Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iqA53F01859qHXx-x8dbOe0GIRs.roa
File: iqA53F01859qHXx-x8dbOe0GIRs.roa (raw, json)
Hash identifier: 5nB2U9ZXDnyRuUUCjZ817t9Dba8WZISGr2cccnGXsXc=
Subject key identifier: 8A:A0:39:DC:5D:35:F3:9F:6A:1D:7C:7E:C7:C7:5B:39:ED:06:21:1B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C52
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iqA53F01859qHXx-x8dbOe0GIRs.roa
Signing time: Wed 29 Sep 2021 02:47:36 +0000
ROA not before: Wed 29 Sep 2021 02:47:36 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7250 (0x1c52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:36 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8AA039DC5D35F39F6A1D7C7EC7C75B39ED06211B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:b3:05:84:03:6c:ac:61:ef:c5:74:5c:38:
10:86:ec:2b:b1:06:03:2f:03:01:dd:4c:cc:5a:21:
3d:60:5c:b6:91:be:1f:9a:95:73:5c:8e:15:5f:d7:
c0:c3:03:a0:53:c3:2b:f8:bf:6d:21:cd:a1:7d:24:
5f:a5:35:51:a4:24:fa:5e:a1:fa:4d:88:99:28:dd:
bd:cc:bc:a5:52:03:36:4d:5d:d3:5f:fc:1d:a2:16:
b3:63:8a:71:7e:94:28:26:f2:93:f7:6d:99:00:be:
50:60:70:d6:62:63:2b:cf:f6:f7:d2:f7:a7:41:e3:
ef:53:78:1a:4f:47:c6:dd:13:94:f2:39:b1:ab:74:
49:02:a2:7e:55:21:13:19:84:cb:a2:d5:26:71:16:
e6:15:cc:af:8f:5a:6d:e8:df:de:1a:33:07:bf:6e:
e9:34:c7:3c:d8:e4:1b:b6:92:55:85:b8:9b:98:18:
db:f0:95:c1:e2:05:d7:e5:3b:8f:04:98:8a:a0:8c:
12:70:68:41:fa:7c:b2:a3:60:55:b9:95:2c:cb:e5:
46:9e:8e:6b:48:be:3a:8e:bf:21:70:6e:79:22:01:
ad:c7:d9:22:7d:2c:93:80:b5:23:d6:77:0b:4a:d5:
28:25:33:32:18:fd:bc:f4:a5:00:72:82:3c:b2:c5:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A0:39:DC:5D:35:F3:9F:6A:1D:7C:7E:C7:C7:5B:39:ED:06:21:1B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iqA53F01859qHXx-x8dbOe0GIRs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.40.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:64:09:6b:b3:72:9d:48:39:69:da:28:e8:cb:be:c4:a8:1c:
b7:8e:1b:96:2a:de:5a:22:a1:a6:55:ca:42:ed:5d:c0:cf:80:
27:f7:82:11:f9:b9:7d:a3:f4:f4:51:c9:35:d0:14:4a:84:af:
04:b2:b2:88:58:65:3d:9f:75:16:81:ac:4f:e9:c0:6f:c7:65:
46:0b:1d:c9:d2:21:5b:63:7d:5f:47:01:cb:06:a6:e0:9c:f0:
01:28:fd:27:d7:d5:5c:71:0a:69:73:4e:06:12:de:c9:fc:49:
48:a9:69:3f:2f:7e:b2:69:e7:8f:94:0c:63:7e:69:b9:2f:72:
4d:a1:1e:f3:ea:15:cd:10:41:35:97:db:e9:28:2c:41:bd:c8:
96:51:b4:bb:9d:4a:c8:33:03:9f:f7:15:e9:f6:c2:a2:05:e9:
e4:1b:11:d3:c7:9f:82:f1:a5:83:d7:fd:6c:d9:fa:4e:21:9a:
2b:9e:80:f1:35:1d:8b:b4:21:b1:7f:6f:40:53:6a:1f:4a:39:
dc:04:df:90:4b:c1:83:54:03:b6:80:36:c9:0c:09:ed:52:31:
29:15:81:4b:75:96:42:42:c2:a9:87:3a:48:5b:1f:fc:e8:28:
3f:7d:4d:78:a6:bd:9f:f6:6a:9a:1f:e6:0e:eb:e4:02:7f:c8:
33:6f:1a:3a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHFIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3MzZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDhBQTAzOURDNUQzNUYz
OUY2QTFEN0M3RUM3Qzc1QjM5RUQwNjIxMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1BLMFhANsrGHvxXRcOBCG7CuxBgMvAwHdTMxaIT1gXLaRvh+a
lXNcjhVf18DDA6BTwyv4v20hzaF9JF+lNVGkJPpeofpNiJko3b3MvKVSAzZNXdNf
/B2iFrNjinF+lCgm8pP3bZkAvlBgcNZiYyvP9vfS96dB4+9TeBpPR8bdE5TyObGr
dEkCon5VIRMZhMui1SZxFuYVzK+PWm3o394aMwe/buk0xzzY5Bu2klWFuJuYGNvw
lcHiBdflO48EmIqgjBJwaEH6fLKjYFW5lSzL5UaejmtIvjqOvyFwbnkiAa3H2SJ9
LJOAtSPWdwtK1SglMzIY/bz0pQBygjyyxZVBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUiqA53F01859qHXx+x8dbOe0GIRswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lxQTUzRjAxODU5cUhYeC14
OGRiT2UwR0lScy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
ASgwDQYJKoZIhvcNAQELBQADggEBALRkCWuzcp1IOWnaKOjLvsSoHLeOG5Yq3loi
oaZVykLtXcDPgCf3ghH5uX2j9PRRyTXQFEqErwSysohYZT2fdRaBrE/pwG/HZUYL
HcnSIVtjfV9HAcsGpuCc8AEo/SfX1VxxCmlzTgYS3sn8SUipaT8vfrJp54+UDGN+
abkvck2hHvPqFc0QQTWX2+koLEG9yJZRtLudSsgzA5/3Fen2wqIF6eQbEdPHn4Lx
pYPX/WzZ+k4hmiuegPE1HYu0IbF/b0BTah9KOdwE35BLwYNUA7aANskMCe1SMSkV
gUt1lkJCwqmHOkhbH/zoKD99TXimvZ/2apof5g7r5AJ/yDNvGjo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org