Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/yRXHC3ENJ7YMOwKwE2CGGPMT6GY.roa
File: yRXHC3ENJ7YMOwKwE2CGGPMT6GY.roa (raw, json)
Hash identifier: Nidnorvve6JLY8s6eA34S8lnHyKF/d1tz9kbcnJrwM8=
Subject key identifier: C9:15:C7:0B:71:0D:27:B6:0C:3B:02:B0:13:60:86:18:F3:13:E8:66
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0B44
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/yRXHC3ENJ7YMOwKwE2CGGPMT6GY.roa
Signing time: Thu 15 Dec 2022 02:56:54 +0000
ROA not before: Thu 15 Dec 2022 02:56:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 124.155.172.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2884 (0xb44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Dec 15 02:56:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C915C70B710D27B60C3B02B013608618F313E866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3e:a8:9f:aa:c1:28:1c:b2:a2:46:04:14:26:
dc:05:df:b1:94:32:ea:97:bd:ab:a1:6f:33:b6:18:
f1:4d:e9:b4:1d:e7:81:fd:e7:7a:8d:8f:2b:df:e7:
f6:1b:c2:f5:0b:5e:88:ef:e4:45:d2:55:24:e6:e3:
bc:13:00:78:66:60:11:91:d9:04:72:88:cf:bb:ec:
94:c7:d4:d3:dc:26:88:ef:4c:6c:cc:fb:84:f8:2d:
88:92:92:77:2c:23:c9:2c:07:1a:99:df:0d:38:f8:
3e:bf:66:00:7d:12:93:a0:0b:c4:49:1e:1b:43:08:
19:1b:25:0e:65:56:6f:de:ae:84:08:a0:01:5a:29:
21:18:53:62:3c:36:6c:c9:11:95:7b:dd:de:35:a9:
d6:49:8c:4b:a4:e6:b2:5e:f8:ae:5e:34:26:f0:ce:
50:87:47:d7:f2:c0:0d:a0:a6:2c:5e:b1:a6:93:51:
b3:3d:81:05:c1:b8:7a:26:89:d6:c5:5e:1d:fb:c9:
23:22:23:1d:67:be:43:8b:73:60:64:50:0d:1d:3e:
49:79:68:d6:09:93:3a:4b:53:14:86:a9:94:16:33:
51:11:2a:be:2c:0f:c4:bc:68:be:ab:e1:b2:a6:e0:
91:e0:6c:2d:15:47:de:c2:0d:9b:07:01:3a:b7:3c:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:15:C7:0B:71:0D:27:B6:0C:3B:02:B0:13:60:86:18:F3:13:E8:66
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/yRXHC3ENJ7YMOwKwE2CGGPMT6GY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.172.0/23
Signature Algorithm: sha256WithRSAEncryption
98:8e:68:50:32:f9:53:5b:96:aa:19:7e:72:bf:52:d2:8c:e4:
51:c0:83:d3:c8:a1:23:e4:5f:87:76:26:2c:ec:20:8e:7f:f7:
26:0e:c7:36:ce:de:2a:2f:97:ee:1a:e8:31:88:37:8e:73:db:
cc:d6:6f:59:64:eb:31:b8:9b:ae:73:7e:f1:0a:87:ab:8e:92:
42:47:1d:d3:f0:7b:bb:69:ca:0c:1a:f3:76:16:1c:2c:aa:c4:
bd:cc:85:f2:e1:71:c4:2a:c7:0e:f8:43:d9:00:80:e1:a8:10:
0a:9c:58:50:2e:d5:ab:fa:24:eb:de:1e:4b:dd:3b:e0:69:40:
e6:16:a4:ba:e4:e6:a5:26:61:72:f3:67:f3:ec:c6:b4:ee:1e:
be:32:2b:38:58:c5:ab:23:af:34:60:5b:28:6e:bd:e4:ba:89:
e3:57:9b:ec:6f:e8:d7:87:8f:14:76:46:fb:60:9b:17:3e:2a:
7a:a6:21:47:8c:27:46:9f:2f:bb:51:2e:29:c6:b0:58:94:82:
2d:81:41:6e:51:42:50:16:7b:ed:1c:9d:31:71:12:d1:9a:13:
17:bf:29:81:c8:0b:c6:59:9f:9b:17:ed:34:b6:cc:e7:39:0f:
69:25:d2:0d:63:2c:10:c8:3e:0d:3a:1a:94:d5:ac:91:9d:6a:
ff:60:b3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:11 2025 by rpki-client