Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/t-Gkq_9CCioQ-rV3AVU7UFn4Yd8.roa
File: t-Gkq_9CCioQ-rV3AVU7UFn4Yd8.roa (raw, json)
Hash identifier: goPldRbCwz0EPksyKztFpGEk9ncWn5k85O8Z7i1j/gE=
Subject key identifier: B7:E1:A4:AB:FF:42:0A:2A:10:FA:B5:77:01:55:3B:50:59:F8:61:DF
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0921
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/t-Gkq_9CCioQ-rV3AVU7UFn4Yd8.roa
Signing time: Sun 07 Feb 2021 12:45:29 +0000
ROA not before: Sun 07 Feb 2021 12:45:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18429
IP address blocks: 124.155.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2337 (0x921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Feb 7 12:45:29 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B7E1A4ABFF420A2A10FAB57701553B5059F861DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2b:8d:cd:9c:7b:ca:27:fa:d6:3b:47:7d:8e:
fc:3a:ea:26:39:67:e0:8c:70:20:bf:7f:63:99:b2:
08:bd:aa:51:50:3c:c0:65:7f:35:5b:d6:42:75:68:
a2:4e:3b:e7:82:02:e3:bd:a3:46:2c:b5:74:d6:ff:
49:47:1f:a1:2e:8d:31:9c:e5:9f:3a:22:73:f6:ee:
0a:f2:c3:07:e6:a5:58:3d:67:72:ca:99:92:92:e8:
1b:b5:c8:74:9e:74:0c:73:38:1d:ea:9e:c5:18:0c:
a1:dd:34:10:94:76:41:1d:c5:29:45:fd:cf:30:5e:
9a:b4:83:7d:a9:7d:2c:15:d9:aa:a7:f4:91:9d:6a:
01:e0:c1:fd:b5:eb:22:49:a5:96:af:cd:80:1b:63:
f3:52:b5:f3:1e:c5:1d:00:5a:8b:be:26:c4:28:c9:
45:b3:e2:48:9b:55:bd:5a:27:10:b0:25:1e:aa:c5:
98:40:19:56:ef:ed:4f:bd:f3:e7:f3:f7:15:d5:ff:
7d:45:5d:77:9d:25:e6:ba:a5:92:1f:c5:e6:61:fd:
d8:0b:f8:06:9c:6a:14:6f:c3:e3:04:2b:3e:24:dd:
a1:70:70:55:ca:dc:f7:13:08:2a:9e:5f:bc:cd:ec:
c6:0f:40:d2:a6:58:72:d6:dd:21:72:7e:25:40:a2:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E1:A4:AB:FF:42:0A:2A:10:FA:B5:77:01:55:3B:50:59:F8:61:DF
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/t-Gkq_9CCioQ-rV3AVU7UFn4Yd8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.168.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:a9:ff:ec:83:57:6c:14:3c:60:a5:64:0e:3c:63:41:de:21:
62:77:63:50:15:2c:98:04:92:e6:d1:17:25:d4:30:64:5a:dd:
cc:c9:04:4c:03:4e:10:15:db:b8:fe:02:9f:22:e2:3f:3d:36:
a9:66:91:41:c3:f0:00:d3:88:6b:13:bf:9f:24:d5:67:a1:cb:
97:a0:ec:00:8e:9a:b5:82:67:6f:f9:df:40:8b:4e:da:ce:9f:
f0:f5:e9:0f:2e:46:c5:41:51:cd:fe:7d:50:ef:fb:47:7b:6e:
90:6a:d0:38:b9:90:a7:ba:38:52:95:ea:95:9a:e8:cc:64:a1:
6c:5e:41:43:31:5a:b8:49:e3:f1:d4:67:58:56:8b:4e:ad:15:
a5:0b:1a:ed:2f:16:5b:6e:98:10:ea:41:1b:58:5b:33:cd:e2:
15:ab:2f:bf:66:4a:99:dd:2f:49:8c:dc:fe:c9:41:cd:3d:90:
71:45:82:20:cc:eb:3d:8d:8e:99:89:ca:56:e9:93:98:0c:f6:
02:bb:a8:0a:a5:00:b2:f6:bf:47:35:c5:d2:e6:24:6e:4d:7d:
da:9f:33:92:5e:b3:c6:6d:66:86:ef:af:15:04:ec:25:af:0f:
44:2b:b4:dc:b0:65:99:c6:c9:c0:c3:ba:a6:03:f8:d0:b6:68:
22:b0:2a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:47 2023 by rpki-client on console-ams.rpki-client.org