Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rtP6R-gSwyLuzz_EfDKH7_2MDj4.roa
File: rtP6R-gSwyLuzz_EfDKH7_2MDj4.roa (raw, json)
Hash identifier: xt9e9CQF/8kZLT4lGOeD3884rI/VzXJaTghjCqq3ZcY=
Subject key identifier: AE:D3:FA:47:E8:12:C3:22:EE:CF:3F:C4:7C:32:87:EF:FD:8C:0E:3E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2129
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rtP6R-gSwyLuzz_EfDKH7_2MDj4.roa
Signing time: Fri 25 Nov 2022 04:39:33 +0000
ROA not before: Fri 25 Nov 2022 04:39:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8489 (0x2129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AED3FA47E812C322EECF3FC47C3287EFFD8C0E3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:05:b5:6e:fc:93:40:91:20:ac:5c:0d:4b:
a6:0f:4d:f6:75:f9:3b:46:af:2a:d9:c7:29:b9:74:
87:b7:84:4e:74:bf:7a:08:a0:e4:7d:13:94:8c:05:
76:ac:da:c1:fb:6e:6d:3e:3f:fd:0b:3e:61:31:46:
ab:2a:60:d2:9f:df:78:9a:7a:ef:39:24:98:35:e7:
24:6d:29:43:6e:68:c7:e5:38:2b:ac:3b:dd:86:ea:
72:c6:72:c3:13:7f:21:7a:46:63:64:e5:96:f0:63:
38:62:42:84:a1:44:46:81:1f:7d:35:32:63:e1:32:
51:19:16:a0:6b:e7:d6:d9:c1:68:5f:ce:12:98:bd:
1f:49:11:2f:07:d0:b8:83:5a:dc:b9:ef:77:4f:8e:
1d:25:34:69:de:2c:09:91:bc:e6:83:8b:9c:b3:4b:
67:6f:b9:e0:96:02:6c:ab:c1:43:34:3f:37:69:9a:
ff:f4:1d:53:d9:d0:ec:ea:6d:19:88:6d:3f:aa:c5:
45:d7:8a:c0:70:b5:81:7a:46:82:42:b6:85:60:b2:
2c:76:42:0c:51:25:9f:29:cb:b4:d1:96:0b:55:6e:
b0:8c:2b:81:f5:c3:ba:12:ef:08:98:53:72:69:8b:
1c:a2:aa:32:77:29:0a:57:11:f6:2a:9c:b8:8d:8f:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D3:FA:47:E8:12:C3:22:EE:CF:3F:C4:7C:32:87:EF:FD:8C:0E:3E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rtP6R-gSwyLuzz_EfDKH7_2MDj4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.44.0/24
Signature Algorithm: sha256WithRSAEncryption
63:af:24:a5:1c:e3:ba:56:e4:6b:70:ab:d8:33:e2:d5:32:a1:
28:23:30:3d:45:1f:4b:f2:d0:c8:10:7c:a1:bb:d4:11:35:0f:
44:74:e9:02:a4:d6:9b:dd:bf:bf:b7:eb:5f:89:77:dc:08:bc:
5c:43:96:01:68:be:12:30:de:2b:6e:02:b4:e5:f2:67:d3:25:
e5:db:97:f3:ba:da:b6:58:96:63:0a:83:93:db:74:81:af:4d:
0e:ec:10:9d:19:67:2d:76:80:8a:db:c1:a1:e4:81:b7:80:eb:
41:9d:55:7a:91:ef:59:6c:8a:2c:18:2e:ef:f5:ef:bc:6c:54:
fc:c8:07:e9:8f:fb:1a:b3:43:27:ad:21:f3:37:f3:73:21:46:
b7:18:b9:fd:3b:43:79:3a:88:4b:1b:d7:b6:4f:63:ff:d1:6e:
3b:27:78:0b:d7:83:d2:b3:c1:c0:39:f0:82:dc:d4:c0:c6:fa:
72:93:a1:d7:db:3f:cb:ce:72:71:b7:53:60:45:eb:44:42:74:
a8:1f:3b:b0:69:4f:e0:b8:72:bb:c2:d9:96:74:4d:8e:9e:08:
8d:06:3e:48:75:9d:51:68:c7:e7:79:fe:85:de:cb:ed:8f:99:
4b:09:70:38:c9:51:3d:ae:5f:a4:df:7f:a5:18:89:66:e9:ed:
d9:a0:89:36
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICISkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MzNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEFFRDNGQTQ3RTgxMkMz
MjJFRUNGM0ZDNDdDMzI4N0VGRkQ4QzBFM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0QAW1bvyTQJEgrFwNS6YPTfZ1+TtGryrZxym5dIe3hE50v3oI
oOR9E5SMBXas2sH7bm0+P/0LPmExRqsqYNKf33iaeu85JJg15yRtKUNuaMflOCus
O92G6nLGcsMTfyF6RmNk5ZbwYzhiQoShREaBH301MmPhMlEZFqBr59bZwWhfzhKY
vR9JES8H0LiDWty573dPjh0lNGneLAmRvOaDi5yzS2dvueCWAmyrwUM0Pzdpmv/0
HVPZ0OzqbRmIbT+qxUXXisBwtYF6RoJCtoVgsix2QgxRJZ8py7TRlgtVbrCMK4H1
w7oS7wiYU3JpixyiqjJ3KQpXEfYqnLiNjzrZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrtP6R+gSwyLuzz/EfDKH7/2MDj4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3J0UDZSLWdTd3lMdXp6X0Vm
REtIN18yTURqNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
ASwwDQYJKoZIhvcNAQELBQADggEBAGOvJKUc47pW5Gtwq9gz4tUyoSgjMD1FH0vy
0MgQfKG71BE1D0R06QKk1pvdv7+361+Jd9wIvFxDlgFovhIw3ituArTl8mfTJeXb
l/O62rZYlmMKg5PbdIGvTQ7sEJ0ZZy12gIrbwaHkgbeA60GdVXqR71lsiiwYLu/1
77xsVPzIB+mP+xqzQyetIfM383MhRrcYuf07Q3k6iEsb17ZPY//RbjsneAvXg9Kz
wcA58ILc1MDG+nKTodfbP8vOcnG3U2BF60RCdKgfO7BpT+C4crvC2ZZ0TY6eCI0G
Pkh1nVFox+d5/oXey+2PmUsJcDjJUT2uX6Tff6UYiWbp7dmgiTY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org