Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/snsUGj3bl7rtwlRtDXb_rK3oQwY.roa
File: snsUGj3bl7rtwlRtDXb_rK3oQwY.roa (raw, json)
Hash identifier: buI080bohe7MnAIizq5D4pL0YmV7dcSAeebrJsu/FF4=
Subject key identifier: B2:7B:14:1A:3D:DB:97:BA:ED:C2:54:6D:0D:76:FF:AC:AD:E8:43:06
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D19
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/snsUGj3bl7rtwlRtDXb_rK3oQwY.roa
Signing time: Tue 29 Sep 2020 09:54:11 +0000
ROA not before: Tue 29 Sep 2020 09:54:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3353 (0xd19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:11 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B27B141A3DDB97BAEDC2546D0D76FFACADE84306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:84:79:ad:a4:f9:1e:03:fe:2d:82:50:f3:
ae:25:e2:8b:d4:50:ec:13:4d:b3:64:f8:c7:1d:34:
82:a4:17:fc:55:37:4b:05:cc:68:d5:ef:16:8c:0e:
f6:d0:01:97:73:fa:de:c9:bc:87:c9:22:ae:86:06:
d4:03:33:60:0c:54:af:56:87:77:07:75:64:b6:eb:
f7:7c:91:9b:76:4d:99:3b:2a:a2:3f:f8:de:9b:3e:
2e:55:ed:37:26:fe:0a:99:18:65:ec:f1:84:fe:7f:
e8:b4:ac:fe:25:1a:63:b4:94:9d:ea:b4:fe:f1:21:
9a:1b:b6:15:39:1b:74:cb:d6:19:30:c5:7f:1f:7c:
52:da:97:cd:29:75:de:ef:b6:77:c7:81:c2:91:a4:
42:31:1a:86:76:70:9b:63:38:b2:a8:ec:f1:6d:3e:
fa:11:9b:fc:c4:71:b7:d5:71:95:7c:26:a4:76:3b:
31:48:39:cd:c6:05:5a:19:d7:80:5d:19:a1:24:8f:
73:3f:60:e6:dc:2b:5a:7f:9f:70:32:7b:54:54:fc:
37:b0:13:ab:c9:0b:99:5b:ec:e9:97:c8:81:99:9c:
fa:21:b5:ab:89:a8:24:83:9f:c6:c0:ac:7f:1f:2a:
ef:22:3e:38:7c:ca:0e:04:fe:7c:80:0f:65:ab:4d:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7B:14:1A:3D:DB:97:BA:ED:C2:54:6D:0D:76:FF:AC:AD:E8:43:06
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/snsUGj3bl7rtwlRtDXb_rK3oQwY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.20.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:62:f4:c3:7d:1d:da:d9:72:39:b3:24:c5:06:06:cf:0d:61:
30:31:bc:e1:8d:ce:38:43:26:ab:6a:6e:01:3f:59:1d:40:6c:
89:17:35:23:52:4f:fd:a4:cd:50:5b:5b:e9:e3:a8:1f:ea:ba:
de:3f:3d:53:f9:2a:74:7f:29:88:64:7c:9a:6a:a5:a8:68:22:
34:81:09:b4:38:de:15:06:9c:39:be:ea:73:ab:2b:4c:38:c1:
1b:20:c3:c7:cb:4f:26:d8:3f:c8:6a:19:5c:32:52:e8:b5:70:
31:75:19:5a:d9:71:53:af:50:5b:44:e7:87:3b:ea:e7:89:cc:
8a:18:5e:d3:1c:fd:b9:e9:d0:fb:86:80:74:21:0a:54:44:e7:
d6:a4:15:8e:37:e2:14:44:46:90:38:b6:b7:0d:a5:14:16:e0:
59:c7:45:f3:e0:a1:15:f6:23:6f:02:e4:f4:d7:74:81:c4:4a:
39:e6:17:53:5b:5f:0f:ba:48:e5:ee:cf:e8:3b:f1:b0:65:37:
f4:4f:d9:5e:ba:a7:2c:29:1a:5f:0b:f4:89:63:13:15:1f:67:
4b:73:cc:d4:8b:26:6a:99:4c:66:f3:8f:dd:90:f9:f6:f0:ec:
ce:ae:8f:cd:af:94:c9:d4:cc:03:d8:75:4f:94:cf:07:0e:b9:
59:5f:fc:16
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0MTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEIyN0IxNDFBM0REQjk3
QkFFREMyNTQ2RDBENzZGRkFDQURFODQzMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClx4R5raT5HgP+LYJQ864l4ovUUOwTTbNk+McdNIKkF/xVN0sF
zGjV7xaMDvbQAZdz+t7JvIfJIq6GBtQDM2AMVK9Wh3cHdWS26/d8kZt2TZk7KqI/
+N6bPi5V7Tcm/gqZGGXs8YT+f+i0rP4lGmO0lJ3qtP7xIZobthU5G3TL1hkwxX8f
fFLal80pdd7vtnfHgcKRpEIxGoZ2cJtjOLKo7PFtPvoRm/zEcbfVcZV8JqR2OzFI
Oc3GBVoZ14BdGaEkj3M/YObcK1p/n3Aye1RU/DewE6vJC5lb7OmXyIGZnPohtauJ
qCSDn8bArH8fKu8iPjh8yg4E/nyAD2WrTSxXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUsnsUGj3bl7rtwlRtDXb/rK3oQwYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Nuc1VHajNibDdydHdsUnRE
WGJfckszb1F3WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
ARQwDQYJKoZIhvcNAQELBQADggEBACti9MN9HdrZcjmzJMUGBs8NYTAxvOGNzjhD
JqtqbgE/WR1AbIkXNSNST/2kzVBbW+njqB/qut4/PVP5KnR/KYhkfJpqpahoIjSB
CbQ43hUGnDm+6nOrK0w4wRsgw8fLTybYP8hqGVwyUui1cDF1GVrZcVOvUFtE54c7
6ueJzIoYXtMc/bnp0PuGgHQhClRE59akFY434hRERpA4trcNpRQW4FnHRfPgoRX2
I28C5PTXdIHESjnmF1NbXw+6SOXuz+g78bBlN/RP2V66pywpGl8L9IljExUfZ0tz
zNSLJmqZTGbzj92Q+fbw7M6uj82vlMnUzAPYdU+UzwcOuVlf/BY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:33 2025 by rpki-client