Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/ygywCchBrRSo6_dZWW6Q655i_ks.roa
File: ygywCchBrRSo6_dZWW6Q655i_ks.roa (raw, json)
Hash identifier: nsExjkFA2exqBanUftH5HDKxYzcrlqnXn3KtvMCdUlM=
Subject key identifier: CA:0C:B0:09:C8:41:AD:14:A8:EB:F7:59:59:6E:90:EB:9E:62:FE:4B
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0B41
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ygywCchBrRSo6_dZWW6Q655i_ks.roa
Signing time: Thu 15 Dec 2022 02:56:53 +0000
ROA not before: Thu 15 Dec 2022 02:56:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 27.147.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2881 (0xb41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Dec 15 02:56:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CA0CB009C841AD14A8EBF759596E90EB9E62FE4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:0c:29:48:c9:35:8e:2c:12:ac:20:8e:5d:
ef:18:71:87:48:ba:0c:a9:8f:a4:eb:17:45:08:2f:
d8:ff:fb:47:c3:ec:48:cb:09:eb:e7:41:8c:ad:00:
e2:98:9b:77:11:0b:bb:cf:ca:6b:13:fd:48:6b:92:
0e:f4:02:ec:8d:e7:45:a3:8e:e2:a0:64:36:90:d6:
2f:74:97:a1:d5:8c:9f:eb:0b:b4:90:1d:96:40:94:
5e:bc:56:a6:1e:97:3b:56:d2:a7:61:16:f5:29:33:
1e:83:2c:e0:48:10:10:3e:8e:68:92:e8:29:41:7d:
03:5e:d6:b7:6a:c4:e1:d3:ce:9d:cd:51:af:a9:28:
09:ad:0c:d7:de:b9:33:07:99:d9:f7:e8:25:54:05:
07:bd:28:e1:af:2f:e1:04:52:b9:dc:10:4c:33:cd:
5c:3c:4f:63:2e:9f:2b:c3:15:be:22:f0:67:d4:5b:
1a:18:83:94:5d:73:73:57:f9:f7:c4:1b:1b:fb:a0:
72:37:fd:ae:36:ff:c0:f1:7e:f9:d7:83:d2:f5:1a:
1d:b0:73:c5:7a:c7:43:67:eb:cf:a4:d3:0b:89:89:
1c:60:1e:f5:53:78:14:13:1b:f5:9b:8f:4b:e6:ba:
c4:95:64:d9:3d:cf:5f:e9:0b:2a:03:c1:9b:c8:56:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0C:B0:09:C8:41:AD:14:A8:EB:F7:59:59:6E:90:EB:9E:62:FE:4B
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ygywCchBrRSo6_dZWW6Q655i_ks.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
84:73:97:3f:d7:41:f1:80:3e:c2:ba:a1:6b:2d:40:ba:81:4b:
1f:8e:ba:90:5d:bc:fb:8a:a6:93:db:b8:ef:b2:00:61:5d:c8:
24:7e:38:3d:7e:d0:d9:ef:d3:51:df:9b:7a:f8:90:50:6b:3d:
a0:6f:3a:19:56:84:8c:e4:96:e5:87:de:76:46:b6:c3:cf:c6:
fb:e4:b9:19:f2:99:07:e1:bf:84:c6:84:c7:74:dd:81:bf:0d:
91:2e:97:9a:70:14:de:43:15:75:cc:7b:f5:cc:b5:77:ea:8e:
04:ee:2e:c8:85:d7:d3:ef:c8:50:13:c4:ac:fb:47:cf:ea:72:
4f:39:32:c4:8f:59:0a:f2:1c:a6:63:f0:e8:d5:4c:6e:5a:51:
b9:5c:3e:92:21:8f:63:3f:93:20:4c:80:0a:60:0c:97:53:44:
56:ab:da:4f:8e:b3:78:d8:ae:4f:01:df:2f:ab:9e:40:aa:2e:
83:b3:63:ab:7c:a0:e2:0d:25:5a:84:32:75:91:c6:c8:11:13:
c8:6a:4c:e7:12:cb:6a:e6:23:5a:81:28:d2:3c:8c:55:76:a1:
66:cd:3e:93:59:b6:91:2a:75:db:65:3e:12:9d:ae:f3:1a:18:
2f:8a:01:8e:9b:ef:eb:f6:94:a6:e8:71:e1:48:1b:cc:de:3e:
30:6b:1e:e2
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMjEyMTUw
MjU2NTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKENBMENCMDA5Qzg0MUFE
MTRBOEVCRjc1OTU5NkU5MEVCOUU2MkZFNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvaQwpSMk1jiwSrCCOXe8YcYdIugypj6TrF0UIL9j/+0fD7EjL
CevnQYytAOKYm3cRC7vPymsT/Uhrkg70AuyN50WjjuKgZDaQ1i90l6HVjJ/rC7SQ
HZZAlF68VqYelztW0qdhFvUpMx6DLOBIEBA+jmiS6ClBfQNe1rdqxOHTzp3NUa+p
KAmtDNfeuTMHmdn36CVUBQe9KOGvL+EEUrncEEwzzVw8T2MunyvDFb4i8GfUWxoY
g5Rdc3NX+ffEGxv7oHI3/a42/8DxfvnXg9L1Gh2wc8V6x0Nn68+k0wuJiRxgHvVT
eBQTG/Wbj0vmusSVZNk9z1/pCyoDwZvIVs2XAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUygywCchBrRSo6/dZWW6Q655i/kswHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC95Z3l3Q2NoQnJSU282X2RaV1c2
UTY1NWlfa3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAG5M9
MA0GCSqGSIb3DQEBCwUAA4IBAQCEc5c/10HxgD7CuqFrLUC6gUsfjrqQXbz7iqaT
27jvsgBhXcgkfjg9ftDZ79NR35t6+JBQaz2gbzoZVoSM5Jblh952RrbDz8b75LkZ
8pkH4b+ExoTHdN2Bvw2RLpeacBTeQxV1zHv1zLV36o4E7i7IhdfT78hQE8Ss+0fP
6nJPOTLEj1kK8hymY/Do1UxuWlG5XD6SIY9jP5MgTIAKYAyXU0RWq9pPjrN42K5P
Ad8vq55Aqi6Ds2OrfKDiDSVahDJ1kcbIERPIakznEstq5iNagSjSPIxVdqFmzT6T
WbaRKnXbZT4Sna7zGhgvigGOm+/r9pSm6HHhSBvM3j4wax7i
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:41 2025 by rpki-client