Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/7AQOtBZ1J1vP73g9msp_HiOHNOQ.roa
File: 7AQOtBZ1J1vP73g9msp_HiOHNOQ.roa (raw, json)
Hash identifier: GSZl5x3BjuuWULDQ2K+u/WzcfdyZ803mbbuIW+U424U=
Subject key identifier: EC:04:0E:B4:16:75:27:5B:CF:EF:78:3D:9A:CA:7F:1E:23:87:34:E4
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0B49
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/7AQOtBZ1J1vP73g9msp_HiOHNOQ.roa
Signing time: Thu 15 Dec 2022 02:56:56 +0000
ROA not before: Thu 15 Dec 2022 02:56:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 27.147.0.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2889 (0xb49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Dec 15 02:56:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EC040EB41675275BCFEF783D9ACA7F1E238734E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:41:02:a7:b1:6b:62:d2:c5:c1:5e:73:1d:
91:07:5d:33:dd:8e:d9:e4:5e:e7:26:90:26:11:75:
68:5e:07:e5:f1:6e:bb:da:c1:a4:45:6b:8c:77:87:
5a:68:a7:1d:de:3a:9a:7b:96:b2:5b:b2:31:f0:55:
9e:8c:13:8d:26:e3:c8:b9:40:7f:6b:13:5c:49:02:
62:7d:63:b0:b1:75:ae:c8:d5:a3:11:b8:93:a6:86:
a1:94:7f:07:72:2a:28:15:67:ce:0a:ad:0a:43:04:
53:db:29:95:41:f1:84:de:8c:c1:cd:69:51:2f:d4:
94:c8:9c:5a:21:57:17:d1:72:bd:1a:6f:91:a5:c2:
be:6a:25:ea:29:95:89:34:5b:ee:91:e3:7f:ee:34:
b1:e4:17:54:95:10:3b:cc:c0:22:f4:be:c0:4e:52:
43:5d:c2:7c:ed:45:72:b7:ba:10:52:3d:42:a1:8e:
4c:64:b1:4f:63:09:e6:17:2e:f5:2b:5b:83:64:4b:
29:41:97:c6:df:7c:67:c0:89:e2:b4:fd:70:76:a0:
0b:df:97:90:3f:3f:de:ac:17:e2:50:8a:ca:fe:73:
9c:f7:0a:32:fc:38:92:25:fb:8d:1b:3f:61:1d:47:
9c:c0:f4:67:e4:a0:bc:f1:12:f2:5c:1a:a6:ee:a5:
e3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:04:0E:B4:16:75:27:5B:CF:EF:78:3D:9A:CA:7F:1E:23:87:34:E4
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/7AQOtBZ1J1vP73g9msp_HiOHNOQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.0.0/21
Signature Algorithm: sha256WithRSAEncryption
72:de:93:41:aa:35:ee:c8:02:b8:35:17:33:f3:5f:18:c2:3f:
d7:af:14:0c:e7:25:66:d5:de:f8:35:9f:65:f2:41:8d:83:8b:
a2:e8:c9:2b:02:77:92:f9:b7:05:19:b9:c4:85:a2:c8:a0:38:
8d:79:30:a6:6b:de:06:6f:76:57:a4:57:79:2a:dd:2d:51:f8:
82:e5:13:23:9f:fb:ca:ef:e4:30:38:28:48:32:6f:1a:04:ac:
2e:bb:19:76:4b:61:97:a8:75:7d:6a:1c:0e:1e:ce:41:c4:18:
36:85:25:86:99:02:b2:cb:8b:28:bb:39:7f:af:ad:45:e6:06:
46:4a:84:37:8b:01:13:d8:72:87:eb:20:c3:25:5a:7b:c6:e5:
7e:85:7f:9f:92:4c:63:1e:68:23:10:ae:48:65:26:e5:a3:58:
13:80:84:7e:d8:cf:49:59:83:52:ad:ca:0d:c5:bd:80:b7:b6:
b7:79:6b:d6:c9:e2:d1:5b:76:69:c1:53:2e:c8:c6:03:cc:5d:
0f:6e:dd:ea:45:4c:66:0d:df:21:1b:7d:90:15:85:24:07:07:
36:e7:76:ff:07:2d:a0:df:a5:05:86:42:22:a0:b6:38:65:f8:
e8:39:ab:53:a2:5e:67:8e:20:af:6d:7f:90:b8:8d:f1:0c:79:
26:12:f5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org