Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/4BZ-suAvZLqXGK7wnl54pJgLFXg.roa
File: 4BZ-suAvZLqXGK7wnl54pJgLFXg.roa (raw, json)
Hash identifier: Q8HvIPMUf4y+7ZlpAcezGDcjr0vl4qPdQbXTXKsdDp0=
Subject key identifier: E0:16:7E:B2:E0:2F:64:BA:97:18:AE:F0:9E:5E:78:A4:98:0B:15:78
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 09D3
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/4BZ-suAvZLqXGK7wnl54pJgLFXg.roa
Signing time: Wed 29 Sep 2021 02:52:02 +0000
ROA not before: Wed 29 Sep 2021 02:52:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18429
IP address blocks: 27.147.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2515 (0x9d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 29 02:52:02 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E0167EB2E02F64BA9718AEF09E5E78A4980B1578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:eb:34:82:7c:00:b5:02:68:c3:18:99:34:
4a:03:2f:14:d5:3a:00:62:1d:7a:89:e0:74:0b:e1:
48:b5:58:49:96:39:c6:a8:b7:36:01:da:e6:85:38:
20:3f:99:3d:39:06:80:4f:9b:9f:47:4f:cd:6f:af:
c6:0a:27:c3:02:7a:e4:a8:eb:90:35:b7:a0:3f:67:
90:0a:39:69:a1:d7:bc:0f:2d:96:14:a5:15:31:e3:
e8:cd:e6:3a:75:17:d1:f2:00:8b:4f:92:83:f7:d3:
1f:1e:e5:8d:f9:b3:2f:5b:74:17:d3:29:0e:20:ce:
7e:f9:9d:6c:e7:b4:6c:5e:77:64:87:b2:8f:ad:ed:
f8:f9:bc:db:1c:ab:a5:ca:cb:80:54:86:97:34:1d:
98:5e:ed:b0:38:a5:12:1c:52:4d:82:e4:71:4f:af:
89:4e:da:5e:f5:c2:08:db:c6:24:86:84:93:b3:06:
0e:61:dd:24:8f:42:07:a8:fe:1c:a0:b4:f0:c0:9a:
1c:f2:a6:ae:92:35:1d:4a:97:b5:6d:9a:82:de:d1:
a4:8d:c0:1a:76:68:74:9b:a0:ba:77:c8:23:90:48:
28:ef:f0:c5:70:e9:24:0d:ac:0a:b8:56:28:88:97:
de:48:0b:21:08:17:fe:15:fc:9d:f3:fd:92:8b:bb:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:16:7E:B2:E0:2F:64:BA:97:18:AE:F0:9E:5E:78:A4:98:0B:15:78
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/4BZ-suAvZLqXGK7wnl54pJgLFXg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
93:2a:41:a4:64:b6:3c:84:2d:47:6d:b5:77:bc:e7:61:45:09:
27:da:46:31:47:ec:ef:ed:a8:5c:3c:61:34:11:f9:2c:71:80:
52:a5:2d:f4:0e:17:77:45:37:fa:48:08:36:89:09:86:0f:42:
90:47:9b:d8:ec:ae:d1:9d:59:f2:5f:34:ee:e7:cc:22:d9:5c:
98:b4:4e:af:9b:62:bf:96:fd:22:77:fc:d3:18:1b:e8:58:0c:
c5:b6:4c:dd:1d:46:b0:e4:dc:c0:f2:eb:ed:9c:d3:54:aa:76:
64:2b:ab:d1:9f:28:5b:ed:6d:ae:c8:b2:a0:38:51:02:9e:c7:
9f:12:dd:2e:64:0e:cc:36:84:aa:3f:06:dc:1d:1f:98:6b:93:
66:02:69:8a:47:e8:4d:b7:d7:4f:02:d3:aa:69:cb:29:3b:4c:
28:d5:07:71:d6:60:cb:95:81:2f:ca:f7:d5:7c:88:81:c4:1e:
79:c1:8e:2f:b2:df:2b:25:14:6e:a4:19:9c:03:a1:fc:24:63:
99:93:81:46:f3:4f:ee:43:d3:a2:10:41:b9:9f:95:6e:9f:8b:
df:05:ab:9c:11:ef:e5:b2:3b:2f:12:67:c4:5b:b8:d6:78:40:
d3:b9:85:9e:65:cf:e6:ab:71:17:1e:bb:3d:5d:f5:89:da:b7:
b6:2a:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org