Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_I2M1OEIGv1KxQbeCQDa4obt1VE.roa
File: _I2M1OEIGv1KxQbeCQDa4obt1VE.roa (raw, json)
Hash identifier: PD0sQL0IW/Hyg0C+q6HNqZOlp3n4/nSqdtgRASgDaw8=
Subject key identifier: FC:8D:8C:D4:E1:08:1A:FD:4A:C5:06:DE:09:00:DA:E2:86:ED:D5:51
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 13C5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_I2M1OEIGv1KxQbeCQDa4obt1VE.roa
Signing time: Sun 07 Feb 2021 11:56:12 +0000
ROA not before: Sun 07 Feb 2021 11:56:12 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5061 (0x13c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:56:12 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FC8D8CD4E1081AFD4AC506DE0900DAE286EDD551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:2e:50:51:48:06:0b:4a:70:3c:13:a2:17:
93:67:0f:35:33:39:d3:15:fd:fd:dd:94:43:35:c1:
b5:77:ff:f1:56:1c:cc:21:b6:eb:d6:48:28:3b:6b:
96:a0:35:df:dd:d1:6e:c3:09:10:f4:37:0f:3e:18:
95:a2:18:86:82:0a:fb:dd:ab:01:0a:53:36:fd:71:
8d:16:47:29:6c:99:d5:1d:77:58:f5:d9:d5:1b:3d:
58:7d:f9:ab:23:23:ff:41:92:a0:54:83:69:d3:8c:
f8:a3:2d:c5:44:f7:57:7e:90:93:d7:b6:42:e8:63:
ab:44:8b:73:5e:83:de:53:15:90:65:27:f7:0b:ea:
12:8a:bf:c0:3b:50:ae:63:c3:5f:06:bb:6a:18:0e:
7e:84:f5:ff:ed:fa:8b:b8:a7:49:3e:ef:f2:aa:fa:
9c:44:fe:76:bf:57:6d:13:d3:a2:ac:b4:1a:a9:21:
f4:a9:06:0f:b1:cc:35:c9:8d:d7:2c:34:80:99:0b:
ed:64:7e:b2:b7:26:8b:4c:bd:a9:ab:d3:8a:92:ec:
4e:29:52:44:5a:6c:02:fa:14:90:f6:7c:f9:95:62:
4a:53:59:2f:f1:fe:c6:aa:52:c2:63:63:09:5e:74:
4d:f3:ab:78:e6:f7:a4:35:8d:21:d8:be:bc:24:79:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8D:8C:D4:E1:08:1A:FD:4A:C5:06:DE:09:00:DA:E2:86:ED:D5:51
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_I2M1OEIGv1KxQbeCQDa4obt1VE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.98.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:fa:fd:33:51:f3:3c:15:03:54:cf:a7:22:da:ee:bb:21:d9:
fd:8f:0c:25:59:ae:56:3b:af:80:1f:db:e6:20:2c:32:64:94:
8e:aa:7a:6b:3b:fb:41:34:ba:05:c8:a1:43:8e:ee:5c:cb:45:
f6:94:41:1e:43:58:4c:d6:13:84:4b:35:2e:e9:05:05:4f:a6:
ab:99:ba:6a:19:34:5b:5b:90:f7:1a:0f:39:d9:75:e6:0f:13:
78:49:1b:ff:4f:e0:bf:15:5a:ac:e1:17:0e:ce:b1:37:f9:87:
21:45:ef:00:8f:47:71:16:45:0b:88:2d:2c:6e:29:ca:61:a8:
d4:59:98:3a:f1:bf:05:ee:d7:ad:df:80:8d:72:19:a7:12:eb:
bd:5e:85:b4:fb:9f:ef:80:8c:cd:81:3a:79:ea:48:f9:cd:93:
df:fb:67:22:ef:73:29:70:40:c7:30:be:3b:bf:f1:cc:c3:24:
36:ff:47:72:4a:22:37:7e:e9:c5:0e:ad:60:b7:e5:02:b6:ce:
76:d4:75:89:63:f4:b8:b0:75:aa:df:f0:69:22:46:19:56:5e:
2d:ca:93:06:b3:56:67:10:8c:5a:4b:f6:e5:15:2a:8c:6f:bd:
e2:a7:72:a9:12:46:f0:71:87:b1:4d:e9:0c:c1:c3:d5:55:9a:
0e:e6:32:51
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE8UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU2MTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZDOEQ4Q0Q0RTEwODFB
RkQ0QUM1MDZERTA5MDBEQUUyODZFREQ1NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPEC5QUUgGC0pwPBOiF5NnDzUzOdMV/f3dlEM1wbV3//FWHMwh
tuvWSCg7a5agNd/d0W7DCRD0Nw8+GJWiGIaCCvvdqwEKUzb9cY0WRylsmdUdd1j1
2dUbPVh9+asjI/9BkqBUg2nTjPijLcVE91d+kJPXtkLoY6tEi3Neg95TFZBlJ/cL
6hKKv8A7UK5jw18Gu2oYDn6E9f/t+ou4p0k+7/Kq+pxE/na/V20T06KstBqpIfSp
Bg+xzDXJjdcsNICZC+1kfrK3JotMvamr04qS7E4pUkRabAL6FJD2fPmVYkpTWS/x
/saqUsJjYwledE3zq3jm96Q1jSHYvrwkeTTnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/I2M1OEIGv1KxQbeCQDa4obt1VEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19JMk0xT0VJR3YxS3hRYmVD
UURhNG9idDFWRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AWIwDQYJKoZIhvcNAQELBQADggEBAK36/TNR8zwVA1TPpyLa7rsh2f2PDCVZrlY7
r4Af2+YgLDJklI6qems7+0E0ugXIoUOO7lzLRfaUQR5DWEzWE4RLNS7pBQVPpquZ
umoZNFtbkPcaDznZdeYPE3hJG/9P4L8VWqzhFw7OsTf5hyFF7wCPR3EWRQuILSxu
KcphqNRZmDrxvwXu163fgI1yGacS671ehbT7n++AjM2BOnnqSPnNk9/7ZyLvcylw
QMcwvju/8czDJDb/R3JKIjd+6cUOrWC35QK2znbUdYlj9Liwdarf8GkiRhlWXi3K
kwazVmcQjFpL9uUVKoxvveKncqkSRvBxh7FN6QzBw9VVmg7mMlE=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:22 2023 by rpki-client on console-ams.rpki-client.org