Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/q3UxtBsfidUwue-B9wxwqNOvvDQ.roa
File: q3UxtBsfidUwue-B9wxwqNOvvDQ.roa (raw, json)
Hash identifier: N5MfunSOeuTYaaJCk7bjA84Y/LAgiu5600NhHi0S8dE=
Subject key identifier: AB:75:31:B4:1B:1F:89:D5:30:B9:EF:81:F7:0C:70:A8:D3:AF:BC:34
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0AEB
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/q3UxtBsfidUwue-B9wxwqNOvvDQ.roa
Signing time: Thu 15 Sep 2022 02:49:26 +0000
ROA not before: Thu 15 Sep 2022 02:49:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 124.155.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2795 (0xaeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 15 02:49:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AB7531B41B1F89D530B9EF81F70C70A8D3AFBC34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:e5:0f:4b:77:3a:f6:04:d9:df:35:28:5f:
28:48:9a:a6:16:97:dc:fc:e6:4b:f6:07:f2:87:8d:
e4:c6:77:59:df:f8:47:e6:e1:3c:b4:9d:77:0f:3f:
ae:d6:70:37:54:8d:19:9a:d5:bc:20:61:c6:92:96:
f9:f2:5a:d9:18:e0:42:9f:e2:ae:38:42:89:b5:42:
95:d3:d9:02:de:97:2c:5e:47:45:cf:a8:ba:b7:ff:
c7:81:bf:fa:b1:17:52:26:dc:d6:8a:41:e2:47:fd:
c7:08:93:ea:97:3b:f2:2a:65:b1:aa:aa:3f:33:fe:
44:16:a5:b7:70:16:22:65:26:fc:ef:e3:65:de:b4:
a7:5d:59:42:ff:bf:17:66:bd:d7:8b:bd:5c:3a:76:
03:6f:77:1f:20:cb:bc:45:d4:d6:87:a4:61:8b:a8:
8b:2b:14:ef:a2:4b:54:29:96:b0:82:7f:22:9e:af:
f6:04:bf:7f:54:26:e3:2d:d5:8a:86:64:1c:af:be:
d1:d1:24:8c:f3:d2:6f:27:db:1b:ee:fd:51:4e:1d:
8b:29:dd:be:2b:1a:28:7a:58:21:09:1a:27:50:62:
7c:b0:36:05:6e:ab:9d:4d:b2:ff:c6:47:7b:61:35:
4d:23:14:56:42:95:3d:27:41:f9:cb:f6:20:c0:00:
7d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:75:31:B4:1B:1F:89:D5:30:B9:EF:81:F7:0C:70:A8:D3:AF:BC:34
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/q3UxtBsfidUwue-B9wxwqNOvvDQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.160.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:27:c7:09:76:99:fe:86:6c:84:62:70:fa:d3:60:e5:f4:ae:
bc:86:0d:6a:06:fe:9b:6a:6e:c3:fe:ce:55:c2:5c:8f:5b:ab:
a2:bc:81:a9:f0:c1:64:9b:28:b1:c6:43:84:18:fb:84:e0:d2:
b6:be:60:f5:d3:13:40:fb:ea:dc:54:e3:40:ea:fb:ea:61:ad:
3b:e5:c2:2d:5c:4b:e1:26:18:e5:f3:a2:57:d7:26:99:35:d9:
1f:fd:be:6b:a9:83:39:ed:93:48:2d:c3:35:6e:70:e7:dc:9b:
0e:dc:b1:c3:0f:c3:9e:9c:c6:6b:4c:2b:ea:4a:f7:71:c2:6f:
10:23:71:db:ba:13:d5:7c:43:cc:81:c7:17:5d:a4:f9:4f:19:
df:7d:32:74:56:7c:14:49:ac:81:d7:51:5b:d7:97:31:be:20:
e9:5e:21:7f:ff:3c:b4:4f:5e:f0:87:3b:04:6e:0d:54:63:c8:
a1:21:bc:d2:72:16:8f:aa:00:b8:0b:02:5a:e9:b2:49:71:a3:
1f:71:ff:52:35:0a:c1:b7:18:32:91:c6:50:b3:4e:9b:59:cd:
6d:3f:75:24:f2:e7:b5:e7:4a:f9:12:41:38:33:37:31:d5:38:
3f:70:db:5d:ef:d2:bc:f0:e6:51:93:5f:53:38:8c:f4:f4:91:
1a:5a:50:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:09 2025 by rpki-client