Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/mOe-GU4tcg-Eq3Lkwb3lA5TwX4Y.roa
File: mOe-GU4tcg-Eq3Lkwb3lA5TwX4Y.roa (raw, json)
Hash identifier: gv02plKS06qjQQSRb0McLLy5WXWrjIrb5+m6VB8rB/M=
Subject key identifier: 98:E7:BE:19:4E:2D:72:0F:84:AB:72:E4:C1:BD:E5:03:94:F0:5F:86
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0783
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/mOe-GU4tcg-Eq3Lkwb3lA5TwX4Y.roa
Signing time: Tue 29 Sep 2020 09:59:25 +0000
ROA not before: Tue 29 Sep 2020 09:59:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18429
IP address blocks: 27.147.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1923 (0x783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 29 09:59:25 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=98E7BE194E2D720F84AB72E4C1BDE50394F05F86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1d:f7:75:9d:77:c3:45:2d:71:cd:d6:fe:10:
99:85:59:2a:4c:b0:85:3f:3e:20:39:43:95:2a:8c:
2d:f4:18:3e:7e:b7:1f:cc:e1:6a:4a:fc:81:3c:7b:
f8:5d:d4:fb:25:b4:e5:0e:40:8d:bf:b6:82:98:31:
ef:44:9c:9a:c5:de:25:86:cb:3c:21:4a:c1:73:75:
46:bb:81:28:a7:63:72:40:77:33:b1:a5:54:5b:85:
8f:16:b1:52:4d:f7:0d:d5:3a:94:62:18:75:56:5b:
db:a5:31:02:12:12:ac:93:38:77:38:3e:35:2e:ff:
ca:8c:c7:f5:34:20:f3:61:cc:35:6c:d2:69:99:39:
84:db:a2:4f:72:1b:21:99:14:a2:2b:4a:66:86:f3:
c4:0a:5a:90:86:d8:ee:d4:25:b1:dc:b1:83:80:5a:
d0:b0:9b:01:98:00:a0:20:47:db:0d:b6:77:94:78:
45:29:16:d3:a0:2d:17:7d:66:59:4f:07:05:08:6f:
6f:9c:a9:b5:22:75:40:b5:ad:f8:d8:e0:c0:23:ab:
98:03:e1:de:bb:87:68:75:eb:a9:d1:ff:94:03:e9:
2a:52:c1:b4:85:3f:0d:ff:ac:3e:8b:bd:81:7f:c9:
d2:f2:4e:aa:71:44:21:fe:5e:2d:0c:11:86:1c:74:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E7:BE:19:4E:2D:72:0F:84:AB:72:E4:C1:BD:E5:03:94:F0:5F:86
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/mOe-GU4tcg-Eq3Lkwb3lA5TwX4Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.12.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:62:d3:37:02:8a:e4:49:42:d6:7e:e0:8e:29:40:7b:21:e8:
5a:90:07:99:6f:8e:03:71:28:39:9a:db:71:5a:8b:bd:dd:f4:
5e:2e:09:de:e5:95:7d:18:53:ce:bb:6b:4f:df:fe:c1:e7:3e:
41:28:cc:f1:87:ba:39:2e:ba:ed:4a:f0:67:e9:fd:f3:67:f9:
09:30:a0:74:75:6b:cb:18:eb:88:82:93:27:9a:68:82:7a:34:
7d:fc:72:71:3d:ad:e0:a6:af:35:dd:56:ac:5c:39:1d:f3:56:
94:6f:9c:75:f8:40:7c:7b:ec:a4:66:dc:9f:32:56:90:2b:09:
1b:f7:64:30:2a:7a:91:a0:6e:8e:fa:91:76:e3:0a:7a:c0:81:
0c:e5:4f:fc:39:a3:72:4c:44:cc:d1:f5:b2:4b:07:27:c2:f2:
39:ff:9a:dc:9c:27:a0:43:15:d9:69:f8:c7:e9:05:c3:80:19:
e6:00:96:ef:66:c4:be:93:32:bc:73:a0:20:25:7b:f9:95:91:
ec:0e:8d:bd:17:8f:8d:d1:de:83:5f:98:29:73:01:90:ba:b5:
f3:ff:1c:81:37:bf:c9:2c:05:b6:b1:12:df:55:d4:ed:3d:36:
10:44:f9:bb:32:1c:14:61:4d:ca:ed:7e:9b:b5:50:14:ef:ff:
19:e9:f0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org