Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/1WikGwWAk89Qhpk4Twkjkuvwk64.roa
File: 1WikGwWAk89Qhpk4Twkjkuvwk64.roa (raw, json)
Hash identifier: 2n4aJ7V20TUa5CyFcWzxUbEW8opup/otwbbj8Gkwe2U=
Subject key identifier: D5:68:A4:1B:05:80:93:CF:50:86:99:38:4F:09:23:92:EB:F0:93:AE
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 08F1
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/1WikGwWAk89Qhpk4Twkjkuvwk64.roa
Signing time: Sun 07 Feb 2021 12:44:53 +0000
ROA not before: Sun 07 Feb 2021 12:44:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18429
IP address blocks: 27.147.0.0/21 maxlen: 21
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Feb 7 12:44:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D568A41B058093CF508699384F092392EBF093AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:f4:58:6d:58:7e:33:14:50:47:9f:65:de:
80:b7:61:1c:e0:d7:56:87:cf:65:f5:ba:d1:7e:1c:
2b:fe:95:64:4f:b5:c4:28:5c:51:82:d9:42:f3:8a:
b2:0e:08:47:cf:de:6c:9f:10:06:d6:5c:cb:72:76:
5f:ef:64:42:6a:1a:4d:9f:b0:fd:cd:80:d6:29:b4:
3c:2d:2d:90:8a:62:d8:18:3e:c8:9d:d0:c2:6a:3f:
f3:83:01:16:f2:1a:73:c2:ef:7c:f8:48:ae:1d:17:
e9:62:3a:65:1b:59:e2:0b:67:4c:55:c3:5b:af:7c:
78:82:8f:4c:05:45:e0:f6:70:ee:ea:d4:af:5c:5a:
1f:c3:42:fd:8f:2e:f2:e5:a0:f0:e6:10:82:9f:39:
95:fa:fc:33:f8:81:d2:85:f4:61:ea:6e:89:74:a2:
8c:c0:d7:59:59:f7:70:6f:1b:fd:02:7c:cc:fa:0c:
c7:74:39:30:db:07:c8:0b:0f:b0:b9:95:13:4d:c5:
a4:47:42:d2:2d:04:42:6e:13:4c:f9:a3:2f:7f:80:
19:3e:37:ff:74:8b:06:7b:b5:60:60:45:d6:50:57:
05:d1:ff:93:11:6a:12:01:23:a8:31:d5:b8:d9:87:
bd:55:b1:a1:19:d3:e9:7a:00:c4:ec:a3:4f:6a:9a:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:68:A4:1B:05:80:93:CF:50:86:99:38:4F:09:23:92:EB:F0:93:AE
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/1WikGwWAk89Qhpk4Twkjkuvwk64.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.0.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:fc:68:f3:33:8b:b4:f0:84:8c:26:97:5c:48:da:31:e7:d1:
dc:4c:5b:a4:57:61:81:a8:97:09:56:29:10:3c:f9:e7:65:55:
ce:a8:43:4e:79:b4:a3:ea:30:c0:1b:2d:b8:04:63:b0:e2:91:
52:38:e8:43:a9:59:6b:80:34:92:7a:0a:b2:c1:eb:c5:5e:ec:
81:d5:0d:da:1f:7f:8f:bb:b8:e2:42:6f:ae:0c:8f:0c:fb:db:
70:90:f6:fc:4c:41:6b:d1:d5:6d:d5:b0:62:8b:f9:3f:ad:16:
65:3a:7d:cb:61:4d:b0:3f:20:7a:b1:2f:57:00:fd:55:da:c8:
c1:4c:4c:1e:a3:72:29:56:2b:d7:f6:74:b6:d6:13:f0:e8:f5:
2a:ce:1e:f8:85:f4:11:8f:12:10:5b:3c:db:2c:bc:51:65:74:
c6:04:a7:33:38:03:71:9e:f2:bd:54:1c:7a:8e:a1:47:39:df:
42:5f:98:29:bb:08:48:ef:6f:25:10:5c:7e:5b:38:6a:69:7b:
42:fd:dd:9b:5b:59:bf:68:54:dd:59:b7:7b:12:ae:ce:d3:f1:
16:7f:09:23:e6:6c:99:4f:de:45:28:40:9d:73:fd:a0:aa:fe:
25:5b:03:fe:da:0f:ed:a6:5f:74:19:cc:4e:c8:82:cc:c4:0f:
db:49:fe:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:19 2025 by rpki-client