Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/-JhvviuCp1ZpHl4LDUETE326Qo8.roa
File: -JhvviuCp1ZpHl4LDUETE326Qo8.roa (raw, json)
Hash identifier: 3qNMvmLldjwnL4c6g8l+0SlZdp3Lv4T5n+AugX4VkXU=
Subject key identifier: F8:98:6F:BE:2B:82:A7:56:69:1E:5E:0B:0D:41:13:13:7D:BA:42:8F
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BFB
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/-JhvviuCp1ZpHl4LDUETE326Qo8.roa
Signing time: Wed 29 Sep 2021 02:38:54 +0000
ROA not before: Wed 29 Sep 2021 02:38:54 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 150.117.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3067 (0xbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:54 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F8986FBE2B82A756691E5E0B0D4113137DBA428F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:db:fb:cd:01:43:65:a6:5f:51:2a:f7:59:
9b:48:90:fb:cd:88:9c:03:ce:ce:ef:4d:27:67:54:
7f:2f:1b:bd:22:73:8f:5e:d7:3f:4e:d5:6f:b2:4f:
57:d4:bf:e5:57:d9:70:da:74:df:1e:5c:e4:76:84:
81:e1:1a:dc:5c:9f:87:df:a7:70:54:9e:a8:8f:6e:
fb:2e:71:cf:91:a7:60:32:b4:92:97:38:ed:fa:49:
18:eb:e5:5b:7e:5f:80:a8:c0:1e:25:a2:a0:fd:d2:
24:37:93:30:f8:17:c4:1a:79:40:9e:66:09:8f:e9:
8c:e3:4b:a4:22:fa:d7:cf:06:74:3c:74:d1:d6:23:
5d:58:26:3c:d4:77:59:e3:f6:2c:60:de:20:f1:a7:
5a:4b:7d:0f:ac:b7:ce:d5:8a:a0:58:13:1c:9a:e4:
e1:f5:b5:47:3b:89:a9:89:7f:95:20:ab:39:e2:c6:
f0:d8:1c:14:f3:70:a4:36:aa:fb:c8:ef:78:3b:05:
74:bf:f6:4c:e0:cf:c1:1e:59:6f:27:d7:4b:66:70:
7e:25:94:f5:9f:23:62:fe:4b:e7:1d:cf:ec:4d:7e:
d1:96:83:75:97:a0:ec:5f:60:0d:b1:e1:95:e4:6b:
b5:87:4e:0c:23:77:9c:77:39:b4:06:83:54:77:e0:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:98:6F:BE:2B:82:A7:56:69:1E:5E:0B:0D:41:13:13:7D:BA:42:8F
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/-JhvviuCp1ZpHl4LDUETE326Qo8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.240.0/20
Signature Algorithm: sha256WithRSAEncryption
32:11:4f:23:3f:2d:fa:56:0d:e2:eb:92:4c:73:9e:8a:34:05:
26:a3:0b:12:3c:bb:9d:a6:4d:6f:2f:17:5e:9c:b5:81:46:b7:
40:b8:2b:70:78:2e:82:06:e3:2f:2d:ba:38:e5:16:33:0c:c9:
b7:e6:d9:89:01:ef:f6:0b:da:19:fc:72:78:f7:7c:3f:fd:ae:
a1:b5:ec:44:97:42:54:b0:2f:ba:e7:b2:8c:3a:14:9a:39:6c:
1b:29:3d:66:9d:d7:40:ce:54:4d:e3:59:87:18:cc:a5:fb:fc:
97:66:f4:b1:1a:88:4e:69:0d:86:39:74:fa:fa:9b:d9:ce:ec:
00:fc:17:d1:52:4d:80:07:99:56:71:e2:73:a4:d2:6c:24:e4:
92:bb:62:a3:a6:0e:8d:43:8d:0d:10:d9:8b:8e:b2:91:6a:7b:
ff:b0:a4:2f:a8:63:54:68:66:89:48:ac:33:7c:1f:b5:2a:fd:
fa:74:6e:91:cf:a2:24:53:87:88:b9:96:de:60:e6:cc:0a:db:
57:ae:d1:f9:c6:92:db:6c:09:68:0e:ae:90:ac:90:8b:46:64:
0b:88:7e:8f:4c:1a:15:e9:71:ed:15:0c:ce:54:ac:5f:d6:1b:
d1:3d:45:b1:09:96:04:8b:1e:cc:23:38:72:44:9c:f2:b7:c7:
d9:96:43:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org