Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v9ffexBPIceg5YqiyPzTQX8yV6A.roa
File: v9ffexBPIceg5YqiyPzTQX8yV6A.roa (raw, json)
Hash identifier: jizwWmEg3EKvlyJcnlv2gDPyMaFDaRw/sLwWF+hPr1g=
Subject key identifier: BF:D7:DF:7B:10:4F:21:C7:A0:E5:8A:A2:C8:FC:D3:41:7F:32:57:A0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2256
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v9ffexBPIceg5YqiyPzTQX8yV6A.roa
Signing time: Fri 25 Nov 2022 04:41:03 +0000
ROA not before: Fri 25 Nov 2022 04:41:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8790 (0x2256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BFD7DF7B104F21C7A0E58AA2C8FCD3417F3257A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7e:fb:3e:0b:25:86:bf:8b:44:73:55:2f:71:
f1:57:30:a6:6e:2e:75:86:54:33:e2:03:ac:e6:13:
35:8c:84:52:d3:a2:59:9d:52:6e:62:91:f3:5a:77:
02:3a:7d:b9:99:47:e0:d2:b5:97:78:a6:ff:93:40:
39:90:1e:bf:d6:0c:bd:ed:0c:8f:96:0a:62:89:ec:
45:e3:6c:38:34:99:6e:dc:bb:31:9a:4c:4c:13:cd:
cc:ce:a3:55:4a:7a:e4:27:7a:2b:85:50:b5:17:52:
92:20:fb:3b:01:de:b2:d1:2c:2a:3d:fe:4f:16:05:
a2:1d:33:b0:f0:0a:b1:89:c4:a9:a6:2b:21:b3:67:
69:24:99:22:57:86:d0:62:7f:fb:8b:7e:8d:9e:e8:
f9:89:5f:85:67:ca:44:0e:aa:00:1b:71:6e:da:4e:
17:98:9c:45:8d:0d:a1:15:f5:6b:2c:09:f6:80:49:
0c:67:3f:04:ac:11:2b:e4:8c:fe:bc:36:5d:eb:1f:
6c:07:29:06:c9:bf:2d:9e:cb:ab:0b:66:e9:89:80:
20:c7:81:81:f9:5c:9d:66:06:5f:fe:e5:85:61:72:
4b:43:3c:0f:5e:1f:0b:34:5a:c5:92:96:9b:33:e1:
a7:d9:cc:5f:27:5c:3a:e6:28:b1:c3:39:05:5a:37:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D7:DF:7B:10:4F:21:C7:A0:E5:8A:A2:C8:FC:D3:41:7F:32:57:A0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v9ffexBPIceg5YqiyPzTQX8yV6A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.88.0/22
Signature Algorithm: sha256WithRSAEncryption
11:c9:ca:ca:62:b8:80:a9:fa:cd:08:a1:db:1e:03:71:55:27:
47:69:9b:75:8c:e1:6d:92:14:26:b5:57:85:e8:1c:1b:dd:72:
30:a2:8f:8e:0c:7a:55:1c:31:03:8a:6c:9a:e7:3e:6a:7a:ef:
fc:e1:02:e2:6d:48:32:71:b1:20:c6:62:8a:18:9c:4e:69:ca:
66:e7:72:dc:56:e4:24:3a:d8:1d:e4:c1:9c:2e:45:e0:93:ab:
83:a9:ff:4f:ce:3e:90:ca:4a:40:ba:62:f3:e4:df:aa:eb:78:
13:24:36:80:ab:43:fb:33:3f:ba:34:f5:d6:86:aa:02:d6:89:
82:db:cd:9d:a4:0c:2b:29:74:f8:36:73:6f:83:9b:14:b2:b8:
1d:d7:61:6b:0a:58:62:ce:e9:6a:c7:59:3d:0a:3a:47:d4:f5:
f1:9e:53:d7:53:94:4a:0d:53:71:0a:5c:aa:b9:3a:c4:6e:75:
e2:aa:44:30:4b:35:fc:f7:01:24:df:28:4f:67:a7:6d:a6:7d:
3e:83:ed:1c:2c:66:34:67:61:a5:de:63:52:95:e7:a7:5e:81:
8c:bb:ef:a9:97:22:1a:e8:ff:47:03:ac:b5:3c:12:ff:ef:b3:
b6:ba:93:18:e1:92:09:34:62:03:0e:90:2b:fb:13:29:8e:b4:
0c:fa:57:cb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxMDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEJGRDdERjdCMTA0RjIx
QzdBMEU1OEFBMkM4RkNEMzQxN0YzMjU3QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDifvs+CyWGv4tEc1UvcfFXMKZuLnWGVDPiA6zmEzWMhFLTolmd
Um5ikfNadwI6fbmZR+DStZd4pv+TQDmQHr/WDL3tDI+WCmKJ7EXjbDg0mW7cuzGa
TEwTzczOo1VKeuQneiuFULUXUpIg+zsB3rLRLCo9/k8WBaIdM7DwCrGJxKmmKyGz
Z2kkmSJXhtBif/uLfo2e6PmJX4VnykQOqgAbcW7aTheYnEWNDaEV9WssCfaASQxn
PwSsESvkjP68Nl3rH2wHKQbJvy2ey6sLZumJgCDHgYH5XJ1mBl/+5YVhcktDPA9e
Hws0WsWSlpsz4afZzF8nXDrmKLHDOQVaN7BFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUv9ffexBPIceg5YqiyPzTQX8yV6AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Y5ZmZleEJQSWNlZzVZcWl5
UHpUUVg4eVY2QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AVgwDQYJKoZIhvcNAQELBQADggEBABHJyspiuICp+s0IodseA3FVJ0dpm3WM4W2S
FCa1V4XoHBvdcjCij44MelUcMQOKbJrnPmp67/zhAuJtSDJxsSDGYooYnE5pymbn
ctxW5CQ62B3kwZwuReCTq4Op/0/OPpDKSkC6YvPk36rreBMkNoCrQ/szP7o09daG
qgLWiYLbzZ2kDCspdPg2c2+DmxSyuB3XYWsKWGLO6WrHWT0KOkfU9fGeU9dTlEoN
U3EKXKq5OsRudeKqRDBLNfz3ASTfKE9np22mfT6D7RwsZjRnYaXeY1KV56degYy7
76mXIhro/0cDrLU8Ev/vs7a6kxjhkgk0YgMOkCv7EymOtAz6V8s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org