Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/TK1JKfV8hAtbiEM_XGUbsaQMBNA.roa
File: TK1JKfV8hAtbiEM_XGUbsaQMBNA.roa (raw, json)
Hash identifier: tznV0pbqrPw4vNgSp9El0GaXLNW5kZSCLA9EIOxjIX4=
Subject key identifier: 4C:AD:49:29:F5:7C:84:0B:5B:88:43:3F:5C:65:1B:B1:A4:0C:04:D0
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0B4B
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/TK1JKfV8hAtbiEM_XGUbsaQMBNA.roa
Signing time: Thu 15 Dec 2022 02:56:56 +0000
ROA not before: Thu 15 Dec 2022 02:56:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 27.147.16.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2891 (0xb4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Dec 15 02:56:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4CAD4929F57C840B5B88433F5C651BB1A40C04D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:9a:f2:eb:61:50:d7:90:d1:43:a2:9d:4d:
1a:c8:92:ae:5f:57:01:d5:cf:99:f4:9e:37:bf:92:
b3:69:2c:81:30:1d:a1:75:33:45:60:4e:e0:3b:b4:
6e:0e:78:59:d7:d8:87:47:e1:0b:81:3b:e6:84:6b:
60:db:36:f3:0a:2b:bf:39:67:a4:d9:f6:f9:bb:85:
ea:b6:b2:a8:37:5b:4a:0f:3e:82:04:dd:9a:3c:70:
55:db:69:7f:d4:96:b1:b0:1e:ed:68:4c:df:90:b5:
26:18:bc:0b:08:6f:56:08:55:91:be:20:0e:5e:e7:
ca:54:2b:00:47:5f:41:1a:a1:a4:9d:06:27:f7:d5:
3f:56:d3:91:d6:88:3f:4c:2c:ff:d6:f4:d2:40:22:
f6:aa:34:c5:5c:71:ad:6b:91:75:64:0c:5c:81:9e:
b2:84:15:a1:a7:23:69:3e:50:bd:aa:dc:01:96:74:
55:0c:fc:05:ca:7f:a2:46:9c:52:d4:de:19:aa:df:
e6:7d:33:66:d8:2f:37:3c:04:57:94:39:55:c6:13:
c5:e3:62:90:b4:a4:e7:c1:f7:99:28:88:46:b0:f7:
76:0a:32:38:87:73:ea:ef:45:87:aa:b7:3c:c7:55:
71:e4:fe:b7:7c:06:20:72:8e:7a:a2:3f:2a:4a:9a:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AD:49:29:F5:7C:84:0B:5B:88:43:3F:5C:65:1B:B1:A4:0C:04:D0
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/TK1JKfV8hAtbiEM_XGUbsaQMBNA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.16.0/21
Signature Algorithm: sha256WithRSAEncryption
58:e7:42:94:bc:62:e6:68:7a:28:00:54:f5:4a:5f:3d:b6:0e:
c8:b4:42:68:c3:27:a2:d3:fc:a8:07:71:97:a3:5e:cf:da:9f:
1f:ea:bf:4b:bb:42:bd:71:20:18:ae:a5:1b:76:7e:c4:be:54:
ae:0c:f1:60:30:d4:5f:dc:cd:b5:f2:31:70:13:10:66:2a:80:
a3:c1:21:74:1a:f8:0f:da:a8:40:d7:f6:7c:0b:21:66:3a:69:
33:81:d3:18:ed:89:ba:0e:1f:d0:42:4b:8a:43:f9:34:8a:45:
9c:f7:b3:92:c5:71:c9:e8:fc:a5:82:a8:2d:7a:ef:9d:29:77:
71:f9:8f:c8:2a:eb:39:34:3a:7d:56:a1:16:4e:4c:0b:e5:de:
b9:5c:93:f7:85:2b:0b:bb:07:1d:ef:9a:d2:92:90:d3:d8:5f:
12:58:90:80:44:f3:14:5b:1a:36:49:be:c5:f3:43:6e:e0:78:
1f:e2:f3:d3:4a:e4:3b:73:b5:a6:27:9a:7a:0e:11:fb:5d:28:
93:dd:20:77:d7:88:cf:03:b0:09:e1:05:8f:b2:12:24:65:df:
bb:90:2b:ed:c5:b9:f6:9c:44:6e:bb:4b:e5:08:fb:c0:93:d1:
33:c6:48:58:b7:9d:4d:53:c8:0b:3c:9e:df:66:da:f1:54:70:
62:05:32:cf
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICC0swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMjEyMTUw
MjU2NTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDRDQUQ0OTI5RjU3Qzg0
MEI1Qjg4NDMzRjVDNjUxQkIxQTQwQzA0RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtMJry62FQ15DRQ6KdTRrIkq5fVwHVz5n0nje/krNpLIEwHaF1
M0VgTuA7tG4OeFnX2IdH4QuBO+aEa2DbNvMKK785Z6TZ9vm7heq2sqg3W0oPPoIE
3Zo8cFXbaX/UlrGwHu1oTN+QtSYYvAsIb1YIVZG+IA5e58pUKwBHX0EaoaSdBif3
1T9W05HWiD9MLP/W9NJAIvaqNMVcca1rkXVkDFyBnrKEFaGnI2k+UL2q3AGWdFUM
/AXKf6JGnFLU3hmq3+Z9M2bYLzc8BFeUOVXGE8XjYpC0pOfB95koiEaw93YKMjiH
c+rvRYeqtzzHVXHk/rd8BiByjnqiPypKmrnDAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUTK1JKfV8hAtbiEM/XGUbsaQMBNAwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9USzFKS2ZWOGhBdGJpRU1fWEdV
YnNhUU1CTkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDG5MQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBY50KUvGLmaHooAFT1Sl89tg7ItEJowyei0/yo
B3GXo17P2p8f6r9Lu0K9cSAYrqUbdn7EvlSuDPFgMNRf3M218jFwExBmKoCjwSF0
GvgP2qhA1/Z8CyFmOmkzgdMY7Ym6Dh/QQkuKQ/k0ikWc97OSxXHJ6Pylgqgteu+d
KXdx+Y/IKus5NDp9VqEWTkwL5d65XJP3hSsLuwcd75rSkpDT2F8SWJCARPMUWxo2
Sb7F80Nu4Hgf4vPTSuQ7c7WmJ5p6DhH7XSiT3SB314jPA7AJ4QWPshIkZd+7kCvt
xbn2nERuu0vlCPvAk9EzxkhYt51NU8gLPJ7fZtrxVHBiBTLP
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org