Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GAS21L5tpK2Xn76Xcm4YjGo3ZO0.roa
File: GAS21L5tpK2Xn76Xcm4YjGo3ZO0.roa (raw, json)
Hash identifier: 2+P29BDifUg2+iq24/0IgtwX6Rp4DYYqXNLJH7Fq1Cg=
Subject key identifier: 18:04:B6:D4:BE:6D:A4:AD:97:9F:BE:97:72:6E:18:8C:6A:37:64:ED
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A41
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GAS21L5tpK2Xn76Xcm4YjGo3ZO0.roa
Signing time: Fri 01 Sep 2023 10:07:40 +0000
ROA not before: Fri 01 Sep 2023 10:07:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10817 (0x2a41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:40 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1804B6D4BE6DA4AD979FBE97726E188C6A3764ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c4:f7:f6:db:1e:50:96:12:8c:31:c4:48:89:
dd:43:07:64:61:20:6d:e4:03:8d:e1:01:dd:89:a7:
a6:1a:93:03:2b:c9:ca:d4:a5:ae:14:d1:ee:b1:21:
69:dc:4f:65:4c:f1:f9:7f:b9:61:54:2c:78:9a:cf:
53:85:ed:2f:eb:8b:06:52:0e:3e:7a:f6:85:b9:9a:
cc:63:34:57:48:1a:a3:14:49:5c:5a:52:4d:7f:ee:
7e:06:34:a9:4a:5a:b2:8f:85:94:d8:0f:aa:77:02:
53:4e:6c:ba:16:49:90:f9:52:8a:ee:39:00:5a:42:
c6:13:7b:ae:2d:29:64:20:99:90:1a:08:49:91:15:
d2:0a:6d:e0:ac:18:cc:1a:05:64:6d:f4:66:f2:48:
f2:4a:af:d0:ce:24:08:d6:9c:1c:b1:94:0e:f9:89:
9c:ca:06:23:81:5b:8f:d5:81:34:b6:a5:4c:aa:db:
41:2c:5d:90:36:24:80:df:86:ae:0a:33:02:5d:d6:
e8:93:e4:66:8c:fc:cc:6e:94:13:6e:02:0f:e8:fc:
86:d6:14:1d:35:30:bc:ad:ed:ac:35:ee:ae:6b:0e:
96:ac:06:64:d3:e3:e0:ac:b6:84:df:d1:9a:7b:e7:
6a:52:a1:de:bd:0f:be:ae:2d:da:47:72:1a:8b:74:
67:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:04:B6:D4:BE:6D:A4:AD:97:9F:BE:97:72:6E:18:8C:6A:37:64:ED
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GAS21L5tpK2Xn76Xcm4YjGo3ZO0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.180.0/24
Signature Algorithm: sha256WithRSAEncryption
18:76:c2:34:2e:14:bd:06:e1:d4:02:c8:4e:fc:f2:3f:8a:ae:
b9:fc:07:8e:d9:c9:fb:33:1f:e2:fa:b3:8b:0e:b6:45:95:c9:
fd:64:4f:26:7c:ae:95:50:8d:76:53:c6:a8:3e:72:f8:e1:8f:
51:84:0f:9c:9c:99:fb:32:e7:31:99:d8:07:d9:b2:f0:55:f7:
cc:26:80:4b:59:21:b8:93:fa:08:bc:93:8d:9f:fa:22:13:bc:
5e:20:0c:55:a3:47:99:35:00:10:29:11:37:ab:c7:f5:1c:ab:
51:e9:7e:97:5e:50:4c:6e:58:1d:13:8a:1b:3d:10:30:1f:d1:
ef:33:f5:18:76:ff:5f:8e:63:9d:3c:11:da:0b:ad:e5:76:bc:
4b:5d:18:d3:f6:18:81:e4:5d:aa:d6:12:73:8b:f6:d4:8e:ae:
2b:d9:af:8d:2b:e1:2d:f5:ba:63:e8:a9:29:e5:31:ee:5f:5c:
ee:21:77:9f:82:3e:78:49:64:ec:e2:18:e8:72:3c:0a:ca:99:
13:ad:2f:71:17:c5:48:92:d8:1f:80:a8:1d:72:0c:83:4a:b7:
4d:30:3d:78:cb:f9:d1:40:96:e2:35:d8:02:34:28:01:ea:b8:
ff:0c:92:c4:91:a1:b1:76:36:60:09:87:ff:47:bf:67:00:a8:
ba:46:eb:3e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKkEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3NDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE4MDRCNkQ0QkU2REE0
QUQ5NzlGQkU5NzcyNkUxODhDNkEzNzY0RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlxPf22x5QlhKMMcRIid1DB2RhIG3kA43hAd2Jp6YakwMrycrU
pa4U0e6xIWncT2VM8fl/uWFULHiaz1OF7S/riwZSDj569oW5msxjNFdIGqMUSVxa
Uk1/7n4GNKlKWrKPhZTYD6p3AlNObLoWSZD5UoruOQBaQsYTe64tKWQgmZAaCEmR
FdIKbeCsGMwaBWRt9GbySPJKr9DOJAjWnByxlA75iZzKBiOBW4/VgTS2pUyq20Es
XZA2JIDfhq4KMwJd1uiT5GaM/MxulBNuAg/o/IbWFB01MLyt7aw17q5rDpasBmTT
4+CstoTf0Zp752pSod69D76uLdpHchqLdGcbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGAS21L5tpK2Xn76Xcm4YjGo3ZO0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dBUzIxTDV0cEsyWG43Nlhj
bTRZakdvM1pPMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AbQwDQYJKoZIhvcNAQELBQADggEBABh2wjQuFL0G4dQCyE788j+Krrn8B47Zyfsz
H+L6s4sOtkWVyf1kTyZ8rpVQjXZTxqg+cvjhj1GED5ycmfsy5zGZ2AfZsvBV98wm
gEtZIbiT+gi8k42f+iITvF4gDFWjR5k1ABApETerx/Ucq1HpfpdeUExuWB0Tihs9
EDAf0e8z9Rh2/1+OY508EdoLreV2vEtdGNP2GIHkXarWEnOL9tSOrivZr40r4S31
umPoqSnlMe5fXO4hd5+CPnhJZOziGOhyPArKmROtL3EXxUiS2B+AqB1yDINKt00w
PXjL+dFAluI12AI0KAHquP8MksSRobF2NmAJh/9Hv2cAqLpG6z4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:05 2025 by rpki-client