Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/KgxK8MobaRd4UMQIFbfEi4GKv94.roa
File: KgxK8MobaRd4UMQIFbfEi4GKv94.roa (raw, json)
Hash identifier: +bPoKcjnplhpjEn8QLy5sv4OEscwIrW7XBHpyfN5Y14=
Subject key identifier: 2A:0C:4A:F0:CA:1B:69:17:78:50:C4:08:15:B7:C4:8B:81:8A:BF:DE
Certificate issuer: /CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9
Certificate serial: 0BFD
Authority key identifier: 1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/KgxK8MobaRd4UMQIFbfEi4GKv94.roa
Signing time: Mon 26 Aug 2024 05:32:29 +0000
ROA not before: Mon 26 Aug 2024 05:32:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18185
IP address blocks: 211.76.240.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3069 (0xbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9
Validity
Not Before: Aug 26 05:32:29 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2A0C4AF0CA1B69177850C40815B7C48B818ABFDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:49:a4:33:bb:57:e0:42:7c:15:4f:fd:50:
68:50:25:e8:cd:93:d0:74:0a:05:c4:c9:f4:b5:a6:
58:37:ba:91:bd:73:37:0f:18:f2:f7:71:a5:83:c1:
4f:fc:fe:22:f9:e0:08:4c:98:29:77:c0:5f:cf:ee:
00:36:85:8d:38:c8:83:cb:ba:2d:b9:7d:22:3f:a1:
e8:17:1a:67:68:30:61:c6:02:fb:84:00:d9:6a:ec:
99:6e:eb:b4:c4:04:82:22:a4:d4:45:8a:47:15:79:
70:d0:2f:28:75:80:06:32:34:33:9d:7d:c2:66:33:
8d:93:4b:da:20:42:7c:bc:e5:bb:6b:db:d5:14:b8:
a4:26:2a:d4:7b:77:a9:c2:2e:c0:ff:c5:83:c7:57:
a9:63:fa:bb:ee:e0:b0:eb:1a:b7:7f:74:06:a4:2f:
37:b3:c6:dd:70:ee:82:3d:58:40:c5:b9:f7:4f:39:
ee:db:da:57:a5:34:e1:ce:2e:32:20:26:b7:eb:54:
61:28:fb:f2:67:28:c9:58:74:2e:44:2e:9d:c2:75:
ae:f9:a1:00:af:2f:56:68:16:98:6b:65:fb:8b:a6:
c3:78:a0:9b:12:cc:82:73:26:dd:ba:9f:3b:40:6f:
62:82:59:41:01:e7:3c:e3:90:84:71:82:57:18:6a:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0C:4A:F0:CA:1B:69:17:78:50:C4:08:15:B7:C4:8B:81:8A:BF:DE
X509v3 Authority Key Identifier:
keyid:1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/KgxK8MobaRd4UMQIFbfEi4GKv94.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:34:a0:40:2d:73:17:3d:8c:24:f4:03:be:37:ce:79:c5:b0:
fc:d7:6f:40:f8:61:6a:89:23:ef:7d:ae:0b:96:99:81:ea:1a:
2a:b5:c5:39:38:3f:03:e7:47:52:f1:b3:cc:44:13:6d:6f:23:
32:26:08:19:4e:83:0a:ae:d5:4f:4c:94:24:9f:7b:6e:ee:b9:
2d:28:64:ce:76:3c:89:c4:20:2c:d0:12:29:b9:44:0c:a6:f4:
84:18:63:d6:45:f6:21:99:0d:3e:8d:a6:31:34:9b:42:a9:d0:
df:e1:48:8f:8a:09:ca:33:ac:d0:e0:ca:47:d5:b0:78:59:6d:
67:fd:9a:c9:2f:33:0a:76:d0:84:fb:a8:3a:01:bb:2c:4c:5f:
a0:65:70:a4:91:96:81:4b:e1:82:fc:48:db:8c:0d:a8:5e:e2:
73:b7:62:f4:87:d5:96:12:2a:53:6c:83:37:e4:4e:c7:79:0f:
28:9c:b4:a1:b3:e7:9d:a4:c6:6f:31:14:43:7e:4c:ca:fc:ee:
88:5a:1b:3e:b0:f4:34:5d:29:c3:bc:03:c4:ec:c2:50:61:69:
66:f2:9d:dc:3f:15:44:bc:e3:8b:af:b3:80:d5:62:48:cf:65:
e7:87:68:89:0b:14:24:f6:b7:e5:66:43:28:53:4d:95:e3:22:
52:c8:b0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:17 2025 by rpki-client