Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tFkcqAZm2Z95udIfwmPXPPjgm2U.roa
File: tFkcqAZm2Z95udIfwmPXPPjgm2U.roa (raw, json)
Hash identifier: oSH1/3bz+iDiV0t5r9CbN8liqup6etJ2haJEnM0J8I4=
Subject key identifier: B4:59:1C:A8:06:66:D9:9F:79:B9:D2:1F:C2:63:D7:3C:F8:E0:9B:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 16D5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tFkcqAZm2Z95udIfwmPXPPjgm2U.roa
Signing time: Sun 07 Feb 2021 12:14:41 +0000
ROA not before: Sun 07 Feb 2021 12:14:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5845 (0x16d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:14:41 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B4591CA80666D99F79B9D21FC263D73CF8E09B65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:e5:71:84:06:ef:bc:4e:9f:0d:b0:cc:a0:
15:41:04:40:78:eb:7c:23:1b:f9:9d:67:e6:15:2d:
15:1c:76:90:1d:94:57:57:b8:f7:32:f1:8b:03:46:
6b:07:f4:56:a5:23:4c:0f:35:79:e1:33:33:4a:cb:
61:72:65:1a:0a:16:77:3f:8a:97:4e:db:10:4e:04:
c4:86:f3:92:3c:b2:98:7a:41:9e:90:cf:a8:a0:5c:
d3:45:07:6d:cd:73:49:49:c5:61:4d:e5:ca:6b:5c:
ed:75:1c:53:a2:13:24:81:e2:73:78:42:20:25:96:
22:0d:f5:b8:53:2f:e2:cf:35:fc:65:16:1e:3d:79:
f1:bb:84:0a:5e:7d:e7:78:fb:ca:5d:aa:46:e6:ac:
2c:d4:1b:03:f1:0e:5c:98:c9:a5:13:a7:f2:09:eb:
30:23:a9:9d:70:60:90:db:a9:a9:1e:06:a3:60:3a:
ee:c1:8a:54:62:ad:62:69:5f:ee:28:e9:da:92:d8:
9f:2c:e3:60:25:5c:4b:9c:54:bf:41:8e:9f:32:18:
5d:dd:0a:db:d7:71:de:a9:c6:c3:19:6f:a9:e1:1c:
6d:b3:3b:98:f2:6d:a3:72:dc:02:91:39:76:3f:60:
96:fd:53:09:19:f7:0e:c5:42:02:1c:b9:85:7d:26:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:59:1C:A8:06:66:D9:9F:79:B9:D2:1F:C2:63:D7:3C:F8:E0:9B:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tFkcqAZm2Z95udIfwmPXPPjgm2U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.196.0/22
Signature Algorithm: sha256WithRSAEncryption
79:b6:ec:1f:97:34:8f:22:f1:b9:2c:63:90:2d:7d:4c:df:0c:
ca:7e:b4:06:bf:07:ab:9a:c1:76:8e:b3:41:4f:99:db:bf:80:
01:bf:67:43:82:52:78:b2:ef:9a:cd:ad:36:d4:74:ee:91:df:
a5:54:18:33:3f:ba:e6:64:03:70:81:e4:84:08:95:ca:95:ec:
f5:9c:e7:df:3b:3d:f3:d4:29:8c:33:ba:1f:d7:67:23:40:cc:
34:1f:13:2d:b2:3a:01:48:82:53:c3:c4:eb:d8:cf:bb:40:e4:
44:a6:5e:ce:45:75:90:13:f0:47:a9:a3:f2:a0:47:0b:98:0a:
77:43:8b:cd:cf:69:32:e6:41:8d:c1:9f:ba:90:29:1e:f2:e4:
ca:5a:bb:98:2a:9f:ff:49:9b:b1:07:32:fa:24:c3:f8:6b:f1:
78:2a:c2:0d:8d:04:63:29:69:6b:ac:13:47:26:8e:73:3b:20:
3e:45:af:b9:3d:66:c4:9c:78:33:63:98:ce:5a:c1:d8:b4:b4:
aa:3d:ee:47:81:17:e6:42:c9:f2:49:6b:c9:e6:85:ab:14:23:
51:68:18:87:e2:a6:77:98:31:b2:3a:2f:d9:a0:de:21:20:c8:
5b:99:79:9a:f2:3e:f1:05:01:1c:03:d2:8c:09:0e:87:85:83:
ff:8b:9a:e6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFtUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjE0NDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI0NTkxQ0E4MDY2NkQ5
OUY3OUI5RDIxRkMyNjNENzNDRjhFMDlCNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+ieVxhAbvvE6fDbDMoBVBBEB463wjG/mdZ+YVLRUcdpAdlFdX
uPcy8YsDRmsH9FalI0wPNXnhMzNKy2FyZRoKFnc/ipdO2xBOBMSG85I8sph6QZ6Q
z6igXNNFB23Nc0lJxWFN5cprXO11HFOiEySB4nN4QiAlliIN9bhTL+LPNfxlFh49
efG7hApefed4+8pdqkbmrCzUGwPxDlyYyaUTp/IJ6zAjqZ1wYJDbqakeBqNgOu7B
ilRirWJpX+4o6dqS2J8s42AlXEucVL9Bjp8yGF3dCtvXcd6pxsMZb6nhHG2zO5jy
baNy3AKROXY/YJb9UwkZ9w7FQgIcuYV9JjPrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtFkcqAZm2Z95udIfwmPXPPjgm2UwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RGa2NxQVptMlo5NXVkSWZ3
bVBYUFBqZ20yVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AcQwDQYJKoZIhvcNAQELBQADggEBAHm27B+XNI8i8bksY5AtfUzfDMp+tAa/B6ua
wXaOs0FPmdu/gAG/Z0OCUniy75rNrTbUdO6R36VUGDM/uuZkA3CB5IQIlcqV7PWc
5987PfPUKYwzuh/XZyNAzDQfEy2yOgFIglPDxOvYz7tA5ESmXs5FdZAT8Eepo/Kg
RwuYCndDi83PaTLmQY3Bn7qQKR7y5Mpau5gqn/9Jm7EHMvokw/hr8Xgqwg2NBGMp
aWusE0cmjnM7ID5Fr7k9ZsSceDNjmM5awdi0tKo97keBF+ZCyfJJa8nmhasUI1Fo
GIfipneYMbI6L9mg3iEgyFuZeZryPvEFARwD0owJDoeFg/+LmuY=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:29 2023 by rpki-client on console-ams.rpki-client.org