Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sZhkbt2QQ7B_Hd9j6ugPkGzL6lY.roa
File: sZhkbt2QQ7B_Hd9j6ugPkGzL6lY.roa (raw, json)
Hash identifier: C97kc51ta3uzzo1Gf7kgCaIBcdrc2lwDvBCU40WqzO0=
Subject key identifier: B1:98:64:6E:DD:90:43:B0:7F:1D:DF:63:EA:E8:0F:90:6C:CB:EA:56
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C4E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sZhkbt2QQ7B_Hd9j6ugPkGzL6lY.roa
Signing time: Wed 29 Sep 2021 02:47:35 +0000
ROA not before: Wed 29 Sep 2021 02:47:35 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 106.1.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7246 (0x1c4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:35 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B198646EDD9043B07F1DDF63EAE80F906CCBEA56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:75:17:eb:43:b6:c9:99:29:9f:1c:39:81:
1c:a4:e3:8e:43:55:d4:1a:22:3a:02:e6:0a:ed:22:
af:05:e4:bb:b8:2a:e0:4c:be:ed:73:39:a8:2a:14:
3a:b8:72:1b:e8:57:c9:c1:11:bb:b5:f0:55:6a:4c:
e2:13:a2:a9:1c:70:09:36:21:50:83:78:97:84:60:
dd:b4:7a:c6:14:b2:4d:e7:a1:f9:13:36:26:60:19:
11:f2:36:a3:e7:cb:f0:ee:68:a0:45:e4:0c:07:db:
41:c3:72:f7:87:58:35:3b:23:61:cf:d2:1c:08:7c:
6e:79:61:96:e8:f3:fe:c9:bd:15:f6:37:b5:9b:91:
e5:88:fd:51:1c:5a:50:e9:9c:25:62:96:0a:76:d5:
fe:5d:24:1f:1b:4e:a8:6e:eb:ea:4f:85:40:5a:6a:
9e:a0:33:25:50:eb:2c:fa:d4:10:57:a6:e4:f4:06:
57:10:ab:f6:2e:91:a6:3c:a1:9a:8d:1a:fd:24:9a:
2d:ce:5c:75:6b:57:e6:62:de:9b:17:5b:33:0f:4a:
c9:8b:50:47:b7:69:e5:e4:52:51:30:a0:a6:cb:28:
d0:88:8a:fd:03:e7:52:cc:c4:6e:e8:88:94:f5:bf:
8b:98:83:1a:3f:4b:e4:64:d4:ad:97:02:2b:3c:a4:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:98:64:6E:DD:90:43:B0:7F:1D:DF:63:EA:E8:0F:90:6C:CB:EA:56
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sZhkbt2QQ7B_Hd9j6ugPkGzL6lY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.24.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:bf:cd:02:fe:ac:77:b1:40:f5:76:05:f7:94:89:81:29:ab:
42:1c:16:78:19:91:a8:12:49:5f:0c:a0:d9:72:58:3d:2b:d6:
98:6e:1f:1e:fc:59:eb:3f:10:35:fd:0d:6c:1d:88:9e:72:6b:
e8:66:22:33:3b:fe:ce:5b:81:5c:9b:60:2f:b5:fb:a3:1a:ad:
b9:42:40:13:a4:07:f0:53:bc:c0:54:81:56:d4:c8:c8:af:74:
36:90:f4:e4:0a:01:eb:18:6a:a4:01:36:33:f5:83:36:5d:af:
5f:a7:10:b7:c5:d2:64:47:96:bd:56:f6:8c:26:10:32:9c:6f:
00:08:b4:65:45:4a:ca:f6:78:e2:d1:36:05:c2:5f:09:23:5b:
7f:9e:88:4c:42:d6:93:63:86:7b:c3:9f:80:9f:64:89:e7:a4:
d9:20:81:13:66:e5:9d:ae:05:00:b0:dd:02:e4:fd:ec:ca:c0:
78:27:aa:21:08:4e:6c:0b:3b:df:56:cb:b1:72:cf:35:75:ff:
bb:65:04:f5:69:40:dd:f0:43:50:c7:c7:6a:67:89:33:bd:ec:
5e:e5:e8:22:6d:f4:fd:1e:29:4f:0c:3f:3c:36:e4:4c:b2:72:
bc:03:45:63:b2:5f:e8:ea:b2:32:d5:dc:9c:25:34:4c:c1:ad:
05:36:fe:b3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHE4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3MzVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEIxOTg2NDZFREQ5MDQz
QjA3RjFEREY2M0VBRTgwRjkwNkNDQkVBNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsjHUX60O2yZkpnxw5gRyk445DVdQaIjoC5grtIq8F5Lu4KuBM
vu1zOagqFDq4chvoV8nBEbu18FVqTOIToqkccAk2IVCDeJeEYN20esYUsk3nofkT
NiZgGRHyNqPny/DuaKBF5AwH20HDcveHWDU7I2HP0hwIfG55YZbo8/7JvRX2N7Wb
keWI/VEcWlDpnCVilgp21f5dJB8bTqhu6+pPhUBaap6gMyVQ6yz61BBXpuT0BlcQ
q/YukaY8oZqNGv0kmi3OXHVrV+Zi3psXWzMPSsmLUEe3aeXkUlEwoKbLKNCIiv0D
51LMxG7oiJT1v4uYgxo/S+Rk1K2XAis8pKTxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUsZhkbt2QQ7B/Hd9j6ugPkGzL6lYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3NaaGtidDJRUTdCX0hkOWo2
dWdQa0d6TDZsWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq
ARgwDQYJKoZIhvcNAQELBQADggEBAHy/zQL+rHexQPV2BfeUiYEpq0IcFngZkagS
SV8MoNlyWD0r1phuHx78Wes/EDX9DWwdiJ5ya+hmIjM7/s5bgVybYC+1+6MarblC
QBOkB/BTvMBUgVbUyMivdDaQ9OQKAesYaqQBNjP1gzZdr1+nELfF0mRHlr1W9owm
EDKcbwAItGVFSsr2eOLRNgXCXwkjW3+eiExC1pNjhnvDn4CfZInnpNkggRNm5Z2u
BQCw3QLk/ezKwHgnqiEITmwLO99Wy7FyzzV1/7tlBPVpQN3wQ1DHx2pniTO97F7l
6CJt9P0eKU8MPzw25EyycrwDRWOyX+jqsjLV3JwlNEzBrQU2/rM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org