Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/-o9xM7YYDEsONmoJJOUgP_GXakA.roa
File: -o9xM7YYDEsONmoJJOUgP_GXakA.roa (raw, json)
Hash identifier: jMPe5PDtsZCg4GLOBEqG2caxlPaasgPUc/1I2xlS3yI=
Subject key identifier: FA:8F:71:33:B6:18:0C:4B:0E:36:6A:09:24:E5:20:3F:F1:97:6A:40
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 09FF
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/-o9xM7YYDEsONmoJJOUgP_GXakA.roa
Signing time: Tue 02 Nov 2021 06:35:33 +0000
ROA not before: Tue 02 Nov 2021 06:35:33 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18429
IP address blocks: 124.155.168.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2559 (0x9ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Nov 2 06:35:33 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FA8F7133B6180C4B0E366A0924E5203FF1976A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:52:c4:60:d0:cb:ee:8d:02:93:12:c6:9f:1e:
cc:8e:ac:5a:22:d1:76:56:99:57:43:ce:8f:59:fa:
aa:35:ce:0f:be:82:75:46:65:3f:7f:8f:87:74:fb:
eb:f0:5a:20:53:7b:aa:5f:af:d1:e5:41:30:ae:36:
29:03:0e:e6:4c:32:f1:77:e2:77:6d:23:85:5d:b1:
df:ce:85:15:fa:3a:f1:6e:58:b3:1b:4d:8e:ae:c5:
06:1f:a7:1f:f9:62:9f:00:2a:59:88:10:fe:4d:f7:
38:d8:f7:8a:0c:3c:2a:5e:78:d8:34:df:ed:58:48:
b2:aa:ba:d3:29:f6:85:0b:97:2b:65:a7:05:87:3d:
53:51:ea:05:c7:3b:ef:57:0c:ed:9d:b1:23:2f:e8:
fc:30:26:8d:e0:bc:4f:62:f2:93:74:26:34:b7:44:
85:17:96:6a:c4:16:4a:32:2c:d6:87:0a:d2:ed:12:
ba:b9:4f:c8:d6:c6:99:a0:6d:18:c1:e4:00:b4:8e:
6f:82:3a:51:16:a3:f4:da:ca:95:43:17:e0:91:7e:
f3:06:e5:9f:6f:9c:2e:57:48:72:34:1e:7f:65:48:
40:99:91:83:66:10:18:c1:de:00:e0:01:91:45:a9:
2b:8d:5f:3e:f6:92:72:8d:b6:6b:b8:7a:22:13:94:
68:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8F:71:33:B6:18:0C:4B:0E:36:6A:09:24:E5:20:3F:F1:97:6A:40
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/-o9xM7YYDEsONmoJJOUgP_GXakA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.168.0/23
Signature Algorithm: sha256WithRSAEncryption
19:dc:d8:6d:39:63:17:c7:03:48:c2:92:03:04:d5:58:9e:4a:
fd:bd:9f:88:8d:ff:6e:a4:22:05:63:f1:16:70:a0:7f:09:a9:
c5:9e:11:cb:11:79:37:d5:4e:0f:93:92:43:95:94:94:44:70:
d6:b0:fa:1b:1d:ee:57:7b:0a:da:40:bd:a4:f3:28:0d:5a:79:
3e:0d:6e:57:7b:7e:8b:0c:8e:4c:04:1e:f5:59:53:68:5e:8c:
97:11:f8:02:2e:5e:88:81:ef:ec:46:26:44:81:1f:40:58:44:
8d:b2:72:26:38:97:f3:c0:d3:8e:fd:a5:3a:34:f6:7e:a9:54:
a9:84:86:47:c1:d6:bb:98:9c:f4:f6:8a:61:ba:23:86:7a:dc:
07:98:b1:42:51:df:35:e4:82:1e:f1:a1:aa:60:da:74:07:75:
66:36:48:39:53:d3:d9:e1:4f:55:86:aa:f4:8d:48:b3:19:03:
e4:2b:29:64:36:3e:b5:82:c9:41:e0:8d:97:03:c2:bb:71:24:
2a:1b:22:1d:16:7f:77:4c:18:7e:7e:1c:4d:31:75:d6:9b:2d:
c5:33:88:00:2d:66:c6:27:a9:f3:93:c4:e4:62:a4:84:ae:16:
12:cc:ab:0a:59:57:95:9c:c9:67:cd:ad:9e:e2:10:76:73:67:
63:85:c7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org