Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/9gBZEaCwJHLc08OrNYvaL96MIaE.roa
File: 9gBZEaCwJHLc08OrNYvaL96MIaE.roa (raw, json)
Hash identifier: fwPW9/of/QxxcfIxVabWFudnmwvmrneA20YJcxw9vx0=
Subject key identifier: F6:00:59:11:A0:B0:24:72:DC:D3:C3:AB:35:8B:DA:2F:DE:8C:21:A1
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 09D5
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/9gBZEaCwJHLc08OrNYvaL96MIaE.roa
Signing time: Wed 29 Sep 2021 02:52:02 +0000
ROA not before: Wed 29 Sep 2021 02:52:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18429
IP address blocks: 27.147.63.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2517 (0x9d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 29 02:52:02 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F6005911A0B02472DCD3C3AB358BDA2FDE8C21A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:d7:78:9c:77:8a:3e:7d:21:5e:8a:de:6d:
42:8b:2f:57:b0:de:ec:83:c6:5f:53:31:df:50:6c:
5c:9d:b7:cf:c4:62:39:fa:be:d9:c5:14:76:7a:cc:
cc:4c:f0:4d:ff:ca:74:8a:ad:aa:e3:8a:62:39:09:
e4:8d:3c:bf:6c:11:7f:f8:9f:2c:be:ed:79:ca:d4:
7f:52:53:ec:33:22:79:0e:27:5b:6a:90:a4:80:e7:
93:f7:13:b4:31:6f:fb:a3:46:27:1f:47:29:3f:b3:
3f:9a:95:c0:7a:18:ad:a3:9f:06:db:d6:80:af:56:
c6:cc:df:b6:b5:b9:09:68:25:bb:55:9b:ce:53:9e:
34:a5:89:f9:4b:bb:6d:3b:d6:8c:c4:88:a3:90:9a:
40:70:47:a4:00:68:ba:34:bb:57:92:d6:8e:cc:1e:
53:99:41:aa:cd:a5:32:09:48:de:b7:e7:44:4b:8f:
17:17:e3:cb:81:08:95:06:ce:22:02:0d:de:1c:a6:
a6:4d:b1:2f:0c:54:91:26:e9:4c:4b:c5:f9:14:42:
45:2f:03:9a:fa:b3:d7:87:fb:0e:6b:f4:6f:4c:14:
88:63:35:a2:bd:6a:98:83:ca:db:d2:5a:46:c1:64:
40:6c:23:54:c2:1b:b5:dc:c9:6b:4c:3c:b5:5b:8e:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:00:59:11:A0:B0:24:72:DC:D3:C3:AB:35:8B:DA:2F:DE:8C:21:A1
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/9gBZEaCwJHLc08OrNYvaL96MIaE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.63.0/24
Signature Algorithm: sha256WithRSAEncryption
00:aa:99:7b:07:6c:d8:34:dc:52:63:67:36:2f:ae:b4:37:91:
18:29:e7:5b:98:69:17:71:db:79:60:42:e6:5b:fe:12:9c:01:
3e:dc:7b:b0:7c:d7:d0:ae:15:26:1a:4c:c4:a2:65:ab:11:03:
04:aa:70:1c:bb:bb:4a:e6:ac:d4:9d:a2:c7:03:ea:64:1b:27:
f4:99:7e:7a:5b:62:42:73:8b:9c:d3:79:15:7f:ef:d1:5f:5f:
00:06:51:ea:60:eb:63:39:c2:e6:d8:62:72:bb:ea:e0:c8:28:
31:52:68:d9:72:66:6d:a1:a3:26:0c:70:ba:ed:23:86:2f:50:
36:0c:1c:c1:48:3d:35:73:68:8b:d6:26:66:9a:50:2b:0b:61:
ab:40:d8:a0:44:aa:90:f5:ca:c0:df:a2:35:a9:15:0a:67:b1:
35:fd:b3:28:ce:b4:00:e5:da:a2:50:0f:58:ba:7d:24:78:81:
47:cb:f5:04:3a:bc:1b:25:1d:a1:cb:de:e6:25:89:9d:af:0c:
2e:53:a9:15:0f:7f:f2:3c:e1:5c:f5:05:c3:c0:60:2f:4e:43:
13:6e:b5:1f:17:e8:be:8b:8b:3f:9d:e6:7d:c6:b2:32:25:93:
d2:ea:ee:c8:14:86:31:c0:d6:e5:6a:11:06:ba:2a:52:12:0f:
3b:ed:ff:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:40 2025 by rpki-client