Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yV4jfGjTgKaq9O6AEXMRzZZqUu8.roa
File: yV4jfGjTgKaq9O6AEXMRzZZqUu8.roa (raw, json)
Hash identifier: 4ZG5gQhPirFCKZYex4d1ZDMwLTjfyttHn5NPt/5lJHc=
Subject key identifier: C9:5E:23:7C:68:D3:80:A6:AA:F4:EE:80:11:73:11:CD:96:6A:52:EF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yV4jfGjTgKaq9O6AEXMRzZZqUu8.roa
Signing time: Thu 15 Sep 2022 02:45:17 +0000
ROA not before: Thu 15 Sep 2022 02:45:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C95E237C68D380A6AAF4EE80117311CD966A52EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f0:f9:fb:bd:4c:10:47:0e:2c:fd:3b:f1:6e:
a8:6a:60:c1:47:16:d6:f8:d2:2e:da:28:db:c2:1b:
6e:7d:66:c1:de:83:db:3d:d8:d6:bf:c9:34:59:dd:
6e:c2:84:e0:bb:6d:e0:ee:73:05:4e:74:9c:f9:05:
bc:60:bf:cf:f0:f0:12:5e:2b:96:fe:00:2e:9c:40:
70:f2:77:80:7e:e2:1b:64:0b:0f:05:6c:7b:5c:61:
ea:4e:85:4c:ac:77:42:31:b6:76:fd:7f:2a:bb:48:
7e:a5:94:28:0f:47:e4:c1:20:76:88:1a:95:ca:52:
2b:f9:80:ef:40:67:35:53:82:57:3d:21:64:79:ce:
b9:a6:d9:2e:fc:16:5d:76:90:b6:59:4d:5b:6f:24:
9d:e3:26:8d:f3:5e:f4:c4:71:b0:25:e0:a1:bf:75:
af:f2:e4:d9:47:06:1b:90:e2:58:e8:3f:b6:f7:59:
11:71:e0:35:73:d7:e9:01:ac:10:65:ac:e1:69:f4:
94:ef:0c:a5:c6:a7:9b:9d:e5:0f:1c:97:ed:0d:2a:
35:91:17:7c:0b:1a:3b:f5:13:df:93:e8:99:71:03:
aa:5b:ed:68:27:f7:3d:8b:b2:5f:08:17:38:c1:63:
f3:67:bf:73:8e:2d:4c:cc:05:be:14:87:23:ac:f6:
78:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5E:23:7C:68:D3:80:A6:AA:F4:EE:80:11:73:11:CD:96:6A:52:EF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yV4jfGjTgKaq9O6AEXMRzZZqUu8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.99.0/24
Signature Algorithm: sha256WithRSAEncryption
68:83:77:4c:ab:cb:59:b0:c7:ed:a7:71:45:5f:5d:37:79:f6:
7e:74:c2:95:eb:ff:6e:1f:b5:34:40:64:8e:98:a0:69:9c:41:
dc:66:e3:ee:75:f4:9c:6c:7b:ed:3e:89:26:a2:1f:da:e8:45:
9a:f3:17:90:e9:dd:0f:1b:2d:31:83:7e:1d:d9:b5:13:ac:35:
bf:ad:c7:0b:a0:04:3b:7f:4b:e3:93:bf:a0:40:31:85:3f:c2:
be:c2:01:41:aa:a8:b7:ab:57:95:fb:1e:f6:01:b3:c2:cd:2c:
f7:35:b4:ec:c6:75:df:f1:2f:a6:ba:18:2b:45:27:38:5a:08:
26:de:c2:0c:24:44:89:46:db:d9:c7:24:d0:ea:4a:25:12:29:
f1:3a:42:66:fd:9b:f7:72:9b:93:0c:a7:c4:d7:bd:e7:40:39:
db:0e:d4:2c:6a:21:4d:bb:e2:ea:7e:25:3a:1a:42:9f:56:30:
20:65:1b:d9:41:17:b8:3b:a8:65:24:c7:35:1c:f6:7c:70:fa:
71:ae:a0:78:32:2d:c2:3f:18:06:97:e1:89:34:a1:40:2b:45:
1e:e5:50:b7:48:f3:71:2d:0c:c2:9d:f8:2d:7a:4b:9b:4b:66:
7c:b4:74:43:4c:d4:c0:2e:e0:42:28:48:ed:59:05:76:f4:84:
1e:0e:67:a4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEM5NUUyMzdDNjhEMzgw
QTZBQUY0RUU4MDExNzMxMUNEOTY2QTUyRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDb8Pn7vUwQRw4s/TvxbqhqYMFHFtb40i7aKNvCG259ZsHeg9s9
2Na/yTRZ3W7ChOC7beDucwVOdJz5Bbxgv8/w8BJeK5b+AC6cQHDyd4B+4htkCw8F
bHtcYepOhUysd0Ixtnb9fyq7SH6llCgPR+TBIHaIGpXKUiv5gO9AZzVTglc9IWR5
zrmm2S78Fl12kLZZTVtvJJ3jJo3zXvTEcbAl4KG/da/y5NlHBhuQ4ljoP7b3WRFx
4DVz1+kBrBBlrOFp9JTvDKXGp5ud5Q8cl+0NKjWRF3wLGjv1E9+T6JlxA6pb7Wgn
9z2Lsl8IFzjBY/Nnv3OOLUzMBb4UhyOs9ngBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUyV4jfGjTgKaq9O6AEXMRzZZqUu8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lWNGpmR2pUZ0thcTlPNkFF
WE1SelpacVV1OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AWMwDQYJKoZIhvcNAQELBQADggEBAGiDd0yry1mwx+2ncUVfXTd59n50wpXr/24f
tTRAZI6YoGmcQdxm4+519Jxse+0+iSaiH9roRZrzF5Dp3Q8bLTGDfh3ZtROsNb+t
xwugBDt/S+OTv6BAMYU/wr7CAUGqqLerV5X7HvYBs8LNLPc1tOzGdd/xL6a6GCtF
JzhaCCbewgwkRIlG29nHJNDqSiUSKfE6Qmb9m/dym5MMp8TXvedAOdsO1CxqIU27
4up+JToaQp9WMCBlG9lBF7g7qGUkxzUc9nxw+nGuoHgyLcI/GAaX4Yk0oUArRR7l
ULdI83EtDMKd+C16S5tLZny0dENM1MAu4EIoSO1ZBXb0hB4OZ6Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org