Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/JQswR4yn95N3Lj3L14XU75idpXM.roa
File: JQswR4yn95N3Lj3L14XU75idpXM.roa (raw, json)
Hash identifier: 5ElHec8rEFX0i84w0G8qJlyluSaZjYQASXfj/GxRQyE=
Subject key identifier: 25:0B:30:47:8C:A7:F7:93:77:2E:3D:CB:D7:85:D4:EF:98:9D:A5:73
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0DB6
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/JQswR4yn95N3Lj3L14XU75idpXM.roa
Signing time: Mon 26 Aug 2024 05:10:21 +0000
ROA not before: Mon 26 Aug 2024 05:10:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18429
IP address blocks: 123.50.48.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3510 (0xdb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Aug 26 05:10:21 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=250B30478CA7F793772E3DCBD785D4EF989DA573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:6b:83:2a:48:74:56:7d:d7:af:c0:a3:87:
ca:f2:59:67:17:2c:05:3f:ea:11:73:a8:da:ec:31:
9d:10:8d:8d:14:79:09:3b:4f:ea:ec:50:ac:a0:c5:
8c:11:39:38:51:38:34:c5:9a:91:c8:c2:cb:11:f7:
bb:93:1b:d0:e4:bd:5d:91:2b:fd:5a:e5:05:bc:ee:
eb:95:f1:c8:72:c4:2d:62:35:a9:22:7e:9b:93:37:
fb:36:02:4e:59:58:f2:60:5d:59:03:8b:ef:f2:0a:
57:07:77:84:bb:24:fb:ac:35:76:e4:76:ff:da:c9:
22:23:42:36:09:c9:2d:8d:bf:6e:10:2c:5a:f1:f8:
79:01:7e:8b:3c:be:05:68:aa:5a:98:30:22:56:cf:
be:c7:24:2a:2e:82:8d:ff:ca:3d:4e:2a:b5:e1:c6:
0f:36:16:d5:e2:93:04:94:9a:04:d3:c6:36:67:19:
e2:52:ce:ba:f4:57:ba:7b:97:b3:0d:fc:cd:a0:f9:
1a:e4:a1:77:f2:ef:5e:0e:8f:56:53:64:ce:a2:7f:
bf:15:4e:93:e3:63:61:00:a4:99:a1:c7:88:a5:c5:
3b:fe:ed:e9:09:19:1f:25:a0:14:f3:e7:77:33:0c:
27:cb:36:ef:24:f3:1b:68:f4:5e:ba:5e:80:25:8e:
8f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0B:30:47:8C:A7:F7:93:77:2E:3D:CB:D7:85:D4:EF:98:9D:A5:73
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/JQswR4yn95N3Lj3L14XU75idpXM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.50.48.0/21
Signature Algorithm: sha256WithRSAEncryption
97:62:bc:18:8c:1c:b9:fe:65:30:73:f6:58:b2:94:f1:ab:eb:
c5:cc:c3:77:82:03:fb:b1:8f:8f:5e:1d:c9:41:97:e3:eb:01:
e1:d8:a4:0c:ee:be:91:cb:92:ef:26:62:8e:68:46:73:5e:a2:
63:b2:f5:bd:44:68:64:d6:34:1a:78:f5:bd:fd:15:c4:ef:e5:
a1:4d:cc:f7:c1:16:ca:46:04:7e:5b:77:83:fa:ac:c7:44:a7:
0e:ba:d1:d9:09:af:d2:b4:de:36:45:a1:3d:ce:06:50:3a:2f:
a2:03:8d:e6:9e:f0:08:17:07:da:52:01:ce:b6:b1:d8:4c:36:
7e:89:a2:f7:d5:a1:c6:e4:6a:37:83:63:d0:7c:50:12:fd:c8:
c9:6b:4f:be:1f:04:c0:d2:de:ae:14:87:b4:eb:50:f2:81:1c:
f5:ea:d2:c0:94:20:59:11:7d:e7:3a:83:15:95:b6:ea:ad:8a:
8c:d3:d7:1f:5b:ce:93:cd:33:1d:3f:17:75:52:89:1d:60:41:
f3:22:c9:16:ea:fe:0c:cb:1a:de:6b:ba:b2:82:57:00:59:5a:
5a:08:cb:20:c4:18:b4:25:ce:69:c5:db:df:8d:56:93:f0:16:
de:ae:bf:c0:c8:aa:60:d2:4b:37:7b:db:b2:0d:6b:e3:54:a8:
27:54:bc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:02 2025 by rpki-client