Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/mqy1Ld38NYvw_t2Fz110DYRcSLw.roa
File: mqy1Ld38NYvw_t2Fz110DYRcSLw.roa (raw, json)
Hash identifier: XgMmLk6R3fAQ/SuUm4SeVyMyyMigvCmdGBJRFZq4nE4=
Subject key identifier: 9A:AC:B5:2D:DD:FC:35:8B:F0:FE:DD:85:CF:5D:74:0D:84:5C:48:BC
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0903
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/mqy1Ld38NYvw_t2Fz110DYRcSLw.roa
Signing time: Sun 07 Feb 2021 12:45:05 +0000
ROA not before: Sun 07 Feb 2021 12:45:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18429
IP address blocks: 27.147.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2307 (0x903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Feb 7 12:45:05 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9AACB52DDDFC358BF0FEDD85CF5D740D845C48BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:de:5d:a2:97:43:5f:a0:28:b5:e0:a7:4b:
84:2e:79:db:9c:70:26:05:8b:a8:2b:29:dd:07:50:
8a:5d:28:23:76:9d:b1:2d:bc:9f:d3:04:79:71:6e:
fc:b4:83:0b:36:d0:db:fc:60:98:97:28:f8:21:cc:
64:b8:4c:d8:01:94:b2:ee:84:df:1d:39:70:7e:82:
ba:67:12:4b:cb:5f:fe:51:df:dc:3f:dc:21:ee:fd:
16:e5:6e:50:ef:ed:a3:56:82:d1:08:7e:a1:31:bd:
3e:bd:34:9a:76:cd:0b:84:15:b9:88:6d:1b:2c:e4:
e1:39:7e:1a:61:f5:cd:57:3b:a0:33:10:ea:f4:92:
79:a2:25:4f:88:2d:c4:5b:e3:a3:fa:ec:c5:fa:03:
c9:8c:92:22:d8:8d:45:db:e4:1c:17:70:c1:59:e9:
73:7f:f8:dc:19:fe:91:a0:7b:00:f3:14:86:d5:87:
8d:75:11:43:c7:f7:b3:09:dd:2a:b2:34:ce:9e:02:
1c:03:33:ec:f6:6a:04:c3:02:2e:55:42:8b:dd:04:
c2:eb:b7:11:2e:f9:8d:9d:93:ec:48:48:7b:7c:84:
94:05:00:c1:f7:71:35:01:3e:db:1c:fb:a2:0e:f8:
68:71:18:67:a9:1d:27:e4:a9:87:dc:c8:c0:9a:b7:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AC:B5:2D:DD:FC:35:8B:F0:FE:DD:85:CF:5D:74:0D:84:5C:48:BC
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/mqy1Ld38NYvw_t2Fz110DYRcSLw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:39:18:52:17:34:bc:c2:7e:c7:e2:48:3e:c9:c9:93:dc:ac:
d1:11:6e:c9:17:ac:0e:06:32:72:eb:c8:d7:eb:b9:a2:e4:a9:
2d:93:82:ce:c0:6f:36:d6:a6:07:04:ba:76:59:e4:53:27:e3:
61:b9:31:a9:b3:58:93:55:cb:67:f1:9e:be:27:b2:c4:70:b9:
eb:bb:79:9b:b5:48:1b:89:8c:df:8a:5c:ae:91:01:7d:58:2f:
ed:e9:34:4e:6f:c4:d7:39:34:30:32:78:b7:c9:20:b7:d9:cc:
b5:54:e0:38:a4:cf:7e:1b:e5:0b:55:88:54:b1:3b:8a:9a:69:
2d:08:f0:33:84:cd:e5:11:9b:21:72:cb:e8:67:07:44:79:1f:
a2:82:0d:98:1f:c0:18:69:9d:2e:25:8e:f7:a5:ef:df:1f:1b:
db:57:db:a9:1b:67:0e:a1:ce:5c:a0:d1:64:4a:b9:a2:bf:fd:
f6:9f:c9:0e:de:f0:20:d7:8d:94:d9:6e:c8:a6:f2:bf:59:83:
55:03:3d:3d:9f:f9:bb:7e:3d:55:7d:52:2e:4b:ed:24:2e:b0:
70:ef:b8:5f:68:51:88:6f:d8:3f:4b:ea:24:ff:e0:ad:f7:85:
3f:90:2e:f0:db:e0:cc:fb:94:2b:54:38:39:32:c5:0d:d1:45:
db:9c:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org