Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rxDMew1tzkjh7mSU8fQVh4rI_GI.roa
File: rxDMew1tzkjh7mSU8fQVh4rI_GI.roa (raw, json)
Hash identifier: MmdYG5bm9Q98IJ6BSCAKjwzg7/wjxzFtnbRrTfnN8D4=
Subject key identifier: AF:10:CC:7B:0D:6D:CE:48:E1:EE:64:94:F1:F4:15:87:8A:C8:FC:62
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C9D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rxDMew1tzkjh7mSU8fQVh4rI_GI.roa
Signing time: Wed 29 Sep 2021 02:47:59 +0000
ROA not before: Wed 29 Sep 2021 02:47:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7325 (0x1c9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=AF10CC7B0D6DCE48E1EE6494F1F415878AC8FC62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:e7:6b:ea:18:a7:87:3e:d6:5a:69:ff:70:
05:07:77:e7:6f:97:e8:65:bd:c2:15:05:24:e4:df:
b9:7a:2a:55:4c:2e:32:68:c3:34:9e:f9:09:cf:8a:
59:42:d5:03:89:65:4f:2a:d4:f1:f0:36:f3:c2:16:
e9:4c:87:d9:cc:18:1a:87:27:6c:7f:26:a6:84:09:
0b:bf:87:aa:f0:5c:bd:9b:bf:90:b5:e5:19:0a:44:
f5:8c:1d:4a:00:10:ec:c3:d2:d2:09:5d:ba:ac:e2:
fa:04:14:bf:d1:e5:68:f3:67:32:ba:59:c2:7d:9c:
ca:99:5c:6d:05:ab:3d:4d:31:b5:4d:78:49:a3:e1:
6b:fd:d6:91:de:26:a9:75:8b:4a:6a:de:2f:c5:92:
85:a0:eb:ff:cb:b0:fa:6b:7b:00:09:fd:34:30:84:
de:55:98:df:c2:84:25:da:1b:f1:a8:d1:d1:a9:66:
8c:95:09:41:bb:ae:a0:05:8f:d9:4e:d7:47:af:0d:
fa:5c:d1:22:8e:0e:40:4f:9f:40:b2:93:d4:2a:69:
89:fd:5e:4e:d3:22:78:31:f9:60:e2:17:36:f7:d1:
be:49:5f:61:1d:95:bd:05:e6:fb:a4:6c:53:39:ab:
59:26:f2:22:99:a2:a8:4c:67:51:85:92:9e:d6:d8:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:10:CC:7B:0D:6D:CE:48:E1:EE:64:94:F1:F4:15:87:8A:C8:FC:62
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rxDMew1tzkjh7mSU8fQVh4rI_GI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.131.0/24
Signature Algorithm: sha256WithRSAEncryption
38:af:3c:ce:3c:e9:d5:0f:c9:1c:cc:b0:e6:db:42:40:3d:c8:
f1:0c:7a:32:a4:4c:aa:72:c0:7c:bf:78:d8:56:86:7b:c1:9d:
77:68:17:d1:6b:0b:20:04:dc:8f:a1:32:42:e2:6a:f6:dd:99:
6b:29:01:35:2d:52:88:8d:ae:76:1c:ed:04:f8:c9:36:8c:34:
9d:10:26:54:bb:30:01:ac:b7:b1:ac:b3:cd:34:65:d3:d6:cd:
34:44:54:b9:90:87:d1:43:e2:d9:13:e7:71:a8:17:eb:b5:22:
63:eb:1b:c1:91:67:b3:66:f0:2d:5c:26:67:74:b4:d5:20:62:
b9:c0:db:f4:ce:0d:9b:e6:c0:94:5a:b1:4a:58:3f:4f:62:83:
af:64:39:10:4f:41:03:72:04:2f:34:c1:a1:c0:49:be:e8:53:
7b:0a:92:57:08:bc:b8:0d:8b:8c:68:6e:4b:d3:6c:08:f9:3e:
7a:6a:04:b7:81:d1:76:7e:43:67:1b:e4:f0:02:4b:eb:bf:7c:
c7:22:f4:92:bc:67:86:bc:9a:34:a0:4c:d6:27:b2:d4:5d:23:
6c:68:5b:26:0a:58:da:10:5d:93:17:36:4b:fe:9b:09:40:82:
ef:84:9a:40:cf:ed:9a:bd:4a:e7:5f:34:d2:1a:1a:0b:63:9d:
28:99:33:75
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3NTlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEFGMTBDQzdCMEQ2RENF
NDhFMUVFNjQ5NEYxRjQxNTg3OEFDOEZDNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBEedr6hinhz7WWmn/cAUHd+dvl+hlvcIVBSTk37l6KlVMLjJo
wzSe+QnPillC1QOJZU8q1PHwNvPCFulMh9nMGBqHJ2x/JqaECQu/h6rwXL2bv5C1
5RkKRPWMHUoAEOzD0tIJXbqs4voEFL/R5WjzZzK6WcJ9nMqZXG0Fqz1NMbVNeEmj
4Wv91pHeJql1i0pq3i/FkoWg6//LsPprewAJ/TQwhN5VmN/ChCXaG/Go0dGpZoyV
CUG7rqAFj9lO10evDfpc0SKODkBPn0Cyk9QqaYn9Xk7TIngx+WDiFzb30b5JX2Ed
lb0F5vukbFM5q1km8iKZoqhMZ1GFkp7W2AQlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrxDMew1tzkjh7mSU8fQVh4rI/GIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3J4RE1ldzF0emtqaDdtU1U4
ZlFWaDRySV9HSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AYMwDQYJKoZIhvcNAQELBQADggEBADivPM486dUPyRzMsObbQkA9yPEMejKkTKpy
wHy/eNhWhnvBnXdoF9FrCyAE3I+hMkLiavbdmWspATUtUoiNrnYc7QT4yTaMNJ0Q
JlS7MAGst7Gss800ZdPWzTREVLmQh9FD4tkT53GoF+u1ImPrG8GRZ7Nm8C1cJmd0
tNUgYrnA2/TODZvmwJRasUpYP09ig69kORBPQQNyBC80waHASb7oU3sKklcIvLgN
i4xobkvTbAj5PnpqBLeB0XZ+Q2cb5PACS+u/fMci9JK8Z4a8mjSgTNYnstRdI2xo
WyYKWNoQXZMXNkv+mwlAgu+EmkDP7Zq9SudfNNIaGgtjnSiZM3U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org