Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_PZj_YcQRgfBlMHgi5hpBQV9dV0.roa
File: _PZj_YcQRgfBlMHgi5hpBQV9dV0.roa (raw, json)
Hash identifier: E9NKP7kNQqfVQ2UF4nwbGqDJdnXyUZ0Xo3piMXK+uEA=
Subject key identifier: FC:F6:63:FD:87:10:46:07:C1:94:C1:E0:8B:98:69:05:05:7D:75:5D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_PZj_YcQRgfBlMHgi5hpBQV9dV0.roa
Signing time: Thu 15 Sep 2022 02:44:46 +0000
ROA not before: Thu 15 Sep 2022 02:44:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.64.0/21 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FCF663FD87104607C194C1E08B986905057D755D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:d9:0d:b3:6a:e0:c2:f6:6e:2d:0e:d7:c4:
0c:7d:8e:bd:c6:71:01:f4:b4:09:54:5b:48:03:50:
c1:4d:ea:32:61:f5:c5:74:15:2c:db:38:32:58:48:
2f:10:8c:63:0c:e9:77:1f:64:e6:fc:79:ac:34:fe:
92:e0:ba:01:ab:98:16:e0:1e:a8:b8:84:76:26:00:
5a:f3:a5:2c:eb:a8:4f:d2:e6:c9:88:84:92:2a:f4:
2c:04:35:56:fb:3f:87:6e:84:59:d3:e7:84:04:2c:
1c:42:d5:42:0f:fd:c1:ab:b3:bb:d3:d5:33:62:30:
3b:01:a8:9a:d2:5d:7b:49:8c:e4:ff:55:0e:87:59:
82:ba:a1:40:c7:4d:77:0d:0f:a0:25:a2:4a:ea:f3:
11:72:5c:4d:c1:cc:9b:02:2c:fa:8a:c1:19:6f:e7:
58:84:43:2c:30:08:7c:b0:f9:cd:57:8b:b5:de:12:
15:17:64:2d:0c:09:61:77:f6:01:ec:7b:d8:f1:0e:
a4:58:2d:ca:5a:d1:9f:4e:dd:c2:ce:b7:18:7a:44:
a8:7b:85:4f:e1:48:e0:da:8c:66:a1:a1:f0:f1:f4:
4d:f0:bf:62:2c:b1:fa:bc:30:50:0e:71:17:29:39:
21:4b:e3:b5:bb:c8:48:dc:4d:dd:42:27:6e:6d:1d:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F6:63:FD:87:10:46:07:C1:94:C1:E0:8B:98:69:05:05:7D:75:5D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_PZj_YcQRgfBlMHgi5hpBQV9dV0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.64.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:ea:ec:ba:64:22:80:b6:ce:61:6d:55:93:4f:70:28:30:35:
c6:fa:40:db:31:9e:6a:e9:19:25:e6:ec:54:df:d0:24:7d:cf:
b9:dc:55:58:12:6c:18:e7:6f:19:b3:96:3f:b4:bf:d7:a8:e6:
e4:2f:c0:37:7a:d6:bc:07:95:db:89:47:4a:d6:8f:7a:db:a4:
18:ce:36:83:5b:39:26:a8:f7:96:d7:30:6b:30:b7:20:63:c3:
c0:7d:78:77:ed:8c:12:b0:a4:e6:00:b1:12:27:fe:12:7b:a2:
e3:84:00:16:9d:d7:cf:8c:56:75:e4:5b:a7:24:49:6a:22:be:
27:37:8f:44:75:a7:8c:ec:bd:4f:9f:a4:d2:b3:68:1e:4b:14:
be:3e:2b:20:8b:a6:ad:ba:c1:20:67:6b:8d:00:96:6d:b8:19:
35:fa:e8:b1:4d:6d:4a:df:a7:a4:44:56:3f:61:23:fe:02:1a:
b1:78:9f:a2:6d:79:69:97:15:9f:db:64:7b:2d:25:7b:75:61:
44:a9:02:46:3d:4e:91:6e:e3:d8:35:85:72:56:9f:0f:fe:70:
88:cc:66:d1:52:8b:57:ef:a3:89:e0:5b:64:79:65:4b:4d:f1:
4c:81:3b:af:d3:9c:41:c0:7b:eb:c3:4e:02:e1:c2:e5:a2:c1:
55:13:ab:22
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ0NDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZDRjY2M0ZEODcxMDQ2
MDdDMTk0QzFFMDhCOTg2OTA1MDU3RDc1NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8i9kNs2rgwvZuLQ7XxAx9jr3GcQH0tAlUW0gDUMFN6jJh9cV0
FSzbODJYSC8QjGMM6XcfZOb8eaw0/pLgugGrmBbgHqi4hHYmAFrzpSzrqE/S5smI
hJIq9CwENVb7P4duhFnT54QELBxC1UIP/cGrs7vT1TNiMDsBqJrSXXtJjOT/VQ6H
WYK6oUDHTXcND6Alokrq8xFyXE3BzJsCLPqKwRlv51iEQywwCHyw+c1Xi7XeEhUX
ZC0MCWF39gHse9jxDqRYLcpa0Z9O3cLOtxh6RKh7hU/hSODajGahofDx9E3wv2Is
sfq8MFAOcRcpOSFL47W7yEjcTd1CJ25tHd67AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/PZj/YcQRgfBlMHgi5hpBQV9dV0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19QWmpfWWNRUmdmQmxNSGdp
NWhwQlFWOWRWMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq
AUAwDQYJKoZIhvcNAQELBQADggEBAFvq7LpkIoC2zmFtVZNPcCgwNcb6QNsxnmrp
GSXm7FTf0CR9z7ncVVgSbBjnbxmzlj+0v9eo5uQvwDd61rwHlduJR0rWj3rbpBjO
NoNbOSao95bXMGswtyBjw8B9eHftjBKwpOYAsRIn/hJ7ouOEABad18+MVnXkW6ck
SWoivic3j0R1p4zsvU+fpNKzaB5LFL4+KyCLpq26wSBna40Alm24GTX66LFNbUrf
p6REVj9hI/4CGrF4n6JteWmXFZ/bZHstJXt1YUSpAkY9TpFu49g1hXJWnw/+cIjM
ZtFSi1fvo4ngW2R5ZUtN8UyBO6/TnEHAe+vDTgLhwuWiwVUTqyI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:34 2025 by rpki-client