Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/beLUDjxNbLqQEzak6fqDFqWS7OY.roa
File: beLUDjxNbLqQEzak6fqDFqWS7OY.roa (raw, json)
Hash identifier: NXX1ESwjbuhA0Js2n+VOdJiLhBDkkvs+GRETwCG5u2U=
Subject key identifier: 6D:E2:D4:0E:3C:4D:6C:BA:90:13:36:A4:E9:FA:83:16:A5:92:EC:E6
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 09E5
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/beLUDjxNbLqQEzak6fqDFqWS7OY.roa
Signing time: Wed 29 Sep 2021 02:52:07 +0000
ROA not before: Wed 29 Sep 2021 02:52:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18429
IP address blocks: 61.57.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2533 (0x9e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 29 02:52:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6DE2D40E3C4D6CBA901336A4E9FA8316A592ECE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:fb:83:fc:96:ab:34:56:84:82:21:3f:26:
38:62:64:ec:1f:74:63:c8:89:fe:96:ae:6a:d2:ef:
09:dc:c6:2a:3b:31:09:2b:6b:c6:0a:06:88:89:72:
99:66:71:4a:70:29:1e:56:14:60:37:df:4e:37:04:
15:18:ef:8f:94:00:2a:05:d0:b3:bf:50:7c:cf:da:
c0:a7:77:3c:91:62:35:9d:13:3a:ba:ce:f6:de:37:
60:d9:c0:64:6e:07:d8:c1:c2:e3:f5:d6:b2:30:da:
aa:10:85:0b:5b:8b:e2:a4:75:84:0e:b6:6d:3f:83:
05:29:c0:e8:29:9c:fa:9c:8c:33:8b:b1:98:c8:c7:
1b:1f:65:70:27:0a:dc:cb:af:3d:b7:ab:8f:e8:5e:
83:31:48:ef:8d:40:2a:0d:50:d8:79:db:38:08:e8:
fb:c5:af:1c:c6:00:ea:46:27:77:8a:5b:a9:d8:7a:
a9:22:33:0a:a5:2f:1a:70:a8:7e:5d:4b:56:8c:22:
d0:ce:0c:26:ed:46:e1:49:1c:af:b7:84:be:2f:92:
c1:a7:7a:98:4c:6f:41:a9:a2:a0:72:3c:ba:16:5a:
78:f3:9e:7b:93:bb:e0:4a:a0:45:fa:80:ab:29:48:
39:f5:87:92:bb:a9:63:f3:4f:3b:85:fe:2d:29:e3:
9b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E2:D4:0E:3C:4D:6C:BA:90:13:36:A4:E9:FA:83:16:A5:92:EC:E6
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/beLUDjxNbLqQEzak6fqDFqWS7OY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.144.0/22
Signature Algorithm: sha256WithRSAEncryption
42:fd:e7:58:18:dd:bc:77:d4:43:da:b8:49:b2:4b:e8:73:b3:
b5:a9:b5:1e:13:c2:5d:49:77:1e:d9:8d:6b:20:46:64:14:c1:
c4:80:cc:65:9e:d6:99:eb:56:fd:e0:07:e9:78:af:c3:4f:80:
35:c6:3b:61:fb:87:0e:bf:e4:ab:e0:e9:a5:e5:f0:e2:1e:08:
63:67:7b:2d:1b:11:79:07:13:b2:f4:70:79:9a:c0:77:8c:ec:
a7:4a:83:77:7e:15:da:b9:c6:b8:40:33:37:ef:6c:1d:63:60:
d9:27:b0:41:4b:2d:63:17:da:8c:4f:8f:2c:4b:d1:c1:09:f2:
83:fc:06:58:f2:8c:51:2a:3b:76:a5:94:1f:99:77:76:d8:d7:
79:dc:6b:33:e0:66:fb:fb:db:38:ec:72:3a:6b:4d:22:94:6f:
d0:13:2c:ae:24:5b:48:79:5e:85:08:57:db:ca:4e:19:49:c3:
42:47:ff:4a:10:b5:64:8f:ec:53:d2:89:f2:c7:99:6e:a0:23:
0f:a3:d4:12:55:05:cc:bc:a1:da:7a:66:1f:5a:c5:66:fd:6d:
e6:e3:3c:36:93:95:d7:14:f4:83:c9:7e:09:7f:4d:7e:7c:62:
56:e4:1f:58:7f:db:5c:7e:b2:de:ea:a7:e9:c9:86:cc:23:ce:
12:da:27:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org