Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvi3W61Yhyvsd7cHXMdiQo53K_E.roa
File: zvi3W61Yhyvsd7cHXMdiQo53K_E.roa (raw, json)
Hash identifier: Q2rnLs8AFzsuJYsayG+WXD3HANOaEykkVnvV+s+NGos=
Subject key identifier: CE:F8:B7:5B:AD:58:87:2B:EC:77:B7:07:5C:C7:62:42:8E:77:2B:F1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1647
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvi3W61Yhyvsd7cHXMdiQo53K_E.roa
Signing time: Sun 07 Feb 2021 12:09:25 +0000
ROA not before: Sun 07 Feb 2021 12:09:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5703 (0x1647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:09:25 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CEF8B75BAD58872BEC77B7075CC762428E772BF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:62:d6:bb:04:b3:0d:71:27:c5:c8:7f:1e:0c:
e9:32:03:06:f6:eb:99:50:f7:57:4d:ab:97:fa:4b:
d3:b5:82:0e:1e:ad:f5:a2:39:80:31:3b:2a:78:75:
1b:90:c6:44:7b:9d:c7:9b:b1:3a:e8:0e:30:36:c1:
db:bd:7f:3e:d7:ff:22:99:f9:80:d6:99:c8:96:b0:
39:70:50:91:a1:62:68:96:4b:c5:35:ca:12:e0:f1:
4c:38:1a:56:a7:04:29:cb:3e:40:24:5b:d8:7d:05:
12:52:27:f1:d0:63:b9:f6:ca:04:b8:e3:df:0f:7e:
ef:02:02:66:52:47:21:ab:86:40:8f:e9:44:81:f9:
92:8a:c3:8d:11:3d:83:69:9f:11:68:e8:0e:d4:d4:
ba:c7:52:17:b0:68:62:6f:8b:4e:67:6c:21:25:ac:
7d:9b:76:fb:2c:fe:f7:30:5b:20:a4:89:55:fb:18:
4b:26:27:5b:a3:bc:d6:38:d7:1d:16:3c:c5:66:2a:
35:64:68:1e:f2:aa:02:73:f8:6d:8a:3c:81:d7:02:
99:19:46:4a:f7:ac:4a:7c:c9:04:95:33:4a:ef:e8:
e3:8a:5f:51:f4:61:7e:73:32:94:5a:7c:a5:e3:4a:
e2:46:1c:fa:5c:ac:67:e7:9a:b1:a6:26:7b:06:ef:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F8:B7:5B:AD:58:87:2B:EC:77:B7:07:5C:C7:62:42:8E:77:2B:F1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvi3W61Yhyvsd7cHXMdiQo53K_E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ef:42:09:ee:98:bf:57:61:64:f7:24:0d:90:67:dc:f6:d7:
b6:5e:bb:50:77:ba:b7:83:dd:7e:86:60:a7:25:05:ed:8d:ad:
e0:98:ce:91:e6:1c:59:fb:ab:c5:e3:3b:c4:2f:4c:82:2f:ad:
f9:5a:5f:5c:d2:fe:39:d7:5f:56:e1:5c:47:e9:75:25:62:a5:
d8:22:40:7a:95:0b:f0:59:08:e8:c2:57:b6:bf:9b:b3:d2:32:
9b:ee:f4:43:10:04:af:b6:21:f8:ba:8f:c5:17:b1:24:55:d1:
75:f2:d8:3b:c5:b5:b6:27:b0:71:6f:8e:1c:40:9f:68:00:0e:
e6:bf:fb:2a:45:e4:2c:72:ad:e4:1a:61:fb:f0:f5:77:3d:a2:
d6:b5:92:21:1c:75:a7:5b:de:b3:b3:7e:f7:0e:5a:42:c3:ad:
9b:f8:cc:54:1c:75:86:a1:08:51:44:f9:69:1f:66:7e:77:cc:
b0:d4:f2:1d:e8:0f:da:d8:4b:9d:7b:c3:be:93:04:22:68:62:
d1:89:ae:8b:a5:a4:88:bf:ec:61:a7:59:53:23:1a:11:52:d7:
e1:b5:3e:72:04:d3:cf:ea:95:4c:bb:8c:ab:e0:75:d3:81:1a:
d4:0c:ea:e3:56:2e:9d:84:fd:6c:2f:59:fe:78:fe:c9:7f:19:
38:cd:77:4a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjA5MjVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKENFRjhCNzVCQUQ1ODg3
MkJFQzc3QjcwNzVDQzc2MjQyOEU3NzJCRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbYta7BLMNcSfFyH8eDOkyAwb265lQ91dNq5f6S9O1gg4erfWi
OYAxOyp4dRuQxkR7ncebsTroDjA2wdu9fz7X/yKZ+YDWmciWsDlwUJGhYmiWS8U1
yhLg8Uw4GlanBCnLPkAkW9h9BRJSJ/HQY7n2ygS4498Pfu8CAmZSRyGrhkCP6USB
+ZKKw40RPYNpnxFo6A7U1LrHUhewaGJvi05nbCElrH2bdvss/vcwWyCkiVX7GEsm
J1ujvNY41x0WPMVmKjVkaB7yqgJz+G2KPIHXApkZRkr3rEp8yQSVM0rv6OOKX1H0
YX5zMpRafKXjSuJGHPpcrGfnmrGmJnsG77cFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUzvi3W61Yhyvsd7cHXMdiQo53K/EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3p2aTNXNjFZaHl2c2Q3Y0hY
TWRpUW81M0tfRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
Ad8wDQYJKoZIhvcNAQELBQADggEBABzvQgnumL9XYWT3JA2QZ9z217Zeu1B3ureD
3X6GYKclBe2NreCYzpHmHFn7q8XjO8QvTIIvrflaX1zS/jnXX1bhXEfpdSVipdgi
QHqVC/BZCOjCV7a/m7PSMpvu9EMQBK+2Ifi6j8UXsSRV0XXy2DvFtbYnsHFvjhxA
n2gADua/+ypF5CxyreQaYfvw9Xc9ota1kiEcdadb3rOzfvcOWkLDrZv4zFQcdYah
CFFE+WkfZn53zLDU8h3oD9rYS517w76TBCJoYtGJroulpIi/7GGnWVMjGhFS1+G1
PnIE08/qlUy7jKvgddOBGtQM6uNWLp2E/WwvWf54/sl/GTjNd0o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org