Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/L5J2MruoO2-rbqJumTMsnR21D5A.roa
File: L5J2MruoO2-rbqJumTMsnR21D5A.roa (raw, json)
Hash identifier: gmmrk/PSSLPuSymOJ79yVkOG1/wMpiRZMW+NpzJUVR4=
Subject key identifier: 2F:92:76:32:BB:A8:3B:6F:AB:6E:A2:6E:99:33:2C:9D:1D:B5:0F:90
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0C5B
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/L5J2MruoO2-rbqJumTMsnR21D5A.roa
Signing time: Fri 01 Sep 2023 08:26:28 +0000
ROA not before: Fri 01 Sep 2023 08:26:28 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18429
IP address blocks: 27.147.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3163 (0xc5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 1 08:26:28 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2F927632BBA83B6FAB6EA26E99332C9D1DB50F90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:a6:ef:97:35:0f:18:aa:e0:c2:16:8f:cf:
1a:33:f8:5a:11:28:1d:c1:9f:73:84:55:28:24:c5:
57:fc:a8:1e:cc:59:d0:10:47:dd:e7:31:c4:73:60:
ff:b3:ee:72:ab:a4:26:83:e1:37:d3:5b:b1:23:94:
2d:17:3f:6b:ca:33:ec:c2:d3:16:92:41:65:b0:2d:
eb:4f:94:43:ae:ed:2b:e2:ed:0f:6b:a3:fb:79:31:
21:0e:a5:a5:8e:74:76:13:a3:90:f3:f6:ed:7b:5b:
3a:cc:92:14:c8:67:f2:16:2e:71:c4:93:c1:fd:fd:
2b:01:87:6a:62:86:94:9e:10:ac:eb:06:16:0c:d4:
a6:eb:d4:3a:09:68:4f:12:eb:ed:28:8f:6a:23:46:
ae:08:0a:bb:bf:6a:88:e2:44:73:11:13:8e:ca:69:
6c:25:45:ac:06:1e:34:74:48:5a:b0:de:0a:e8:3c:
97:b7:c0:6a:9d:ca:48:f9:53:f7:ae:e3:e8:40:83:
4b:d7:e4:0a:58:fb:f0:db:4a:17:70:fc:4a:da:f6:
2b:a0:45:3e:48:21:22:fe:5b:af:a4:e8:d5:62:fd:
7e:1d:14:d6:08:dc:21:ef:40:8f:fd:ef:bd:ef:ab:
1d:8d:b3:65:f4:3f:e6:b3:be:14:8e:04:87:2e:6f:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:92:76:32:BB:A8:3B:6F:AB:6E:A2:6E:99:33:2C:9D:1D:B5:0F:90
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/L5J2MruoO2-rbqJumTMsnR21D5A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
22:56:70:72:18:5a:96:c9:4a:f5:8e:a0:69:dc:df:f0:32:05:
fc:3f:9d:1e:40:3a:59:dd:66:57:ef:d4:7d:53:3d:c6:8d:2b:
b8:b0:b7:ce:9d:49:39:34:65:f9:a8:7d:67:2b:1e:6c:5c:b3:
3b:5e:97:ec:85:1c:e4:ab:4d:a9:86:b5:9a:6c:85:92:e7:b0:
93:be:7f:0d:e2:ff:1c:c3:1d:f2:24:ad:32:5f:40:65:e8:db:
28:ea:5c:5b:b6:75:62:c9:e7:bd:9f:17:88:70:68:e8:e0:da:
70:05:a9:5a:a4:97:5a:04:d9:25:94:07:b1:ba:33:a6:cc:bc:
4a:84:06:a5:0d:68:5c:2a:e9:b7:4e:ad:26:37:d0:17:16:f6:
ad:e6:01:e4:1b:bd:f4:ce:a9:06:1e:a0:e9:8c:f4:c7:d1:eb:
0f:84:17:37:20:20:56:44:39:0c:62:5a:1a:56:ba:9d:16:d0:
b6:50:82:a0:a0:7a:a5:45:84:ba:32:c2:06:86:d8:ab:29:33:
52:ee:73:bb:bb:14:d6:fb:17:23:65:b8:eb:4c:10:2b:eb:5e:
17:63:83:4f:56:af:06:d3:f8:28:94:a1:4e:2e:a2:e5:da:ef:
4b:09:8b:6e:a4:b9:31:b9:b8:f5:f7:3c:5b:43:44:4e:c6:6a:
61:5e:b9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:06 2025 by rpki-client