Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/hdaG4Fj52L0sbqJY-OLugm9wb-4.roa
File: hdaG4Fj52L0sbqJY-OLugm9wb-4.roa (raw, json)
Hash identifier: IPVSXzJxM6BbA7RJBnYWefiuGXLR9SEQXxkPwDOnvks=
Subject key identifier: 85:D6:86:E0:58:F9:D8:BD:2C:6E:A2:58:F8:E2:EE:82:6F:70:6F:EE
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 09CF
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/hdaG4Fj52L0sbqJY-OLugm9wb-4.roa
Signing time: Wed 29 Sep 2021 02:52:01 +0000
ROA not before: Wed 29 Sep 2021 02:52:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18429
IP address blocks: 27.147.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2511 (0x9cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 29 02:52:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=85D686E058F9D8BD2C6EA258F8E2EE826F706FEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:8a:6d:7f:6a:31:3a:0c:66:15:11:41:1d:
fa:41:23:08:4e:3c:4e:e5:d0:df:da:ce:ed:52:a7:
e3:87:26:64:cc:b4:ab:7a:2b:cb:cb:ad:c0:cf:14:
8c:e7:fd:cc:24:15:61:c1:f7:6f:f9:ff:95:b3:ac:
e1:6a:91:bf:ba:bd:d8:7a:b6:7f:1e:fd:f5:f3:86:
37:ea:2d:ad:37:3e:7e:68:fd:e6:04:e6:62:af:44:
bd:45:25:c9:83:e8:d1:9e:0e:b1:f6:12:bc:f8:03:
fc:84:05:11:ef:5f:b1:66:4f:f7:0d:d8:a3:2a:1d:
46:8c:8f:55:b3:b8:7c:cc:af:47:e3:07:dc:d1:47:
7f:05:ac:4b:e9:93:aa:a4:96:c9:6b:4a:ac:a7:ca:
8d:23:1d:7f:fa:4a:65:14:74:da:1a:bf:aa:65:83:
02:44:c7:32:23:35:87:6d:9f:aa:d0:f5:a7:0a:91:
d2:60:eb:2d:a9:80:2e:04:58:51:d4:49:6d:68:90:
eb:cb:b6:0c:ab:d0:71:77:2b:d7:51:5e:e7:e7:ee:
d5:ab:c3:be:98:02:46:87:7a:a0:57:41:ed:cf:ea:
0b:66:08:d3:2f:66:78:79:64:12:58:01:3a:b9:62:
45:ec:42:89:e4:30:6f:bc:14:4a:d8:72:28:fe:2f:
73:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D6:86:E0:58:F9:D8:BD:2C:6E:A2:58:F8:E2:EE:82:6F:70:6F:EE
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/hdaG4Fj52L0sbqJY-OLugm9wb-4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.32.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:6e:b5:53:29:db:36:a2:9f:2e:3b:36:dc:4e:1d:27:ff:57:
44:b4:2a:a8:7e:fa:29:58:36:38:1c:35:be:17:82:fd:6a:90:
02:56:91:42:00:ce:fb:1e:6e:c0:76:a5:bf:9a:a5:f5:3a:5f:
4f:bd:24:b9:df:50:c5:f9:56:aa:d6:35:fe:c9:be:cc:25:f5:
22:25:84:49:1a:0c:25:29:4d:2c:82:57:26:89:ee:02:b5:c6:
88:12:f9:1f:d9:d3:fa:df:14:65:ff:54:22:7d:40:28:52:57:
77:39:49:98:ef:ef:00:f6:15:3f:e1:a8:8e:49:d9:61:f4:c9:
e0:d5:6f:6c:f3:1f:f6:cf:55:7f:a8:eb:95:32:ec:07:9d:e4:
61:27:8f:d9:08:b7:64:9b:02:f5:51:aa:73:93:b6:a8:89:bf:
1c:34:9d:77:be:6b:cf:c2:d8:7b:03:54:a3:5f:60:a0:e9:15:
14:9e:cb:79:0b:91:99:96:b3:e4:32:3b:84:b9:f6:f6:09:d5:
0b:13:e0:ea:88:ec:a4:70:b7:63:ed:2a:6d:d0:8c:b2:55:ed:
a5:fb:c8:24:30:de:5e:94:a2:65:86:42:93:da:53:02:78:6d:
34:ab:1f:29:ce:ef:47:44:38:00:10:85:99:2d:d6:17:f6:a1:
5e:ed:bb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org