Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eGH7TfmTPpm3S0Ums6OljcBhkJE.roa
File: eGH7TfmTPpm3S0Ums6OljcBhkJE.roa (raw, json)
Hash identifier: CiJ46hRfZwD8+sWAKVv/uU5AQigjZZcDD9MaBUhoh0E=
Subject key identifier: 78:61:FB:4D:F9:93:3E:99:B7:4B:45:26:B3:A3:A5:8D:C0:61:90:91
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D85
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eGH7TfmTPpm3S0Ums6OljcBhkJE.roa
Signing time: Mon 04 Oct 2021 01:45:30 +0000
ROA not before: Mon 04 Oct 2021 01:45:30 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 2407:4d00:ff09::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7557 (0x1d85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Oct 4 01:45:30 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7861FB4DF9933E99B74B4526B3A3A58DC0619091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:56:4c:43:43:f8:1f:86:42:5e:92:d9:53:8d:
21:03:72:92:2f:b0:5a:05:17:61:5d:72:66:f9:88:
81:25:0f:6d:66:0d:0b:9a:56:c4:61:77:2c:11:f9:
7d:5a:ea:55:ff:2b:7a:a8:12:76:dd:88:a6:6f:26:
df:91:04:ad:18:88:6e:81:04:78:9a:de:fd:de:f7:
2f:11:e2:9b:1a:99:6e:38:42:43:eb:15:9a:ef:64:
47:78:3e:94:ce:62:94:4c:76:82:89:93:2b:33:f4:
e1:64:5f:90:1e:ac:48:cf:8d:cf:ec:3e:66:66:23:
56:f8:1c:a0:31:68:c4:b8:3b:d0:96:24:46:95:81:
ac:e3:94:40:e6:5f:51:32:29:c0:51:ac:09:69:2d:
e8:aa:a5:04:18:7e:0c:25:90:94:47:0b:2e:5d:39:
aa:94:d2:9c:33:c4:39:bd:cd:32:e8:37:2e:fc:81:
ac:b2:87:e6:3b:84:a5:d5:c6:42:c9:1c:28:1a:6b:
47:b5:4a:fe:50:69:a6:50:f1:f9:e9:4c:fc:28:ae:
08:cd:f7:43:cc:d4:fa:8e:9d:c7:a3:79:9b:3a:ea:
6c:c8:04:07:de:67:e9:10:15:48:99:5a:eb:04:f4:
1e:0c:42:d1:a2:ef:6f:87:38:54:67:6c:6c:01:57:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:61:FB:4D:F9:93:3E:99:B7:4B:45:26:B3:A3:A5:8D:C0:61:90:91
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eGH7TfmTPpm3S0Ums6OljcBhkJE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff09::/48
Signature Algorithm: sha256WithRSAEncryption
12:31:63:36:fd:4e:84:60:b0:b7:61:ec:ad:27:b0:3f:7d:64:
63:3f:5d:0d:a0:62:87:f1:0d:69:17:72:5f:68:99:70:69:56:
ff:1c:59:dc:7e:db:95:2b:8d:d1:98:42:18:4c:8c:fd:85:00:
10:a8:fd:43:cd:97:96:3d:de:9d:63:38:4b:bd:63:58:0d:75:
56:22:7e:69:7d:c5:d9:b1:35:fc:e6:45:45:a2:a9:ac:53:53:
87:ed:b4:f0:7b:41:91:38:e9:f4:65:a9:11:99:39:b5:e0:d2:
0d:68:36:31:bf:a9:c7:2b:4f:81:3b:5e:8a:00:96:5d:0e:2c:
6d:d4:93:f8:94:a5:38:50:c4:ec:42:c5:03:2d:2c:23:fa:1b:
50:7e:75:b0:c6:4f:58:0c:24:a3:3c:5e:4c:4e:34:c2:b1:ef:
20:1b:0d:ec:e3:83:70:8d:09:02:37:3c:cb:75:c2:c7:17:4b:
d1:1f:97:30:cb:ff:d5:2f:89:59:4c:51:69:a5:2e:7a:96:63:
4f:53:1f:97:b6:11:bc:02:e9:9c:89:6d:5b:89:6a:4f:0d:fe:
4a:ce:02:99:53:a2:95:d0:b7:94:ce:53:f9:f0:7f:4a:e6:81:
a6:73:84:97:d2:00:b9:3d:75:be:e1:61:90:61:71:52:b4:13:
0a:70:3f:3a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICHYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTEwMDQw
MTQ1MzBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDc4NjFGQjRERjk5MzNF
OTlCNzRCNDUyNkIzQTNBNThEQzA2MTkwOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaVkxDQ/gfhkJektlTjSEDcpIvsFoFF2Fdcmb5iIElD21mDQua
VsRhdywR+X1a6lX/K3qoEnbdiKZvJt+RBK0YiG6BBHia3v3e9y8R4psamW44QkPr
FZrvZEd4PpTOYpRMdoKJkysz9OFkX5AerEjPjc/sPmZmI1b4HKAxaMS4O9CWJEaV
gazjlEDmX1EyKcBRrAlpLeiqpQQYfgwlkJRHCy5dOaqU0pwzxDm9zTLoNy78gayy
h+Y7hKXVxkLJHCgaa0e1Sv5QaaZQ8fnpTPworgjN90PM1PqOncejeZs66mzIBAfe
Z+kQFUiZWusE9B4MQtGi72+HOFRnbGwBV3s1AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUeGH7TfmTPpm3S0Ums6OljcBhkJEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VHSDdUZm1UUHBtM1MwVW1z
Nk9samNCaGtKRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
B00A/wkwDQYJKoZIhvcNAQELBQADggEBABIxYzb9ToRgsLdh7K0nsD99ZGM/XQ2g
YofxDWkXcl9omXBpVv8cWdx+25UrjdGYQhhMjP2FABCo/UPNl5Y93p1jOEu9Y1gN
dVYifml9xdmxNfzmRUWiqaxTU4fttPB7QZE46fRlqRGZObXg0g1oNjG/qccrT4E7
XooAll0OLG3Uk/iUpThQxOxCxQMtLCP6G1B+dbDGT1gMJKM8XkxONMKx7yAbDezj
g3CNCQI3PMt1wscXS9EflzDL/9UviVlMUWmlLnqWY09TH5e2EbwC6ZyJbVuJak8N
/krOAplTopXQt5TOU/nwf0rmgaZzhJfSALk9db7hYZBhcVK0EwpwPzo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org