Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/CoNYXUCEf0avve5SvA1bwL2i9Qg.roa
File: CoNYXUCEf0avve5SvA1bwL2i9Qg.roa (raw, json)
Hash identifier: F5jv0kK6Dqv1NoGsUC4LleOe4Y00IvcBwS51ZCeTT2o=
Subject key identifier: 0A:83:58:5D:40:84:7F:46:AF:BD:EE:52:BC:0D:5B:C0:BD:A2:F5:08
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0B61
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/CoNYXUCEf0avve5SvA1bwL2i9Qg.roa
Signing time: Thu 15 Dec 2022 02:57:04 +0000
ROA not before: Thu 15 Dec 2022 02:57:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 61.57.144.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2913 (0xb61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Dec 15 02:57:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0A83585D40847F46AFBDEE52BC0D5BC0BDA2F508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:05:5e:3e:b4:c1:5b:77:f4:84:ae:56:32:
24:12:63:83:99:6a:23:d1:77:e2:79:dc:f5:c4:42:
b8:8b:e6:d7:e3:bc:59:60:28:6b:86:e3:91:0e:ff:
76:cd:e2:3b:56:1a:8a:26:50:6d:3d:d1:9a:98:28:
ec:18:0c:13:92:4e:4e:2d:cd:f9:fe:c4:f9:d8:27:
2d:ce:ff:ba:dd:1c:92:63:de:26:20:01:df:6d:e7:
35:d1:47:6a:fe:ea:fd:33:4f:9b:bf:ac:33:d8:5f:
4c:61:d1:8b:c9:57:15:e9:02:18:08:5f:33:96:64:
cb:e0:f6:42:fd:8a:f1:32:c4:63:08:1d:f0:f7:92:
cf:2b:33:4b:a6:8a:f4:fb:50:13:fd:8a:2b:a3:aa:
d6:b8:ad:d9:f8:d4:b7:13:53:56:1e:3e:b7:6c:65:
d9:5e:5d:da:f5:47:00:fc:21:e5:bc:04:cc:6f:d5:
8c:06:54:84:d0:66:d7:54:e4:03:fc:02:da:86:a3:
76:ed:28:e6:41:5f:58:71:a3:47:68:e7:ef:bc:c5:
bc:51:3f:44:da:85:83:bf:c0:ef:2a:52:28:cc:11:
ab:e5:cd:b9:f4:b2:48:fa:b7:98:d4:bb:e1:86:b2:
48:c3:b5:a6:41:29:a2:1f:d8:c8:1e:67:6d:cc:a3:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:83:58:5D:40:84:7F:46:AF:BD:EE:52:BC:0D:5B:C0:BD:A2:F5:08
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/CoNYXUCEf0avve5SvA1bwL2i9Qg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.144.0/22
Signature Algorithm: sha256WithRSAEncryption
89:b5:da:c7:76:01:fa:e9:dd:60:c9:6e:6c:dc:6e:e9:f4:b5:
1a:05:7f:41:e8:4c:d3:7a:32:29:ab:a6:8d:c3:03:3c:b8:d8:
36:12:ef:cd:90:a8:e7:43:f7:b3:0a:a7:59:a2:17:5e:06:2a:
4d:be:a7:da:cf:61:ba:b7:0e:33:19:fc:2b:20:1d:27:fb:f2:
b1:47:3d:2e:68:49:53:9f:46:c4:7b:8b:88:58:10:4d:1e:63:
92:ee:f2:8d:4f:66:63:f4:f1:31:6b:85:73:7c:89:e0:8e:73:
12:e4:30:54:02:ce:ba:f3:46:ea:98:84:a4:5f:cf:d5:8d:30:
46:02:3e:2e:e9:8e:2f:85:a3:3b:b2:e7:53:65:6c:59:9d:99:
71:75:da:de:44:b3:2c:78:ea:da:29:b5:ff:e2:26:b3:9d:32:
f2:f4:8d:18:e4:31:04:7e:0c:3b:a6:07:3a:87:ef:ad:52:f8:
1c:47:ed:35:98:d8:83:83:96:4f:cb:5b:e3:4b:b3:26:cf:01:
ba:56:dc:65:53:c9:a7:30:89:b7:04:aa:c0:e3:d5:c3:11:e2:
27:00:75:75:06:87:05:3f:7f:4a:15:f6:de:7b:ff:e1:8c:e6:
e3:a4:3c:5b:83:4a:56:4c:b9:71:01:eb:fd:14:04:b5:ed:74:
15:0c:31:0d
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICC2EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMjEyMTUw
MjU3MDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDBBODM1ODVENDA4NDdG
NDZBRkJERUU1MkJDMEQ1QkMwQkRBMkY1MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCusgVePrTBW3f0hK5WMiQSY4OZaiPRd+J53PXEQriL5tfjvFlg
KGuG45EO/3bN4jtWGoomUG090ZqYKOwYDBOSTk4tzfn+xPnYJy3O/7rdHJJj3iYg
Ad9t5zXRR2r+6v0zT5u/rDPYX0xh0YvJVxXpAhgIXzOWZMvg9kL9ivEyxGMIHfD3
ks8rM0umivT7UBP9iiujqta4rdn41LcTU1YePrdsZdleXdr1RwD8IeW8BMxv1YwG
VITQZtdU5AP8AtqGo3btKOZBX1hxo0do5++8xbxRP0TahYO/wO8qUijMEavlzbn0
skj6t5jUu+GGskjDtaZBKaIf2MgeZ23Mo92pAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUCoNYXUCEf0avve5SvA1bwL2i9QgwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9Db05ZWFVDRWYwYXZ2ZTVTdkEx
YndMMmk5UWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPTmQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCJtdrHdgH66d1gyW5s3G7p9LUaBX9B6EzTejIp
q6aNwwM8uNg2Eu/NkKjnQ/ezCqdZohdeBipNvqfaz2G6tw4zGfwrIB0n+/KxRz0u
aElTn0bEe4uIWBBNHmOS7vKNT2Zj9PExa4VzfIngjnMS5DBUAs6680bqmISkX8/V
jTBGAj4u6Y4vhaM7sudTZWxZnZlxddreRLMseOraKbX/4iaznTLy9I0Y5DEEfgw7
pgc6h++tUvgcR+01mNiDg5ZPy1vjS7MmzwG6VtxlU8mnMIm3BKrA49XDEeInAHV1
BocFP39KFfbee//hjObjpDxbg0pWTLlxAev9FAS17XQVDDEN
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:57 2025 by rpki-client