Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GB-bQTyiRMk5nrdhG3bb6uIRa7Q.roa
File: GB-bQTyiRMk5nrdhG3bb6uIRa7Q.roa (raw, json)
Hash identifier: C4G0FxpKK1hU1NbB032cVpl84yBTx8yWU+nryq+EvJ8=
Subject key identifier: 18:1F:9B:41:3C:A2:44:C9:39:9E:B7:61:1B:76:DB:EA:E2:11:6B:B4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2205
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GB-bQTyiRMk5nrdhG3bb6uIRa7Q.roa
Signing time: Fri 25 Nov 2022 04:40:40 +0000
ROA not before: Fri 25 Nov 2022 04:40:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 103.224.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8709 (0x2205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=181F9B413CA244C9399EB7611B76DBEAE2116BB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:f1:e0:50:e1:97:ac:fa:70:81:7e:8f:cc:
39:91:8d:28:14:d8:c9:96:e8:7a:aa:f3:68:17:75:
10:a8:b3:d7:c5:64:2d:84:e7:6c:26:ef:7c:d2:8c:
0c:b0:6a:55:e3:87:20:be:18:be:b9:a8:4c:01:ac:
7d:59:73:30:7d:ac:94:f1:b4:73:c4:34:94:67:00:
58:72:88:c3:cc:bc:34:58:bd:d6:c5:20:4d:c5:92:
3c:d9:bd:7e:fa:e1:c7:d7:ac:95:ac:4d:96:9c:83:
e4:7d:5a:f6:1f:78:11:3c:4b:07:66:71:26:c3:00:
e1:a0:7a:13:dc:b4:8f:cd:a9:d5:0d:4c:0a:e7:a5:
37:c6:e6:8c:a6:bb:3d:88:23:2b:bc:a6:ee:9c:22:
80:bf:6f:23:32:1d:1a:c0:6b:3f:d8:cc:b9:e7:fa:
d0:ce:22:46:0c:c5:eb:1f:bf:9b:ee:c6:c9:fd:c9:
40:3e:c9:f9:7e:9b:fd:d7:02:bc:f9:07:e7:95:b3:
bb:ad:0b:0d:62:81:6f:60:f8:67:a9:7d:6d:2c:a1:
92:ce:9c:dd:4e:22:41:1d:36:86:68:46:e1:c0:14:
6a:ae:fb:c6:25:3f:52:21:f8:41:36:a6:2f:3a:00:
df:3c:2f:5b:84:f4:94:e8:d4:35:f4:6d:6e:04:02:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1F:9B:41:3C:A2:44:C9:39:9E:B7:61:1B:76:DB:EA:E2:11:6B:B4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GB-bQTyiRMk5nrdhG3bb6uIRa7Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.194.0/24
Signature Algorithm: sha256WithRSAEncryption
54:8d:95:42:ea:a3:a1:4f:fc:0b:38:a8:98:6a:fb:96:b8:b8:
9a:75:0d:35:73:2b:96:1c:84:f0:29:1c:dd:a1:16:7c:03:04:
f4:20:28:c7:ca:40:9f:ca:b7:f2:65:dd:e2:3b:8b:95:4e:fc:
67:17:77:66:de:22:e3:d1:d3:7d:fd:de:ce:eb:4a:7e:7b:23:
ad:d7:dd:94:b8:0a:88:6b:ca:cb:ac:61:49:48:af:f9:f0:75:
55:45:b4:52:8f:dc:22:7c:50:c9:87:77:be:68:ed:67:52:af:
da:be:f8:92:e2:78:d7:45:d4:c9:16:73:58:96:61:d6:2b:ef:
4e:22:62:5f:96:34:db:0d:0c:72:25:08:83:6b:47:81:02:d0:
16:91:0f:d3:a0:11:4f:c7:c7:3e:0d:0d:43:05:7f:36:8c:4c:
70:eb:e9:35:8a:9e:05:ef:18:f0:9a:54:eb:99:8a:eb:08:37:
37:76:4c:84:8d:5d:e4:6d:fb:67:68:a7:b1:7d:6b:69:34:45:
62:10:74:29:d5:0d:3d:fe:86:2c:63:f6:4d:36:1d:da:16:ab:
52:5e:88:26:bc:e2:e4:00:d5:3b:2a:eb:3c:02:af:38:1b:1f:
57:4c:28:f1:c1:82:6f:71:f7:58:e7:5a:df:41:56:09:b8:06:
d7:bc:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:33 2025 by rpki-client