Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/wqZbJDdG5lEJX_QfV3U97ZRoGWI.roa
File: wqZbJDdG5lEJX_QfV3U97ZRoGWI.roa (raw, json)
Hash identifier: wdEuXof9Ad6RuanbbsOKi3wABUiP7APDhk3sMhVWfWs=
Subject key identifier: C2:A6:5B:24:37:46:E6:51:09:5F:F4:1F:57:75:3D:ED:94:68:19:62
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0B31
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/wqZbJDdG5lEJX_QfV3U97ZRoGWI.roa
Signing time: Thu 15 Dec 2022 02:13:28 +0000
ROA not before: Thu 15 Dec 2022 02:13:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 123.50.40.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2865 (0xb31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Dec 15 02:13:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C2A65B243746E651095FF41F57753DED94681962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:8b:1a:f0:26:a1:79:17:c2:3f:17:4e:a8:
ba:f0:45:8d:1a:4c:f1:1a:ba:0d:87:4a:df:67:4f:
b6:34:d5:0a:8f:09:02:8d:fd:b9:a1:c4:af:ae:54:
dd:4e:a3:6f:99:c7:df:9b:f0:57:95:81:25:01:b6:
a7:4a:60:12:a9:6f:7c:2a:5e:fb:79:e6:b2:6b:91:
1b:e6:87:f1:13:29:0b:f4:3f:2c:67:80:10:ad:cd:
4e:89:4d:0c:ef:82:a3:97:71:55:2a:b7:17:5b:0c:
e2:e9:cf:60:b7:72:14:e3:b7:ee:c4:d4:33:d9:63:
78:3c:1a:51:e5:6b:47:06:23:e8:c5:d7:32:3e:01:
3a:f0:8e:9c:a9:e8:86:5c:48:f9:b8:1b:48:db:6f:
49:04:45:9d:89:a1:57:51:2d:84:37:c2:18:89:d9:
e1:ac:7e:7b:e4:d3:65:32:03:af:fa:5b:25:f2:b1:
2f:e7:8b:f1:11:80:0a:18:2c:b2:c3:d7:11:47:ab:
be:01:d6:47:b3:e0:16:e7:bb:2e:f4:d6:55:11:fe:
24:67:b7:02:e4:00:6b:31:6d:21:fd:53:95:7a:07:
4e:6a:f3:de:b7:bd:ed:5c:9d:e4:43:6d:bb:72:26:
2f:d8:bb:6d:a7:f9:45:1e:ad:2d:33:0c:ab:a8:dd:
c5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A6:5B:24:37:46:E6:51:09:5F:F4:1F:57:75:3D:ED:94:68:19:62
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/wqZbJDdG5lEJX_QfV3U97ZRoGWI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.50.40.0/21
Signature Algorithm: sha256WithRSAEncryption
43:25:c6:49:28:56:78:fe:75:64:b5:5e:d0:22:8b:d2:c1:74:
71:ac:e3:60:f7:be:99:bd:b7:ea:fa:e3:83:18:67:af:94:8c:
6c:30:f9:d8:dd:a7:88:25:e2:f4:e5:c4:22:43:0b:5f:c5:b3:
12:72:d7:2a:35:b3:b5:d5:ba:b5:ca:5b:c8:a5:36:3c:e8:35:
af:6e:23:4f:42:d0:1b:1d:62:06:d8:21:0a:d8:1a:ec:ec:4d:
41:d2:04:4f:f8:97:12:36:be:23:87:7b:f3:c7:b5:d9:89:50:
94:30:34:82:fb:28:19:43:d5:e4:9d:b5:de:26:a8:ad:37:84:
fe:64:a5:66:31:ac:a6:e1:8a:40:07:ae:29:51:7a:98:ea:42:
7f:8a:d7:50:82:0b:4d:d4:c4:43:e9:97:a7:d1:f1:08:ce:a5:
0d:7f:0e:8f:ba:8d:a9:e3:57:63:29:24:39:20:a6:34:b6:67:
0d:0b:33:11:39:5d:19:34:65:d8:50:8a:a1:2b:7d:fb:18:cd:
a0:ee:a2:d8:6f:da:c4:8f:6a:e1:bc:14:ac:1b:52:81:7b:24:
c7:af:92:b8:45:34:01:7d:3b:1b:8f:ef:2f:cb:b0:f6:7e:95:
c2:9a:8f:99:82:86:a8:21:ca:08:e7:26:e6:56:31:f4:4b:65:
96:f7:8f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:31 2025 by rpki-client