Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/viut5UqX0fg4ke6v1M5Xtl7ogI4.roa
File: viut5UqX0fg4ke6v1M5Xtl7ogI4.roa (raw, json)
Hash identifier: xKOcEu9aqVIzaCkbFh4PocBjVzjvyn7r3YEn/Qm9oVY=
Subject key identifier: BE:2B:AD:E5:4A:97:D1:F8:38:91:EE:AF:D4:CE:57:B6:5E:E8:80:8E
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0B6C
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/viut5UqX0fg4ke6v1M5Xtl7ogI4.roa
Signing time: Fri 16 Dec 2022 04:18:11 +0000
ROA not before: Fri 16 Dec 2022 04:18:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 124.155.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2924 (0xb6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Dec 16 04:18:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BE2BADE54A97D1F83891EEAFD4CE57B65EE8808E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:5b:d3:ee:e1:d7:22:8c:f9:27:a2:d0:5c:
8a:ad:c6:ce:58:74:50:f8:11:c0:cd:8a:39:2e:1e:
29:a5:fe:b6:2f:95:a2:ff:bd:dc:c7:7e:fe:6b:ac:
38:01:d5:c0:35:be:de:1c:75:9c:eb:7e:c2:d2:3b:
03:86:17:fd:98:13:e1:3a:ce:8b:35:4d:bf:90:6a:
e2:b8:10:84:70:38:6c:cc:55:c4:a0:ad:a0:2f:f5:
97:27:ee:64:40:bb:53:4f:7b:ca:56:0b:b5:33:a8:
40:f1:65:44:a0:41:3a:c1:8b:50:fc:64:cc:ba:74:
02:01:09:ae:67:bd:7c:96:ca:12:a3:11:90:22:5e:
dc:21:3b:33:85:b9:26:46:51:7d:03:ee:ad:79:b3:
0e:f7:46:c3:7e:11:54:36:5e:ca:29:27:37:c5:62:
c0:95:b5:8e:80:af:29:f6:1d:b3:c1:6e:42:98:a8:
98:be:70:31:e1:53:87:d5:1e:59:5d:4e:0f:73:c2:
e1:c4:be:dd:e3:8a:84:5d:cf:19:e2:4f:d1:b5:34:
7b:bb:2b:ee:89:04:ac:e9:1f:0e:14:48:f1:07:55:
35:bb:f6:e1:8d:02:b4:09:bf:fc:94:45:4e:e7:b3:
14:58:81:19:d1:39:7e:29:3e:97:46:f2:4f:78:ef:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2B:AD:E5:4A:97:D1:F8:38:91:EE:AF:D4:CE:57:B6:5E:E8:80:8E
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/viut5UqX0fg4ke6v1M5Xtl7ogI4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.160.0/19
Signature Algorithm: sha256WithRSAEncryption
85:a5:26:6b:61:ce:c6:b9:d0:9f:84:fc:dd:a0:c2:d7:41:24:
ff:a4:e8:39:da:47:05:d3:0a:e6:c6:b6:a8:fc:3b:a5:10:47:
82:fe:04:00:c8:be:cf:99:dd:6c:7e:a8:bc:9c:0e:38:63:99:
aa:4a:6f:bd:6e:f1:60:28:21:87:fd:63:39:b0:36:54:c2:9a:
b7:7f:1d:80:9c:0c:7e:79:68:66:35:df:e2:ec:e2:6f:27:4b:
15:a1:d5:86:43:c3:e8:b8:9d:e7:28:9f:59:4b:9a:f1:bb:1f:
3a:a9:77:e2:6c:dd:f1:16:01:b3:4b:f2:c8:c4:94:95:ee:1a:
22:0c:4a:08:9b:d4:f6:33:5a:13:8a:4d:3d:97:e3:cb:ce:ee:
83:33:3f:01:9d:02:93:e6:8e:fa:7c:5d:8a:f9:a7:7d:d2:8c:
da:5f:88:fa:b2:f5:3c:c5:e5:a7:8b:82:91:7e:22:3f:7c:c9:
2a:d1:c7:65:92:47:c1:87:7c:60:6d:76:a2:dc:fc:51:82:8a:
6d:62:e9:46:a2:87:f1:fc:00:f0:a0:67:77:4a:23:5b:01:2c:
45:9c:0c:0f:99:fc:2b:da:a6:31:71:13:7e:98:7b:0e:16:96:
12:77:cd:09:5d:40:c0:bd:86:ae:fb:8d:f0:3a:bd:64:0e:fb:
d4:a5:21:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org