Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/W-1MmZcYOO0vd9OoCq5qu4KP7q4.roa
File: W-1MmZcYOO0vd9OoCq5qu4KP7q4.roa (raw, json)
Hash identifier: kWnqzuvgqCKugxgFaDhcmHNZmJJDOS28+HuM/S7qe28=
Subject key identifier: 5B:ED:4C:99:97:18:38:ED:2F:77:D3:A8:0A:AE:6A:BB:82:8F:EE:AE
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0DB0
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/W-1MmZcYOO0vd9OoCq5qu4KP7q4.roa
Signing time: Mon 26 Aug 2024 05:10:20 +0000
ROA not before: Mon 26 Aug 2024 05:10:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18429
IP address blocks: 27.147.24.0/21 maxlen: 21
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3504 (0xdb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Aug 26 05:10:20 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5BED4C99971838ED2F77D3A80AAE6ABB828FEEAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8c:ea:79:2b:d5:8f:4f:4b:d1:62:62:dd:5d:
55:2b:50:29:d8:df:e8:eb:34:4a:a2:5d:df:e4:98:
31:97:c8:61:50:30:96:7e:10:62:9b:b9:78:b8:14:
3e:48:79:d5:d0:07:5d:6a:63:d5:04:9f:9c:f4:3a:
2d:d8:fe:8f:92:1b:2f:09:1f:7f:96:f1:3e:31:d9:
d5:87:57:62:76:85:a4:18:f2:5c:28:6b:da:01:e0:
fa:39:b4:df:54:d1:66:92:90:93:59:75:e2:28:da:
bd:13:dd:d1:b1:8d:2b:09:b5:2f:90:e5:64:39:42:
2d:76:ca:10:8d:95:38:d5:ed:45:85:99:a5:fc:cd:
ad:12:4c:68:83:23:3e:93:72:b7:61:5b:ce:c9:25:
d9:a8:59:38:8c:78:18:07:00:58:5d:fc:d2:83:7e:
33:48:d6:91:bd:17:db:d3:49:ef:0f:bc:5f:c1:7c:
e8:90:a1:12:f8:d9:ce:53:76:f3:67:97:8d:51:70:
04:6c:19:bf:3f:8f:03:fb:68:25:fa:60:0b:ae:64:
e6:fd:d5:f9:b9:8f:b5:8b:63:9a:98:dd:bb:9e:9b:
8e:78:af:81:56:8b:2f:3b:17:60:d0:49:6d:52:c6:
ba:b3:de:45:f0:6b:d1:22:51:20:66:ad:c4:17:dd:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:ED:4C:99:97:18:38:ED:2F:77:D3:A8:0A:AE:6A:BB:82:8F:EE:AE
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/W-1MmZcYOO0vd9OoCq5qu4KP7q4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.24.0/21
Signature Algorithm: sha256WithRSAEncryption
08:fa:db:aa:11:3f:1a:ec:fe:71:83:38:db:e5:38:86:99:b2:
a8:a9:11:10:64:ae:bb:7e:d0:89:68:00:7d:a8:ab:b9:77:b6:
75:c3:c6:73:f6:44:f9:4f:0b:fa:9f:d0:9e:e1:f2:2c:a7:88:
9e:c2:18:9c:0d:51:85:df:81:25:3c:5f:7e:73:9d:bf:bf:db:
16:70:e5:82:aa:d8:1b:51:72:fd:70:ff:c3:45:bf:69:e5:54:
e1:5e:0f:c1:9c:13:12:f7:0f:d5:fa:6c:8c:91:fc:8a:a9:c2:
1c:d8:70:05:55:f8:90:96:86:87:2c:fd:10:12:ea:d4:35:4f:
be:e6:3e:20:3f:75:ac:aa:00:53:c3:66:fc:b9:4b:c2:78:14:
02:ab:bb:88:34:39:d3:d2:76:b6:86:f8:e7:07:e4:8c:ce:ca:
01:be:07:6b:58:2e:1b:18:85:7c:be:4b:50:15:a4:29:4d:ee:
44:19:bb:24:9e:31:d3:bb:7b:54:dd:a9:75:0e:c3:a1:90:e4:
c3:a1:e8:62:2d:ae:c7:64:b2:ee:d7:34:de:29:ca:85:75:5d:
43:9f:1b:79:96:d8:28:4d:38:a9:94:11:91:a3:1b:9c:93:f7:
82:4f:b2:95:5e:6a:59:e3:cb:c1:31:77:78:23:32:10:3b:67:
39:5b:2f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:06 2025 by rpki-client