Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/D76Hq_ApmlZyadzqIMR7os1saLU.roa
File: D76Hq_ApmlZyadzqIMR7os1saLU.roa (raw, json)
Hash identifier: meupH37zjn3h8UzQUzxlfhVcoc+/Bugx4GBgUOd8brA=
Subject key identifier: 0F:BE:87:AB:F0:29:9A:56:72:69:DC:EA:20:C4:7B:A2:CD:6C:68:B5
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0795
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/D76Hq_ApmlZyadzqIMR7os1saLU.roa
Signing time: Tue 29 Sep 2020 09:59:29 +0000
ROA not before: Tue 29 Sep 2020 09:59:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18429
IP address blocks: 123.50.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1941 (0x795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 29 09:59:29 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0FBE87ABF0299A567269DCEA20C47BA2CD6C68B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:f8:cd:01:9e:03:d4:3e:f5:1a:1d:ec:75:
d7:a1:91:57:fe:69:45:e0:e1:cd:aa:86:80:ca:eb:
b0:8c:81:15:c8:70:73:1b:fd:6f:f9:c2:8b:a8:41:
01:80:41:81:5b:f7:3b:bc:f7:fd:c7:0b:c5:19:2f:
80:b1:d5:8b:cf:c0:61:29:8d:4d:ec:55:ab:52:fc:
3a:6f:c4:46:bb:dc:ef:9d:bc:6a:de:c2:b4:1e:ca:
e9:5b:d9:18:d7:94:86:43:61:f1:52:d2:86:d1:0a:
05:78:27:33:ec:e9:df:67:7a:42:10:4f:cb:8d:c1:
77:1d:79:78:2f:56:b3:dd:45:64:5d:ef:95:26:8a:
64:1f:4d:4a:ca:ed:eb:36:b4:77:bb:02:88:ee:22:
8b:64:00:ca:67:83:34:54:7e:c6:35:89:b2:37:00:
74:c1:43:6f:15:50:07:a5:d0:38:a2:57:ba:c1:2d:
7e:30:5d:aa:cb:32:45:a5:f3:3a:4d:93:29:38:e8:
ee:3c:3d:0c:18:bb:a1:d9:79:75:f2:19:1c:6d:ee:
69:0f:d7:ec:75:ac:d3:38:25:29:8c:a9:b1:05:a1:
ab:de:83:60:9f:55:99:b1:6d:22:55:67:0e:e2:05:
f4:97:1d:78:64:81:1c:20:b6:d4:d8:5d:56:c6:1c:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BE:87:AB:F0:29:9A:56:72:69:DC:EA:20:C4:7B:A2:CD:6C:68:B5
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/D76Hq_ApmlZyadzqIMR7os1saLU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.50.48.0/21
Signature Algorithm: sha256WithRSAEncryption
87:3d:73:b4:d2:2d:34:b1:b3:ea:41:ed:ef:56:3e:d7:a3:fc:
f6:3a:40:c8:52:67:9d:d2:36:87:b2:4f:8e:2e:fe:90:c3:ac:
2e:16:74:3e:ed:cb:58:38:7d:a6:01:12:a6:fc:03:df:19:8f:
a8:0f:2c:f3:e4:35:01:b4:03:62:b4:07:6f:99:ce:02:43:ec:
71:a8:96:ba:5f:97:df:77:f2:6d:cb:fd:1d:2a:0b:31:b0:fa:
15:88:16:29:79:6d:05:e8:17:66:ea:4f:c6:9d:1d:eb:ad:b3:
63:e7:cd:f2:d7:7c:ce:61:cf:19:4b:3d:04:35:91:5e:49:e5:
fc:89:ef:1f:a4:74:68:d3:b9:64:f7:5a:d8:b3:dd:69:09:b6:
0d:a7:d6:10:aa:64:d2:9d:c0:ad:70:46:f6:bb:47:66:7b:05:
36:25:bc:93:bf:a7:1e:fe:f4:40:5d:99:68:d9:eb:20:0a:fc:
57:1a:ae:dc:18:ab:8a:1b:d8:81:c6:da:25:bb:27:70:e9:cd:
33:b0:3a:71:36:b1:ec:08:c2:4f:df:f7:9e:e5:72:34:a9:a0:
cd:da:f7:c4:b7:4c:7e:9b:85:59:33:79:38:14:4a:d7:cb:e2:
81:e8:99:d8:9f:13:cd:e1:6b:d4:24:5f:44:6e:0f:9e:f2:01:
e2:a5:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org