:20:4c:d7:52:3a:5b:db:
6a:b4:03:b9:5d:86:bc:67:c5:46:8c:9b:95:91:ab:
4d:a9:fb:f7:e7:ed:4b:a7:0e:16:29:ab:ff:44:21:
dc:d3:88:19:1c:01:83:d3:a0:ce:6f:7e:35:ac:36:
df:98:09:5f:f2:49:9a:0a:b5:fa:d5:f1:82:71:7f:
9c:f2:b7:5d:4f:a7:2f:e5:93:99:5c:16:9c:fb:9f:
64:78:e3:67:2f:8d:ff:d6:7d:2e:c6:95:8b:aa:e3:
de:2c:1b:3b:8c:23:0f:14:5f:44:ff:cd:32:01:2a:
4c:03:22:1d:c8:26:8d:ac:74:34:a0:6b:37:4a:2a:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0F:D6:70:9F:52:6A:A3:CC:DD:81:96:FA:A2:DD:15:F2:1C:86:8E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zg_WcJ9SaqPM3YGW-qLdFfIcho4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:81:50:ed:2d:34:8c:4e:94:85:2d:b0:c3:1d:5d:5c:53:cf:
84:6b:f5:75:ee:86:a7:bd:09:4c:e2:86:4c:0b:43:f5:2c:79:
3d:c5:3c:2b:24:b6:af:7e:0d:b4:0e:87:7a:33:54:58:f0:e4:
1b:5f:8e:31:eb:20:57:12:f9:fd:f5:15:ac:33:dc:a8:59:ac:
ba:2f:f7:60:eb:3c:fb:3e:8a:81:f7:d9:89:8e:20:ed:20:a6:
5a:75:4f:4e:39:99:4b:20:df:c9:d6:97:d6:65:5d:89:08:03:
07:9c:a5:98:bf:d3:97:f1:08:dd:56:b3:12:f1:f3:37:63:e7:
b9:3f:72:d5:21:8f:2c:5e:fc:3d:0d:41:f1:70:ef:b6:7b:d3:
b6:52:42:06:77:29:83:bf:8a:86:63:ed:05:04:7e:17:57:37:
42:0a:ee:b7:57:cd:fb:03:f3:37:34:1d:ac:71:c6:c2:1b:e3:
a5:37:07:71:21:66:fa:90:e1:43:c0:3c:57:71:fb:fc:37:52:
fe:a7:24:08:88:34:52:fc:2b:25:3c:39:05:e7:2e:02:ee:75:
47:dc:62:3a:75:04:5d:ae:61:b1:a8:a0:e4:53:7f:af:f2:83:
3e:3a:eb:e7:ae:f1:f1:0c:9e:64:a3:90:dc:df:60:16:ec:89:
62:bd:6a:76
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDtwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDY2MEZENjcwOUY1MjZB
QTNDQ0REODE5NkZBQTJERDE1RjIxQzg2OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDujkCKv/Ogga3sMcks+a1nXPaBDscGEaflI8/Rd/k7CQZxd44B
Cprhk4utfWIazyp3SGUPrCY/6DyQk76D3DuJSdMoaSZyzL9dBJVOHdH1sprei15l
8rpV062+cOXl/+kU7y45Pg/pQEy0QcRJdYqmz0P0Af4q95Tv9rd0T8xuIEzXUjpb
22q0A7ldhrxnxUaMm5WRq02p+/fn7UunDhYpq/9EIdzTiBkcAYPToM5vfjWsNt+Y
CV/ySZoKtfrV8YJxf5zyt11Ppy/lk5lcFpz7n2R442cvjf/WfS7GlYuq494sGzuM
Iw8UX0T/zTIBKkwDIh3IJo2sdDSgazdKKiW3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZg/WcJ9SaqPM3YGW+qLdFfIcho4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pnX1djSjlTYXFQTTNZR1ct
cUxkRmZJY2hvNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AYAwDQYJKoZIhvcNAQELBQADggEBAAyBUO0tNIxOlIUtsMMdXVxTz4Rr9XXuhqe9
CUzihkwLQ/UseT3FPCsktq9+DbQOh3ozVFjw5BtfjjHrIFcS+f31Fawz3KhZrLov
92DrPPs+ioH32YmOIO0gplp1T045mUsg38nWl9ZlXYkIAwecpZi/05fxCN1WsxLx
8zdj57k/ctUhjyxe/D0NQfFw77Z707ZSQgZ3KYO/ioZj7QUEfhdXN0IK7rdXzfsD
8zc0HaxxxsIb46U3B3EhZvqQ4UPAPFdx+/w3Uv6nJAiINFL8KyU8OQXnLgLudUfc
Yjp1BF2uYbGooORTf6/ygz466+eu8fEMnmSjkNzfYBbsiWK9anY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org