Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/bs3NiOX-g6uKLoLObIkbChu_SWs.roa
File: bs3NiOX-g6uKLoLObIkbChu_SWs.roa (raw, json)
Hash identifier: s/Bqdg/Zrtdp8naUisbfE/H/bDaEirDV2zlW7O+z6RI=
Subject key identifier: 6E:CD:CD:88:E5:FE:83:AB:8A:2E:82:CE:6C:89:1B:0A:1B:BF:49:6B
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0C7D
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/bs3NiOX-g6uKLoLObIkbChu_SWs.roa
Signing time: Fri 01 Sep 2023 08:26:38 +0000
ROA not before: Fri 01 Sep 2023 08:26:38 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18429
IP address blocks: 61.57.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3197 (0xc7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 1 08:26:38 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6ECDCD88E5FE83AB8A2E82CE6C891B0A1BBF496B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:5f:fc:38:05:8a:c1:9e:96:80:eb:af:f4:
a0:fd:da:68:33:ca:6a:9c:7a:59:bf:98:28:1b:37:
7e:cb:cb:da:fb:f0:33:35:9c:40:b2:65:30:0d:b6:
27:45:8f:02:8d:a6:c1:48:31:14:8c:47:34:c1:11:
4b:2d:8c:44:72:92:da:ac:61:fb:e0:01:18:cb:27:
2f:47:fc:98:76:d4:e4:b9:26:dc:2e:1d:ee:81:9d:
37:4f:d6:a3:80:c6:52:e7:b7:84:c8:aa:91:ae:16:
7b:ff:a4:9c:6d:c1:e6:c0:7d:3f:36:ba:ca:cb:ab:
6c:ae:db:ff:4a:39:1c:3a:5a:7a:41:1d:a7:6f:34:
04:c4:40:f0:8c:c2:e6:f5:56:d5:f3:82:d7:09:f0:
08:b3:d1:d4:f2:a2:a5:dc:42:3c:d1:55:a5:13:39:
be:fc:bf:21:6e:b6:fb:ba:dc:8c:d4:c6:55:da:49:
71:a2:ff:c1:af:3b:db:b5:4e:a0:cb:ed:8a:e8:ef:
e0:7f:bf:14:b1:3c:10:db:e3:d4:fc:0d:35:dc:b2:
ad:5c:8f:f2:82:da:fb:f8:bb:d3:10:6e:15:2f:84:
54:42:5e:08:24:91:2f:8f:d6:37:eb:5a:83:08:8d:
ef:ec:2f:f7:1d:e4:59:72:bc:20:af:4d:e6:14:5a:
58:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CD:CD:88:E5:FE:83:AB:8A:2E:82:CE:6C:89:1B:0A:1B:BF:49:6B
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/bs3NiOX-g6uKLoLObIkbChu_SWs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.152.0/22
Signature Algorithm: sha256WithRSAEncryption
44:db:37:85:92:5a:18:80:e1:2d:2e:14:21:f0:4a:c5:6f:2d:
e0:2b:46:e5:db:f5:e6:ba:f9:38:de:82:3d:f1:0d:3a:44:f8:
22:1d:a5:13:b4:38:c4:e9:74:a8:ce:3e:1d:14:04:fe:2e:af:
13:8f:cb:81:2c:51:87:35:18:e7:14:ec:d0:15:4c:48:22:4e:
54:b1:3d:49:48:ad:27:13:6c:1d:ab:a5:d0:bc:32:b4:eb:29:
47:16:57:36:60:4c:90:8e:25:ec:0f:97:cd:2e:4e:ab:35:09:
90:ef:d1:c4:e3:0a:f3:d9:a3:16:e6:6b:fa:33:5b:50:8b:7c:
74:a0:02:08:85:da:b7:f5:98:e3:2c:bc:32:2a:ef:09:64:fd:
5b:21:dd:10:b6:35:c1:c9:8e:b7:2d:ed:6f:53:e3:c1:1b:ea:
1b:1d:fe:c1:82:7d:50:26:79:7b:88:6d:6f:db:fb:ce:cc:8f:
27:11:94:ee:5c:38:39:e6:57:f7:2e:9f:17:c5:67:9b:1e:d6:
56:d9:42:52:16:fa:2d:ac:06:6f:0b:5f:e7:50:bd:99:c0:5f:
a9:e1:0f:66:30:35:f4:9b:4c:b9:ac:b1:08:95:74:3a:d6:37:
e5:87:a9:dc:c6:9b:7f:9d:20:40:dd:b7:3b:53:b1:e5:af:2b:
be:43:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:30 2025 by rpki-client