Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vhcTsimSU-ss700X7rFHKu6r2WE.roa
File: vhcTsimSU-ss700X7rFHKu6r2WE.roa (raw, json)
Hash identifier: b1CmtqJXnxAifG2W9KxGlMduGbRxSujdaQkV+9nRTSI=
Subject key identifier: BE:17:13:B2:29:92:53:EB:2C:EF:4D:17:EE:B1:47:2A:EE:AB:D9:61
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E40
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vhcTsimSU-ss700X7rFHKu6r2WE.roa
Signing time: Tue 29 Sep 2020 09:55:31 +0000
ROA not before: Tue 29 Sep 2020 09:55:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3648 (0xe40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BE1713B2299253EB2CEF4D17EEB1472AEEABD961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:18:8c:b7:47:38:84:d5:4e:ee:80:ba:f9:
e0:93:ab:58:5e:f4:9d:9f:89:f4:a7:d6:60:da:f1:
e8:42:79:09:e3:29:72:89:ff:39:4a:83:96:f7:6e:
07:d0:50:84:1e:c4:2a:8b:4f:74:2a:bf:e7:fc:ea:
1c:cb:99:e9:14:28:ee:06:3c:10:e0:e5:cb:a3:45:
78:8e:7d:bd:c7:ab:d7:95:64:e7:8f:cd:78:3c:70:
c6:36:29:b0:33:cc:3c:26:07:da:15:d4:9c:2d:8f:
98:51:19:35:e7:6b:a0:bc:b7:ae:16:8d:5a:56:d0:
b7:dc:a5:8a:2d:f7:84:f0:01:9e:fb:33:c6:f4:65:
71:12:69:c0:df:27:83:57:a0:25:8f:8e:5c:2b:b0:
28:d2:ad:4b:b9:8e:04:63:f9:71:92:ca:42:d9:9a:
b3:fc:4b:a8:2e:85:b8:ae:95:b1:30:5b:5f:5c:36:
36:8c:e2:21:a0:03:43:3c:f1:eb:c8:f6:57:69:13:
12:ca:ad:cc:0a:09:06:02:b2:be:5d:09:75:d1:e7:
6d:bb:53:6b:69:0b:de:39:81:06:44:c2:05:95:4a:
e8:3b:e8:1d:a8:79:6f:03:d2:d8:80:05:d6:49:8c:
94:66:84:77:bf:5a:dc:b9:88:ee:77:51:fb:67:ed:
8f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:17:13:B2:29:92:53:EB:2C:EF:4D:17:EE:B1:47:2A:EE:AB:D9:61
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vhcTsimSU-ss700X7rFHKu6r2WE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.156.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:42:f5:d8:6d:95:ac:62:aa:69:a9:f2:00:75:c5:83:5e:61:
13:65:f1:22:ff:80:d5:f7:0b:6f:07:a0:ab:42:b9:71:b8:56:
c7:3c:d0:3e:47:7c:22:67:e5:4a:44:43:e2:1c:71:95:02:ba:
94:2d:b6:d7:f4:05:7f:c5:b8:62:24:7d:3f:9b:e7:24:30:6b:
55:be:ab:9b:62:ff:bd:7b:46:51:d5:c0:86:65:c7:ea:70:14:
4c:8f:d8:4e:55:76:52:f5:b7:1a:94:09:d8:12:05:ba:d6:28:
e7:91:95:46:a7:57:54:37:80:54:9a:d6:2a:ea:98:a4:92:02:
0d:aa:2a:80:85:62:55:e9:09:e1:e8:29:eb:53:96:15:27:06:
f7:6f:8a:72:c9:2e:c5:33:de:60:a1:5f:c8:1b:db:65:2d:f1:
1f:0b:a1:fb:2c:98:3f:40:c6:c7:f1:b2:ff:a2:4e:21:df:07:
de:56:59:4f:5b:21:d9:e3:ea:0d:48:0b:3f:5c:17:2a:05:f0:
c8:da:d5:0a:79:3b:14:26:04:6a:06:d8:2f:d7:84:6e:ae:92:
c4:24:c1:38:b2:a0:df:7f:34:05:7c:02:5f:a6:d7:0b:f8:f0:
7f:23:e2:ef:41:eb:79:4d:6e:ca:52:54:6d:a6:81:29:67:ef:
98:d4:1a:3f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEJFMTcxM0IyMjk5MjUz
RUIyQ0VGNEQxN0VFQjE0NzJBRUVBQkQ5NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFyBiMt0c4hNVO7oC6+eCTq1he9J2fifSn1mDa8ehCeQnjKXKJ
/zlKg5b3bgfQUIQexCqLT3Qqv+f86hzLmekUKO4GPBDg5cujRXiOfb3Hq9eVZOeP
zXg8cMY2KbAzzDwmB9oV1Jwtj5hRGTXna6C8t64WjVpW0LfcpYot94TwAZ77M8b0
ZXESacDfJ4NXoCWPjlwrsCjSrUu5jgRj+XGSykLZmrP8S6guhbiulbEwW19cNjaM
4iGgA0M88evI9ldpExLKrcwKCQYCsr5dCXXR5227U2tpC945gQZEwgWVSug76B2o
eW8D0tiABdZJjJRmhHe/Wty5iO53Uftn7Y/fAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUvhcTsimSU+ss700X7rFHKu6r2WEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZoY1RzaW1TVS1zczcwMFg3
ckZIS3U2cjJXRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AZwwDQYJKoZIhvcNAQELBQADggEBAJpC9dhtlaxiqmmp8gB1xYNeYRNl8SL/gNX3
C28HoKtCuXG4Vsc80D5HfCJn5UpEQ+IccZUCupQtttf0BX/FuGIkfT+b5yQwa1W+
q5ti/717RlHVwIZlx+pwFEyP2E5VdlL1txqUCdgSBbrWKOeRlUanV1Q3gFSa1irq
mKSSAg2qKoCFYlXpCeHoKetTlhUnBvdvinLJLsUz3mChX8gb22Ut8R8LofssmD9A
xsfxsv+iTiHfB95WWU9bIdnj6g1ICz9cFyoF8Mja1Qp5OxQmBGoG2C/XhG6uksQk
wTiyoN9/NAV8Al+m1wv48H8j4u9B63lNbspSVG2mgSln75jUGj8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org