Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/ypU7rAnZO7irvSyFveveLPTaEPI.roa
File: ypU7rAnZO7irvSyFveveLPTaEPI.roa (raw, json)
Hash identifier: KMtMJaSm77Kgjv8kdJrd8TdrzHaIXdfesVNQScqF2rc=
Subject key identifier: CA:95:3B:AC:09:D9:3B:B8:AB:BD:2C:85:BD:EB:DE:2C:F4:DA:10:F2
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 079B
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ypU7rAnZO7irvSyFveveLPTaEPI.roa
Signing time: Tue 29 Sep 2020 09:59:32 +0000
ROA not before: Tue 29 Sep 2020 09:59:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18429
IP address blocks: 124.155.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1947 (0x79b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 29 09:59:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CA953BAC09D93BB8ABBD2C85BDEBDE2CF4DA10F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:5b:ad:c5:6e:e1:1c:dc:d7:95:8c:ff:de:
91:21:51:d5:b6:55:26:f2:77:de:19:5c:3f:99:63:
98:67:7c:0f:02:d4:d6:29:39:76:c9:e9:32:71:71:
a2:a0:8e:bc:09:2a:61:1e:00:5a:bb:f3:d8:2c:59:
67:4a:df:a7:6d:59:48:1f:11:26:f8:23:33:3d:f9:
c8:5e:dd:b8:c8:cc:44:2a:72:12:6f:06:03:21:92:
35:ea:e5:fd:bc:46:ec:ad:22:4c:98:75:ff:48:76:
82:71:2a:30:78:e2:8a:45:dc:ed:3f:ab:f7:15:09:
04:0a:d3:f1:34:59:7e:bd:fd:bd:0f:e6:6a:80:be:
9a:61:5b:90:ca:2a:02:92:c0:4f:f4:72:58:5c:f6:
45:9b:11:85:f9:5e:a0:d1:0c:5a:47:0c:35:cb:1a:
ae:c4:a8:85:a6:61:42:d9:53:00:8a:89:26:be:3d:
a5:f1:47:71:31:10:68:23:aa:ce:66:24:ab:16:44:
0b:36:75:0e:3e:e9:fb:e8:0d:dd:b1:f2:09:21:b2:
58:2f:8d:39:9a:f1:49:8a:67:a3:59:42:be:77:5d:
88:1f:8c:30:7f:ec:87:77:19:df:0d:35:af:c1:0b:
44:58:c3:71:1b:3b:8e:fd:81:5c:67:cc:78:56:9a:
c3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:95:3B:AC:09:D9:3B:B8:AB:BD:2C:85:BD:EB:DE:2C:F4:DA:10:F2
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ypU7rAnZO7irvSyFveveLPTaEPI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.184.0/21
Signature Algorithm: sha256WithRSAEncryption
26:ba:9a:1a:8a:f8:4b:7b:76:d8:2d:55:2e:07:03:a1:30:19:
cc:92:a5:3e:8d:9a:5b:fb:90:d9:00:bf:d1:49:4d:04:cd:30:
b2:e2:01:42:37:1b:55:f1:28:ca:3a:58:ff:36:d6:46:0a:87:
2b:ce:f5:e2:f3:80:e7:6f:2a:e6:4b:e7:16:98:50:fe:45:9d:
68:69:2d:17:be:7d:e8:c8:32:8e:e3:86:ec:62:6d:32:55:e3:
22:3c:d5:7d:e7:ea:74:41:9b:16:18:86:aa:e3:b9:52:94:73:
3b:98:98:f8:b5:6a:5a:f4:a9:2e:e9:f3:71:87:dd:44:7b:d0:
d2:51:f2:fc:a4:ab:9b:14:07:97:1e:ca:1b:c8:28:67:b4:46:
e7:8e:b9:9a:92:0c:94:32:c8:f1:2e:05:54:5e:7c:34:08:ea:
13:69:6a:20:7e:f9:7d:4f:74:e7:e2:62:af:a2:8e:65:02:85:
e6:f4:9c:80:a7:65:33:ea:68:bd:7f:e8:63:7d:25:9b:15:14:
26:55:5d:95:37:28:1f:5a:d1:e5:a9:06:44:03:cb:9d:05:f8:
8b:36:aa:31:8f:2e:da:74:d0:84:59:c1:41:f8:06:84:93:d3:
be:48:5d:39:cd:64:99:79:5f:f5:cc:21:6d:89:83:74:bc:6e:
c0:42:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:57 2023 by rpki-client on console-fra.rpki-client.org