Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/kvrHIsXw93Sba8xLCGu-Jhb35wM.roa
File: kvrHIsXw93Sba8xLCGu-Jhb35wM.roa (raw, json)
Hash identifier: dhrlaLRbP2leqUceNAxDx7tJAKQfCddW6ovHpHIaHWI=
Subject key identifier: 92:FA:C7:22:C5:F0:F7:74:9B:6B:CC:4B:08:6B:BE:26:16:F7:E7:03
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 079A
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/kvrHIsXw93Sba8xLCGu-Jhb35wM.roa
Signing time: Tue 29 Sep 2020 09:59:31 +0000
ROA not before: Tue 29 Sep 2020 09:59:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18429
IP address blocks: 124.155.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 29 09:59:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=92FAC722C5F0F7749B6BCC4B086BBE2616F7E703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:e6:e5:db:92:1a:2f:31:ad:d5:2a:de:90:
06:38:69:f2:f5:f1:eb:65:03:b0:e1:28:c0:6c:6d:
e7:28:b1:83:77:30:56:ff:3a:68:7c:38:45:e6:c0:
42:0a:b5:b0:83:83:66:34:c7:0f:f7:77:93:cc:2d:
c9:fb:23:5f:c9:66:ca:ae:53:60:0f:86:24:82:1f:
55:95:c9:d0:3e:89:cb:ef:7c:57:f4:f3:79:e8:8b:
34:73:a8:2e:ab:bb:ec:1d:58:ab:e3:10:ec:86:c0:
88:cf:87:65:4c:5b:db:97:49:38:e8:b9:3c:8b:b0:
5a:62:1e:54:7b:db:ad:43:f4:6d:e6:7d:97:9f:1d:
fa:04:30:d5:3a:e1:a5:e4:89:98:12:f9:55:e8:3c:
d3:c3:74:0f:b7:2d:9d:c4:51:d2:d9:5b:63:94:2d:
7f:b0:e7:29:05:56:8e:e9:90:5f:b9:ae:d7:c5:64:
79:07:b4:cc:d9:47:5a:68:a7:97:c7:f3:22:a1:da:
78:e8:4d:79:db:3e:af:3f:52:1e:17:a8:1e:39:cd:
02:3c:27:19:47:12:6e:e4:f2:b4:70:27:00:16:54:
5f:f2:88:2d:32:fd:8b:35:4d:82:a5:a0:d3:65:cf:
59:36:ac:f8:e8:94:fe:ba:a9:4c:dc:74:c7:ec:26:
cb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FA:C7:22:C5:F0:F7:74:9B:6B:CC:4B:08:6B:BE:26:16:F7:E7:03
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/kvrHIsXw93Sba8xLCGu-Jhb35wM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.176.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:48:89:1d:78:07:7d:47:0c:6b:fd:a6:73:45:ad:7c:6c:7e:
e4:05:21:40:1a:51:20:d7:7a:c7:53:1b:7e:6c:a1:bb:c0:8a:
e3:d9:1c:36:d5:bc:89:65:b5:2b:bc:71:b1:14:9d:95:0c:69:
49:09:5a:fe:bd:dd:95:45:a8:57:ce:e8:3d:c6:4f:ff:8a:35:
6e:f4:ed:52:fc:db:5d:b8:20:08:d6:2a:45:d1:65:3b:23:59:
56:4b:05:0d:fb:07:e6:d5:71:fc:ae:1c:34:00:cc:ea:6c:2c:
d4:b9:08:f5:49:0e:c6:5a:72:78:c2:57:4b:c1:49:68:79:de:
6e:69:53:d6:b9:66:bd:79:81:4b:0f:e1:e3:3f:aa:87:b0:cb:
bc:95:3d:ea:61:48:02:c7:cb:fb:7a:0f:57:71:ed:6a:38:e0:
63:02:8c:40:40:37:e6:ad:66:c2:17:74:e0:a4:ed:1e:cc:d2:
56:a8:20:f3:c4:32:52:af:0e:ba:ff:58:8b:44:9e:ec:ec:0d:
41:a3:23:0b:eb:21:21:3c:53:b7:26:bf:59:e6:35:6e:71:0d:
80:c9:f1:e5:16:34:51:30:21:f4:85:d0:c7:3f:df:50:9d:5b:
5e:f1:2d:7e:8e:d5:44:73:86:e0:9f:ef:ed:52:7d:54:5c:05:
f3:8d:56:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org