Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lOeQs5C_5tfQBUhIw_cXUdJIVp4.roa
File: lOeQs5C_5tfQBUhIw_cXUdJIVp4.roa (raw, json)
Hash identifier: iVf0xDyJ+/vyZVWZ6TFQlagG37dbE2SvA4H7xtNVfqU=
Subject key identifier: 94:E7:90:B3:90:BF:E6:D7:D0:05:48:48:C3:F7:17:51:D2:48:56:9E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lOeQs5C_5tfQBUhIw_cXUdJIVp4.roa
Signing time: Thu 15 Sep 2022 02:45:21 +0000
ROA not before: Thu 15 Sep 2022 02:45:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=94E790B390BFE6D7D0054848C3F71751D248569E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:46:01:f6:44:f1:9e:03:33:51:cb:93:b8:
80:15:d3:2d:59:18:0d:6b:31:b0:04:7a:22:ff:d7:
4f:24:ec:42:4b:de:59:26:68:4f:3f:1e:bd:27:83:
63:d2:41:df:6d:cf:64:2f:ad:f5:d1:27:89:c9:75:
87:ea:ef:69:53:b9:51:c1:33:8c:b2:50:41:94:24:
29:1c:dc:ff:a8:f9:fd:5b:a3:ae:4d:90:5a:86:5a:
05:d9:38:55:54:c8:60:2a:c9:f6:e2:9d:40:89:48:
e7:11:5a:0a:11:a7:65:8c:21:78:a9:29:a5:32:ac:
e5:ec:a4:b9:8c:0d:2f:a6:36:50:81:4a:85:9a:5b:
ad:12:aa:1e:da:be:27:77:e7:cf:76:49:d3:cb:c5:
f5:1f:bb:b1:81:77:69:a7:9e:8d:ae:7e:86:dc:06:
92:b7:b4:34:e9:e3:7a:30:94:4c:eb:c7:12:72:d4:
bd:11:04:9e:06:71:c0:a4:6c:f6:95:8d:7b:a1:e3:
c7:3d:8f:b8:57:dd:10:37:4e:2b:2e:f6:b0:77:9f:
0c:37:24:56:7c:db:1a:76:87:35:d0:f0:41:8c:16:
5f:a1:43:5c:af:db:52:c6:ec:b0:80:0f:3a:bc:e0:
2e:86:18:d6:cf:b8:37:2a:77:08:9d:52:fe:70:72:
b6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E7:90:B3:90:BF:E6:D7:D0:05:48:48:C3:F7:17:51:D2:48:56:9E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lOeQs5C_5tfQBUhIw_cXUdJIVp4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.100.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:5a:f9:31:61:f1:0c:17:90:c4:0b:64:3a:30:10:5f:d9:b3:
2e:a3:ce:8d:72:50:12:9d:2c:3d:5f:4d:1e:fc:c3:e9:63:a9:
9a:0b:bf:85:17:5a:0e:97:9b:d7:9a:2f:5d:d4:12:e1:36:0e:
0b:b7:57:7e:1a:ac:b6:74:09:91:77:56:ee:cf:8b:a2:53:12:
70:9f:c7:7c:94:61:ba:56:65:75:b5:77:7a:ae:fe:03:20:ae:
49:a0:b3:71:17:f3:3c:fe:bb:ad:39:05:4d:91:4a:79:c8:db:
e0:cf:7f:44:06:6e:ce:7d:e1:56:30:70:fe:2e:b2:07:31:7b:
81:92:9e:0d:4c:37:29:dd:08:2f:dd:66:d4:f4:a8:a1:ec:cd:
38:01:fe:71:00:4d:42:62:b9:0d:35:c0:a2:87:8a:c1:1d:5a:
a9:83:9e:f3:96:6d:c6:7f:4e:d8:2c:5b:d7:4e:64:99:49:be:
7b:60:72:4f:69:42:23:42:f2:e0:7a:45:ef:fe:97:8d:dc:43:
79:5a:f5:a4:b2:ad:d0:6b:28:90:a4:19:ac:18:a6:4b:72:37:
39:02:3c:02:a1:cc:7c:74:33:8e:e6:28:49:e8:72:65:57:f0:
d3:23:a1:1c:0f:9a:2b:b4:57:bf:2d:d9:75:e8:42:57:8f:e9:
07:53:13:23
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MjFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk0RTc5MEIzOTBCRkU2
RDdEMDA1NDg0OEMzRjcxNzUxRDI0ODU2OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxYUYB9kTxngMzUcuTuIAV0y1ZGA1rMbAEeiL/108k7EJL3lkm
aE8/Hr0ng2PSQd9tz2QvrfXRJ4nJdYfq72lTuVHBM4yyUEGUJCkc3P+o+f1bo65N
kFqGWgXZOFVUyGAqyfbinUCJSOcRWgoRp2WMIXipKaUyrOXspLmMDS+mNlCBSoWa
W60Sqh7avid35892SdPLxfUfu7GBd2mnno2ufobcBpK3tDTp43owlEzrxxJy1L0R
BJ4GccCkbPaVjXuh48c9j7hX3RA3Tisu9rB3nww3JFZ82xp2hzXQ8EGMFl+hQ1yv
21LG7LCADzq84C6GGNbPuDcqdwidUv5wcrYpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUlOeQs5C/5tfQBUhIw/cXUdJIVp4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xPZVFzNUNfNXRmUUJVaEl3
X2NYVWRKSVZwNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AWQwDQYJKoZIhvcNAQELBQADggEBAJpa+TFh8QwXkMQLZDowEF/Zsy6jzo1yUBKd
LD1fTR78w+ljqZoLv4UXWg6Xm9eaL13UEuE2Dgu3V34arLZ0CZF3Vu7Pi6JTEnCf
x3yUYbpWZXW1d3qu/gMgrkmgs3EX8zz+u605BU2RSnnI2+DPf0QGbs594VYwcP4u
sgcxe4GSng1MNyndCC/dZtT0qKHszTgB/nEATUJiuQ01wKKHisEdWqmDnvOWbcZ/
TtgsW9dOZJlJvntgck9pQiNC8uB6Re/+l43cQ3la9aSyrdBrKJCkGawYpktyNzkC
PAKhzHx0M47mKEnocmVX8NMjoRwPmiu0V78t2XXoQleP6QdTEyM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org