Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/7Szk38jmv0AQ8kurLVtOpB4yAGk.roa
File: 7Szk38jmv0AQ8kurLVtOpB4yAGk.roa (raw, json)
Hash identifier: ghDs/I+ADSG4O70Vlu+G/NY9TjN05c45WGgFjx7Dup0=
Subject key identifier: ED:2C:E4:DF:C8:E6:BF:40:10:F2:4B:AB:2D:5B:4E:A4:1E:32:00:69
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0C6A
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/7Szk38jmv0AQ8kurLVtOpB4yAGk.roa
Signing time: Fri 01 Sep 2023 08:26:32 +0000
ROA not before: Fri 01 Sep 2023 08:26:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18429
IP address blocks: 27.147.16.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3178 (0xc6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 1 08:26:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=ED2CE4DFC8E6BF4010F24BAB2D5B4EA41E320069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:ee:69:b9:8f:0c:1b:7b:a2:65:e5:56:13:
d8:71:aa:1f:55:29:77:c9:16:e3:b4:08:a6:74:42:
67:4e:8f:17:28:52:18:1e:d6:ff:41:6e:76:58:1d:
13:7c:aa:b8:07:9f:9e:22:26:7a:fe:14:e4:d7:54:
81:2f:95:9c:68:58:8f:89:8f:6f:15:f6:8f:39:3f:
97:4e:99:85:ce:0a:25:f2:5e:a0:29:b6:31:b1:18:
a8:ca:ac:45:db:1b:40:3b:99:46:d8:7d:8b:c7:84:
12:f5:c8:51:e5:0b:3c:79:f6:ec:61:57:64:cb:f8:
2d:d2:82:8c:0a:b6:04:98:57:82:0e:5c:0f:b6:0c:
0a:1a:68:30:91:e4:9a:80:21:b7:4b:fb:44:35:7b:
ca:95:6a:c9:6b:ff:9f:e7:c0:78:33:8a:58:d9:8a:
fd:25:f5:3c:70:8f:12:1c:8c:95:c4:34:1b:ed:01:
8b:fa:f4:56:34:4e:5a:f0:36:62:8c:82:2a:9e:2b:
c5:24:2c:8a:ab:d4:6d:40:fa:79:1b:d2:17:c9:4e:
ea:e7:05:6c:c5:57:66:a0:f4:2d:7d:94:f9:b9:b5:
a0:83:89:cb:b3:4e:4e:01:d7:49:44:88:9d:65:2d:
52:77:7d:29:40:af:cf:23:58:cc:a8:be:17:a7:98:
07:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2C:E4:DF:C8:E6:BF:40:10:F2:4B:AB:2D:5B:4E:A4:1E:32:00:69
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/7Szk38jmv0AQ8kurLVtOpB4yAGk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.16.0/21
Signature Algorithm: sha256WithRSAEncryption
54:7a:b8:b0:2c:68:e9:16:7e:bd:ce:30:0f:18:c1:36:24:a2:
68:d8:29:46:bc:c5:95:ac:05:e3:73:3d:ab:7e:bd:d5:8e:2b:
26:ef:44:ac:33:d3:c5:57:7b:ee:6d:6e:ba:fd:bd:4d:18:e5:
92:4f:14:18:4a:03:be:50:8f:9a:05:df:4a:34:05:4a:44:dd:
2e:a8:28:92:1b:05:4d:ce:7a:1b:4e:61:37:20:77:0c:b0:d6:
60:4d:49:e3:45:83:74:bb:93:3b:23:fd:6b:00:1f:89:e8:31:
69:f8:bc:d3:53:d6:17:e9:59:3c:ac:de:bf:07:31:41:70:4f:
6e:c9:ba:bc:d1:49:28:c3:bb:d3:2d:00:4a:90:b5:ac:7f:d6:
3d:a3:78:7b:47:6e:cb:d8:d1:a9:85:bf:c6:08:2c:d4:f5:ee:
9a:68:3d:14:bf:b9:56:7f:c7:6b:77:ae:61:d3:86:15:77:ba:
a3:8b:33:03:6d:0b:81:38:7c:98:88:87:b3:cf:4d:20:33:06:
17:c9:dc:77:ac:40:e0:ec:51:bf:ea:7d:d4:f4:11:ec:28:4d:
ac:be:28:58:0c:95:ea:64:bc:a2:7f:05:8d:5d:a5:b2:c8:32:
38:00:9b:5d:be:6f:99:2c:86:d2:3e:1e:b3:fd:dd:f8:33:b3:
a3:dd:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:02 2025 by rpki-client