Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/LJ2l_4Oi0vYsq1ngtqD3gACcxhI.roa
File: LJ2l_4Oi0vYsq1ngtqD3gACcxhI.roa (raw, json)
Hash identifier: 9mpc/z3oOmW1E60lqmgVIUYAOU6ZYqrJFwtb+kXocdg=
Subject key identifier: 2C:9D:A5:FF:83:A2:D2:F6:2C:AB:59:E0:B6:A0:F7:80:00:9C:C6:12
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0B5B
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/LJ2l_4Oi0vYsq1ngtqD3gACcxhI.roa
Signing time: Thu 15 Dec 2022 02:57:02 +0000
ROA not before: Thu 15 Dec 2022 02:57:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 124.155.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2907 (0xb5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Dec 15 02:57:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2C9DA5FF83A2D2F62CAB59E0B6A0F780009CC612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:7a:7a:5c:ce:e2:61:5d:0a:7a:d0:e6:a1:
71:72:30:ff:20:dc:5e:fb:91:17:6c:2b:f0:60:e9:
71:f2:f7:05:7a:94:08:97:d3:06:2e:73:0d:89:b0:
76:e5:b1:7a:52:a3:2b:f3:5c:89:c6:72:24:48:2a:
d6:68:a3:3a:ac:b9:20:61:8a:05:06:88:46:bf:02:
1b:4f:d7:d5:d3:8c:00:83:25:5e:84:1e:6e:f2:be:
bf:a3:e4:38:6f:7d:b1:a5:80:3d:fa:54:89:ac:57:
cf:e8:6d:ea:a0:c2:1d:5a:27:ee:b4:41:d2:4c:7e:
f8:56:31:3b:7a:1f:c6:de:c6:47:e7:bb:de:c5:52:
25:82:39:6e:bd:e6:9c:b6:e8:0d:17:e9:e2:4f:14:
4e:af:3f:4a:a9:b7:33:05:ca:3b:24:94:f6:a8:ce:
be:18:54:d9:c7:99:8d:37:72:98:c3:c8:33:a6:ca:
d5:38:96:d1:5b:85:27:ba:52:4f:ff:d0:5d:15:c8:
b8:58:f1:d4:b8:ae:a9:c4:32:e3:84:0f:d0:76:96:
9d:18:48:45:3d:53:4d:ee:69:cd:59:78:ab:e7:57:
13:26:9e:dc:e7:d5:f9:54:a3:56:e1:31:52:71:57:
a7:c1:9c:72:c4:cb:94:b5:fe:0e:0b:59:d1:3b:8f:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9D:A5:FF:83:A2:D2:F6:2C:AB:59:E0:B6:A0:F7:80:00:9C:C6:12
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/LJ2l_4Oi0vYsq1ngtqD3gACcxhI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.176.0/21
Signature Algorithm: sha256WithRSAEncryption
41:a5:7b:95:0e:41:89:f1:4c:93:03:0e:b0:ba:6b:67:5c:e4:
04:f3:9b:95:40:8f:fb:42:98:50:e9:bf:71:b0:66:c2:31:5f:
46:1c:c3:bf:bb:d1:76:a1:a9:e2:39:34:91:ba:58:a1:0b:44:
92:1a:38:7d:1f:ae:06:b0:10:16:e1:01:e1:48:26:75:6f:34:
65:6c:13:37:e0:52:21:a2:3a:0b:80:10:c9:0c:95:7e:c9:b1:
9f:5c:df:ea:d3:9b:de:bf:fd:ef:bb:8d:ee:5a:0c:31:60:5e:
fd:76:76:26:e5:4b:06:59:52:1d:54:4f:58:5a:1f:df:0d:92:
46:c7:65:41:71:7e:82:92:3b:9e:fe:00:26:4c:ed:d0:db:d2:
8f:5f:f8:a1:b9:3e:5b:b0:e3:89:b1:ee:e6:46:b2:fa:39:ab:
f1:76:57:86:99:18:23:44:73:3c:e4:a7:bf:e5:df:a8:14:b9:
b9:98:d7:68:ef:7b:14:22:fe:e9:73:ee:83:5e:cb:f2:a3:05:
8c:22:a5:2b:f4:0c:d9:30:48:c1:5d:30:96:82:0e:ac:fe:81:
b8:2f:e6:21:f5:32:2b:b5:4d:14:e4:14:35:3c:db:94:2e:f1:
ce:04:db:db:bc:3e:1f:8e:68:55:f5:cc:bc:19:84:a7:54:57:
ed:59:62:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org