Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G4p3fnGAP625aCDaiLuTwk--IX0.roa
File: G4p3fnGAP625aCDaiLuTwk--IX0.roa (raw, json)
Hash identifier: S3izXRUlo5P6l4siWXgjZGm+hSQub7Mphlm8CVrk39Y=
Subject key identifier: 1B:8A:77:7E:71:80:3F:AD:B9:68:20:DA:88:BB:93:C2:4F:BE:21:7D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 174F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G4p3fnGAP625aCDaiLuTwk--IX0.roa
Signing time: Sun 07 Feb 2021 12:18:15 +0000
ROA not before: Sun 07 Feb 2021 12:18:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5967 (0x174f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:18:15 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1B8A777E71803FADB96820DA88BB93C24FBE217D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:91:a0:4a:62:79:a4:42:5b:88:a4:52:85:52:
28:48:df:13:cd:5d:24:db:c2:4b:65:e3:92:f7:49:
b6:31:77:19:83:18:60:6c:e0:de:e6:3f:ae:5f:19:
12:d2:90:7f:9f:b3:4d:89:f4:af:13:67:c4:85:e4:
d1:2e:c4:2c:64:5e:40:50:33:c6:d8:c1:84:12:e8:
89:2c:9e:fd:6b:6c:eb:af:53:d6:d0:a6:3f:b9:71:
bc:fa:f9:64:35:f2:bb:80:66:98:35:b5:5a:ad:2a:
45:99:06:7f:2b:6d:7f:12:7f:89:22:9b:66:86:aa:
b7:86:b9:04:2c:37:70:5c:50:75:3a:f2:68:3e:b7:
ae:3f:de:ee:98:59:d0:52:e9:7d:af:c6:f4:da:1e:
0c:27:51:7e:fd:68:92:db:ff:ac:9c:d9:32:ec:fd:
15:24:2f:0c:63:1e:b2:57:24:bb:8a:6c:b2:c2:b7:
51:d7:cd:94:91:2d:2b:9b:0f:00:21:10:8f:f9:5d:
53:3d:dd:93:f5:a2:51:65:da:ed:02:5c:d1:84:7b:
e4:10:c3:3b:2a:e7:d2:db:24:bf:66:92:f4:ad:1f:
c6:82:d6:dd:7a:08:31:12:30:f9:c0:ca:e8:f0:c6:
3f:78:83:80:70:51:10:ba:56:5a:37:a4:61:e1:7c:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8A:77:7E:71:80:3F:AD:B9:68:20:DA:88:BB:93:C2:4F:BE:21:7D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G4p3fnGAP625aCDaiLuTwk--IX0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.24.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:e3:1b:0f:9f:ca:27:43:f5:90:06:2d:2b:77:9f:fc:6a:61:
7b:24:64:6d:b3:ee:58:ce:9e:8e:aa:30:e0:d5:4c:9e:df:21:
d9:49:df:a9:4f:b3:06:fe:47:dd:e3:ea:d1:3e:26:cb:2e:2a:
a1:d6:d9:90:82:92:39:de:f5:93:fb:da:88:4f:7a:19:aa:a8:
a3:77:93:58:f0:3b:e2:56:60:ac:46:7b:50:f5:87:34:0a:12:
af:3f:83:38:61:c1:60:dd:ec:9b:7a:e7:a3:b4:0b:7c:e0:51:
e7:80:9b:36:e3:88:5c:6c:e1:41:69:f9:bf:e5:81:61:78:b7:
64:72:0f:38:ca:ef:cf:63:13:f1:ca:fa:24:25:74:34:9c:bd:
46:89:a0:a5:2a:3e:27:f2:68:e0:56:7d:aa:f7:20:a7:91:a2:
81:fa:30:82:a6:b6:e7:64:64:48:c3:68:04:8d:36:d8:f0:30:
65:05:db:24:b3:7f:4e:30:33:0b:85:31:6f:97:cb:9d:89:1a:
d1:44:44:2b:d7:c0:62:00:85:be:ef:13:6f:2f:75:6b:ff:36:
26:72:81:ae:16:ba:4c:17:0b:59:1f:85:2c:23:0c:02:4e:83:
e9:f0:86:1b:eb:aa:b2:f9:40:d2:b5:30:e7:3b:40:b1:62:be:
cd:93:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:12 2025 by rpki-client