Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/tCJrcix1WbznXJvmi1WoZ_mBzIU.roa
File: tCJrcix1WbznXJvmi1WoZ_mBzIU.roa (raw, json)
Hash identifier: RbGgubUF8fJv7SB03sOmdgpYwwBemUjV/rHR75VhVEw=
Subject key identifier: B4:22:6B:72:2C:75:59:BC:E7:5C:9B:E6:8B:55:A8:67:F9:81:CC:85
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 09E0
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/tCJrcix1WbznXJvmi1WoZ_mBzIU.roa
Signing time: Wed 29 Sep 2021 02:52:05 +0000
ROA not before: Wed 29 Sep 2021 02:52:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18429
IP address blocks: 123.50.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2528 (0x9e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 29 02:52:05 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B4226B722C7559BCE75C9BE68B55A867F981CC85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:c0:4c:a4:96:72:19:fc:3f:2a:20:45:aa:
92:ad:95:02:44:2e:d5:b3:7c:6f:b1:fd:30:8c:57:
c0:01:36:b6:33:5c:a1:c4:9e:ff:d3:f0:22:97:b5:
47:1b:b9:a6:ec:41:62:a5:57:d4:a1:fe:e2:90:be:
db:2c:87:ff:d8:4b:d6:8f:9a:37:9c:8f:4c:50:33:
53:de:8d:1f:42:22:74:f3:64:c7:83:7f:03:32:5e:
45:b1:d0:73:ce:53:8f:9b:19:71:57:8e:99:59:36:
58:06:f0:77:42:f9:f6:48:dc:8e:25:4d:88:19:3c:
49:09:5c:43:8e:c8:07:9a:b2:b3:d0:59:37:ba:56:
ad:c8:50:e7:80:08:12:0a:4b:ec:f8:f6:b3:32:e6:
63:8a:53:87:91:98:75:33:a6:0a:ec:38:67:ab:e3:
4c:85:35:1c:58:b6:d9:96:cc:52:5b:f7:81:c6:fe:
3e:7b:7a:c6:02:a1:93:34:d5:96:14:7c:2e:cd:e7:
d4:12:a7:a4:00:11:cb:8f:cc:02:92:49:ce:dd:20:
66:a1:40:ec:ae:30:ab:36:27:7a:b0:13:33:7e:0e:
28:48:0f:5f:f7:2e:c2:50:e1:5e:94:a6:a7:d7:13:
a3:7a:b3:3d:bd:2d:df:c0:bb:28:22:93:06:2f:23:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:22:6B:72:2C:75:59:BC:E7:5C:9B:E6:8B:55:A8:67:F9:81:CC:85
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/tCJrcix1WbznXJvmi1WoZ_mBzIU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.50.61.0/24
Signature Algorithm: sha256WithRSAEncryption
23:cd:50:bf:18:8e:2e:35:ed:c5:7d:8b:f6:6c:c4:9f:5f:20:
d3:8c:0f:23:44:19:13:d2:5d:0e:4f:6a:65:cd:03:a8:02:ff:
79:04:0f:c9:d6:80:cf:16:d2:da:ef:f5:5c:1c:e0:a6:10:61:
fe:7a:4a:26:ab:60:ba:4f:33:70:60:79:07:a8:8d:9f:8c:56:
29:02:34:2b:10:62:27:46:78:4f:63:27:89:7c:40:f6:0b:19:
fe:65:12:1f:96:e2:6b:1c:93:2c:85:5b:48:46:0c:f9:51:c3:
eb:5b:3c:46:41:a6:96:bf:fb:d1:0e:5a:76:d2:38:f9:c6:01:
19:d1:af:ce:bb:94:05:b5:ca:74:64:ce:9d:13:d4:e1:f5:90:
86:f3:b9:04:4b:d2:e2:b6:d4:b9:9b:f2:02:ad:eb:51:05:ac:
7b:ae:15:60:04:c9:3a:c3:d7:d8:a8:f6:63:dc:4c:27:d5:9c:
09:7e:d2:9d:8d:aa:2f:96:e3:4e:45:ab:47:3d:04:d4:71:9e:
0f:b0:6e:c2:f4:38:1e:21:e4:1f:29:f1:b5:bc:c4:ce:01:4f:
70:d6:b4:c5:c8:8d:6c:c9:ff:8d:23:81:4d:13:24:28:1f:3f:
35:02:4e:07:e0:97:5f:42:9f:b4:fa:3d:aa:a5:a0:8b:0a:31:
e0:a8:2b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org