Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yFTVvU1SFn6YcPZO0OjOExSutWQ.roa
File: yFTVvU1SFn6YcPZO0OjOExSutWQ.roa (raw, json)
Hash identifier: X8wu2Lr1uA8iPydvQhneZn5+Zo0SQ96ytDkSZRNmlkU=
Subject key identifier: C8:54:D5:BD:4D:52:16:7E:98:70:F6:4E:D0:E8:CE:13:14:AE:B5:64
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 211F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yFTVvU1SFn6YcPZO0OjOExSutWQ.roa
Signing time: Fri 25 Nov 2022 04:39:32 +0000
ROA not before: Fri 25 Nov 2022 04:39:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8479 (0x211f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C854D5BD4D52167E9870F64ED0E8CE1314AEB564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:c6:67:0c:4c:4c:23:31:35:a9:f7:2f:8e:
ad:f0:ec:df:e7:92:22:8f:5c:90:b3:5f:ad:3d:09:
54:d9:81:ef:e5:78:01:c8:31:1f:92:0a:52:66:4e:
32:cd:20:cf:40:de:d1:50:63:b2:47:ca:06:33:8c:
b7:08:7f:b8:50:a4:bf:b8:f1:3e:a1:45:ac:f8:c6:
24:34:a8:41:66:d6:63:db:48:da:dd:aa:c0:cd:0b:
04:9e:1d:e7:22:6c:08:5f:b1:a3:08:81:22:de:73:
7a:9c:ea:0a:a2:85:92:88:49:cb:74:b2:8d:ef:e3:
19:c0:ed:8e:37:14:14:b9:a7:2a:14:60:af:8b:3d:
82:46:77:96:c4:eb:39:9f:36:f3:63:24:04:f9:de:
3a:fa:8a:48:55:28:9f:73:5d:9c:6f:e2:a4:2d:ad:
e9:46:df:9e:12:94:a8:f4:c2:7a:ae:f5:cd:87:1a:
10:19:6c:dd:86:db:64:91:c1:24:c6:81:c9:69:2b:
5b:ce:a9:94:8d:c9:52:b4:d0:ee:2e:98:1d:b7:1f:
41:e7:06:8a:1a:f5:85:e2:98:48:96:ad:5a:a0:0a:
cc:7e:a8:b8:f6:e5:15:ee:00:30:4b:5e:fe:16:13:
ff:4e:32:a9:0d:fb:22:88:7a:65:6d:72:44:18:a9:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:54:D5:BD:4D:52:16:7E:98:70:F6:4E:D0:E8:CE:13:14:AE:B5:64
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yFTVvU1SFn6YcPZO0OjOExSutWQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.47.0/24
Signature Algorithm: sha256WithRSAEncryption
89:4d:f3:2d:d4:11:59:bb:7d:2b:69:26:e6:57:72:df:88:b1:
0a:04:a1:56:c0:97:8c:c8:61:ff:01:ad:b6:3b:8f:fc:be:9d:
a0:52:be:fe:bd:1d:8b:9a:90:81:f4:70:51:ec:c8:51:69:d9:
ce:d6:b4:b4:15:19:99:1d:62:bb:e2:6e:aa:ac:bc:9c:b5:ee:
6f:94:c8:82:62:9d:b9:53:3b:ed:90:5a:eb:58:63:c4:3a:61:
1e:2a:b9:6b:4f:49:e5:3d:fa:15:2c:0b:64:13:8d:06:9a:37:
fc:48:30:a0:f6:63:60:81:8b:ff:46:ff:1f:5c:10:cb:b8:0e:
0f:4f:eb:bb:65:c1:0d:cf:91:3d:d9:b6:cf:38:5c:36:21:67:
78:95:fd:47:ab:da:a9:97:c0:a7:bf:ec:33:8f:1b:9d:01:59:
41:90:b9:de:2c:6e:76:24:15:15:e3:bd:28:2b:51:f8:a0:64:
95:a3:b0:30:c5:d8:d7:b6:74:0c:b9:7d:a7:6a:06:9a:b5:c7:
dd:26:45:4c:86:1d:26:25:c7:9f:0b:a4:19:25:91:95:03:79:
ca:e0:c1:ba:48:88:a7:a8:d7:ef:79:ee:80:53:6c:47:c3:54:
ea:33:d0:aa:d0:ff:2c:5f:7e:36:09:79:2c:05:12:99:c5:f1:
1e:52:fd:d8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIR8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MzJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEM4NTRENUJENEQ1MjE2
N0U5ODcwRjY0RUQwRThDRTEzMTRBRUI1NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCibMZnDExMIzE1qfcvjq3w7N/nkiKPXJCzX609CVTZge/leAHI
MR+SClJmTjLNIM9A3tFQY7JHygYzjLcIf7hQpL+48T6hRaz4xiQ0qEFm1mPbSNrd
qsDNCwSeHecibAhfsaMIgSLec3qc6gqihZKISct0so3v4xnA7Y43FBS5pyoUYK+L
PYJGd5bE6zmfNvNjJAT53jr6ikhVKJ9zXZxv4qQtrelG354SlKj0wnqu9c2HGhAZ
bN2G22SRwSTGgclpK1vOqZSNyVK00O4umB23H0HnBooa9YXimEiWrVqgCsx+qLj2
5RXuADBLXv4WE/9OMqkN+yKIemVtckQYqT23AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUyFTVvU1SFn6YcPZO0OjOExSutWQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lGVFZ2VTFTRm42WWNQWk8w
T2pPRXhTdXRXUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AS8wDQYJKoZIhvcNAQELBQADggEBAIlN8y3UEVm7fStpJuZXct+IsQoEoVbAl4zI
Yf8BrbY7j/y+naBSvv69HYuakIH0cFHsyFFp2c7WtLQVGZkdYrvibqqsvJy17m+U
yIJinblTO+2QWutYY8Q6YR4quWtPSeU9+hUsC2QTjQaaN/xIMKD2Y2CBi/9G/x9c
EMu4Dg9P67tlwQ3PkT3Zts84XDYhZ3iV/Uer2qmXwKe/7DOPG50BWUGQud4sbnYk
FRXjvSgrUfigZJWjsDDF2Ne2dAy5fadqBpq1x90mRUyGHSYlx58LpBklkZUDecrg
wbpIiKeo1+957oBTbEfDVOoz0KrQ/yxffjYJeSwFEpnF8R5S/dg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org