Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/emfDDEqEZFZhbsK3ZpFdohJndes.roa
File: emfDDEqEZFZhbsK3ZpFdohJndes.roa (raw, json)
Hash identifier: h1NJX88pahnigSAfrcVXL0UCB0eS5yIgI8rsSJfi2/o=
Subject key identifier: 7A:67:C3:0C:4A:84:64:56:61:6E:C2:B7:66:91:5D:A2:12:67:75:EB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EB8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/emfDDEqEZFZhbsK3ZpFdohJndes.roa
Signing time: Tue 29 Sep 2020 09:56:04 +0000
ROA not before: Tue 29 Sep 2020 09:56:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3768 (0xeb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:04 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7A67C30C4A846456616EC2B766915DA2126775EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:be:ae:1a:a3:b4:da:75:1c:45:b3:33:1e:
ce:6d:1b:d3:7e:a1:53:b8:2a:d5:d1:8b:f9:57:b5:
c9:d9:e8:bc:4b:05:9f:2c:1b:f3:6c:08:5a:94:34:
82:b1:67:c2:fc:72:05:84:1e:d0:3d:b3:26:ba:93:
85:fd:0d:3a:3c:5f:29:74:60:c0:95:d3:66:98:0d:
34:12:96:70:23:2d:01:24:02:87:9f:c5:cf:a1:03:
f9:8b:55:c4:fe:b3:2f:9a:f8:83:b1:fb:80:1a:e4:
e4:8a:08:f7:f1:b2:78:05:d4:6b:be:2c:c1:bf:c2:
3d:e3:50:e8:5f:6e:13:cb:66:ea:a4:2f:0f:c3:65:
29:20:90:e4:89:63:5c:e9:da:35:c8:83:db:41:08:
ed:b4:a5:54:6d:a7:10:67:74:eb:71:c5:ea:2b:0b:
02:4f:bf:52:34:18:2c:cc:a9:27:cb:82:2c:b9:65:
6f:2f:fa:ce:2b:2a:07:f8:21:cf:bb:25:18:44:9a:
1f:94:bf:20:5c:2f:2d:49:61:24:c7:bc:bc:29:6b:
cb:72:b6:a5:3e:3f:a3:5e:76:89:90:c4:fe:25:45:
c5:7c:72:cd:34:f2:ea:18:45:14:81:1f:be:d5:50:
14:ca:af:74:07:bf:8c:0f:d1:99:8e:9e:50:57:20:
ee:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:67:C3:0C:4A:84:64:56:61:6E:C2:B7:66:91:5D:A2:12:67:75:EB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/emfDDEqEZFZhbsK3ZpFdohJndes.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.137.0/24
Signature Algorithm: sha256WithRSAEncryption
af:14:88:9a:1a:15:24:b1:64:3c:2b:02:12:aa:90:28:d3:30:
41:e8:8c:86:54:7e:c6:e0:b2:fb:0b:ee:4b:10:52:b1:67:71:
7e:71:fa:df:43:47:c2:ba:20:aa:70:aa:8b:08:1d:3c:83:0f:
60:04:0a:f7:e1:39:55:f6:c6:9b:75:77:19:86:98:61:da:cf:
c0:e0:ce:d0:96:81:47:66:63:b2:1d:f3:de:a1:eb:da:28:29:
b3:03:ca:1a:d8:d9:c8:f2:97:03:ee:f1:f6:e1:f4:7b:6c:9e:
51:77:83:8a:60:21:30:aa:c8:be:a7:70:93:2d:c4:5b:9f:15:
01:5a:2d:e9:5e:aa:c3:e2:2b:aa:88:44:ad:ae:6b:f2:9a:02:
fc:02:b0:13:3f:90:17:ad:99:64:f3:4a:89:60:fa:f3:ee:5e:
bf:ee:63:e3:79:ad:80:aa:9f:a9:0c:f4:72:1f:d7:98:3e:12:
ae:ae:05:ad:a7:8f:72:4f:c8:a0:97:49:ee:49:c6:d3:f3:31:
57:b8:17:aa:5c:e4:7e:7d:7c:f1:2e:b6:c4:46:2b:67:33:45:
69:ef:52:14:2a:0c:56:f5:f9:42:bf:76:4b:4a:b5:64:04:06:
ee:a0:df:5a:ff:e7:dd:39:ad:83:68:66:ab:2d:7e:17:a1:1f:
7c:ff:8b:48
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdBNjdDMzBDNEE4NDY0
NTY2MTZFQzJCNzY2OTE1REEyMTI2Nzc1RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKr76uGqO02nUcRbMzHs5tG9N+oVO4KtXRi/lXtcnZ6LxLBZ8s
G/NsCFqUNIKxZ8L8cgWEHtA9sya6k4X9DTo8Xyl0YMCV02aYDTQSlnAjLQEkAoef
xc+hA/mLVcT+sy+a+IOx+4Aa5OSKCPfxsngF1Gu+LMG/wj3jUOhfbhPLZuqkLw/D
ZSkgkOSJY1zp2jXIg9tBCO20pVRtpxBndOtxxeorCwJPv1I0GCzMqSfLgiy5ZW8v
+s4rKgf4Ic+7JRhEmh+UvyBcLy1JYSTHvLwpa8tytqU+P6NedomQxP4lRcV8cs00
8uoYRRSBH77VUBTKr3QHv4wP0ZmOnlBXIO7xAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUemfDDEqEZFZhbsK3ZpFdohJndeswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VtZkRERXFFWkZaaGJzSzNa
cEZkb2hKbmRlcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AYkwDQYJKoZIhvcNAQELBQADggEBAK8UiJoaFSSxZDwrAhKqkCjTMEHojIZUfsbg
svsL7ksQUrFncX5x+t9DR8K6IKpwqosIHTyDD2AECvfhOVX2xpt1dxmGmGHaz8Dg
ztCWgUdmY7Id896h69ooKbMDyhrY2cjylwPu8fbh9HtsnlF3g4pgITCqyL6ncJMt
xFufFQFaLeleqsPiK6qIRK2ua/KaAvwCsBM/kBetmWTzSolg+vPuXr/uY+N5rYCq
n6kM9HIf15g+Eq6uBa2nj3JPyKCXSe5JxtPzMVe4F6pc5H59fPEutsRGK2czRWnv
UhQqDFb1+UK/dktKtWQEBu6g31r/5905rYNoZqstfhehH3z/i0g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org