Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/R2E8Miih1mmoOJc7oFhho2LU8_0.roa
File: R2E8Miih1mmoOJc7oFhho2LU8_0.roa (raw, json)
Hash identifier: 3Dqh8JQG/IrOUm4dwpurVyE3cytVRgxGuR7yp0fb+PQ=
Subject key identifier: 47:61:3C:32:28:A1:D6:69:A8:38:97:3B:A0:58:61:A3:62:D4:F3:FD
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0793
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/R2E8Miih1mmoOJc7oFhho2LU8_0.roa
Signing time: Tue 29 Sep 2020 09:59:29 +0000
ROA not before: Tue 29 Sep 2020 09:59:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18429
IP address blocks: 123.50.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1939 (0x793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 29 09:59:29 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=47613C3228A1D669A838973BA05861A362D4F3FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c1:03:d8:4b:44:71:29:51:56:ba:3e:94:3e:
fb:cc:63:6d:6a:b9:6a:c3:9d:84:e8:ff:3d:56:04:
26:bf:6b:b0:43:29:8a:88:97:f0:d1:54:2b:a6:dd:
3d:c0:6d:60:be:7e:42:54:d8:c4:39:35:38:ae:86:
be:dd:4e:e5:d1:e8:b9:a9:0e:20:56:0b:02:fe:d5:
39:33:bd:b6:f5:4a:ae:e0:ff:19:6d:40:f5:e3:fd:
b8:76:e8:f9:4b:b2:dc:5d:37:ea:e2:39:af:30:8c:
d4:ec:a9:f5:9b:f5:f4:01:9f:0b:87:9f:63:33:17:
3d:0f:31:e0:43:61:08:ae:52:3f:12:f7:7e:01:d4:
06:66:ef:2e:2c:e7:70:c8:b3:94:23:ca:45:aa:e6:
cf:8f:44:88:cb:7a:4b:a7:db:8a:3f:93:d8:db:b4:
33:d3:b8:fb:c5:95:4b:6c:3f:e9:b8:e4:27:d7:39:
a1:7e:26:e6:37:e7:7b:a0:82:9f:41:fc:b5:9f:9a:
e8:93:fc:ce:a5:2b:61:9f:c9:54:52:02:73:3d:d9:
0e:5c:0c:dd:6d:11:a0:d6:98:0d:42:e4:c7:1a:48:
1e:d3:39:6e:bd:ea:11:a7:ac:19:22:fa:52:ba:1b:
36:98:e4:d1:cf:9d:e5:9d:ff:9b:3c:80:82:07:8d:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:61:3C:32:28:A1:D6:69:A8:38:97:3B:A0:58:61:A3:62:D4:F3:FD
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/R2E8Miih1mmoOJc7oFhho2LU8_0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.50.32.0/21
Signature Algorithm: sha256WithRSAEncryption
64:94:79:57:5c:e7:9f:fd:fa:d8:94:66:cf:67:54:b8:bf:3a:
02:92:4a:3f:b6:1e:a5:f9:1f:97:a4:29:88:27:50:01:2f:cb:
26:21:07:1f:c4:cb:be:16:d8:5f:0e:42:ef:cb:f7:f6:1d:56:
f0:e5:95:5b:e0:82:db:4c:b7:bc:9c:f6:da:e5:d0:62:0b:86:
4a:3d:65:a0:3c:7f:ef:28:f1:0d:36:8e:23:e6:d8:f5:4a:7e:
08:bb:16:8c:a5:c3:54:57:31:14:96:23:d0:03:ae:88:ea:f1:
19:71:21:72:1f:e7:90:34:73:09:0e:fa:a0:a0:1c:95:43:ba:
67:e5:76:59:31:3f:ef:1d:e2:09:50:74:30:d2:6f:e8:c3:0c:
8e:15:7c:47:7f:d9:3c:4c:4d:e7:6c:1f:61:81:a8:00:ff:78:
52:33:68:67:e4:26:c2:33:a4:1b:8c:0e:54:c7:f2:49:58:0b:
ce:38:86:ea:39:b5:30:61:8c:49:2b:5a:1c:44:7f:d8:fc:c7:
d7:ea:29:a0:12:d4:d4:d3:7f:57:01:e7:e2:e8:6d:c7:9c:da:
90:d7:7b:b7:f5:08:f8:71:f5:3e:e4:20:26:c3:c8:1d:9c:56:
f3:0b:1a:29:bb:90:33:34:52:6c:9b:01:76:4d:7d:7a:d9:45:
36:f7:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org