Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/-kwoHSnhU68sxE4QvYGT0lbrTWY.roa
File: -kwoHSnhU68sxE4QvYGT0lbrTWY.roa (raw, json)
Hash identifier: 55oCq8unZu6XnLWnu7wmyLZjFbRkuexOncJQxV+gvsM=
Subject key identifier: FA:4C:28:1D:29:E1:53:AF:2C:C4:4E:10:BD:81:93:D2:56:EB:4D:66
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 084B
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/-kwoHSnhU68sxE4QvYGT0lbrTWY.roa
Signing time: Tue 29 Sep 2020 10:02:17 +0000
ROA not before: Tue 29 Sep 2020 10:02:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17408
IP address blocks: 113.21.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2123 (0x84b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:17 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FA4C281D29E153AF2CC44E10BD8193D256EB4D66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:19:72:e2:15:b1:ad:02:80:df:87:1a:a2:ae:
19:83:b1:06:02:e7:a3:2d:62:be:d6:11:09:e1:bb:
29:87:85:b6:90:bc:c6:72:ad:bd:ee:4c:ff:61:8d:
c5:65:35:26:b1:a2:b0:1a:2a:77:9b:68:46:30:89:
04:7c:c5:28:aa:4b:33:6c:68:51:49:31:80:82:b2:
79:2a:d6:fd:29:9d:eb:4c:44:70:37:c7:fb:82:44:
8e:03:46:6f:2b:3b:fc:e5:9c:cb:4b:81:c6:5c:f5:
13:37:9c:8b:52:40:24:8b:24:11:cf:f1:3e:b4:37:
99:d8:a0:9c:67:56:cb:45:ad:5b:0f:ee:dd:79:b4:
06:37:5a:ac:ca:e0:95:f2:b6:86:76:9e:d5:2c:ec:
00:2a:bd:c1:ac:0e:84:41:e1:af:d2:80:b9:c9:9e:
60:33:6c:f1:87:91:97:6b:39:e7:37:94:84:0f:bf:
4b:96:c1:3d:d5:45:0b:b2:60:74:cc:2b:8f:be:c5:
91:67:e1:57:9b:b8:ef:a9:f4:cb:ad:27:7a:3c:b9:
4f:e0:42:82:b0:ef:12:01:a2:fe:3c:75:03:da:62:
e5:4c:83:0d:08:b0:4e:ab:80:4e:2b:b0:06:36:e1:
27:85:22:17:22:7c:8d:0a:41:33:99:0b:f9:f4:40:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4C:28:1D:29:E1:53:AF:2C:C4:4E:10:BD:81:93:D2:56:EB:4D:66
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/-kwoHSnhU68sxE4QvYGT0lbrTWY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.80.0/21
Signature Algorithm: sha256WithRSAEncryption
26:6d:74:e9:a6:be:d2:32:11:2b:d3:8f:5d:37:73:68:1b:5e:
5f:33:e5:45:83:b1:1e:50:05:75:ec:63:df:49:e4:53:23:35:
c0:6d:52:ec:59:b4:6d:02:7e:38:6e:8d:78:87:da:68:36:cd:
11:c1:e4:8f:3d:c3:e3:5f:e6:bb:fc:0e:93:93:49:0f:a5:f1:
4b:8d:8e:44:4c:31:f3:7e:68:4e:5b:58:8d:54:87:a9:62:b4:
d0:77:e7:9a:ba:8b:33:7d:1b:6c:b4:0b:b5:1f:7f:a8:e0:8e:
d5:fb:5c:2b:73:bb:fa:10:f4:be:8d:66:e4:12:02:a2:2e:85:
d7:da:ec:ec:db:b6:be:69:5b:3b:f2:ba:28:da:d6:4f:b2:9b:
0d:71:6f:26:19:1f:b3:ba:b5:fc:2e:6e:63:bd:54:2f:d1:76:
f7:b2:02:43:7b:67:39:e6:45:ed:05:7b:ad:f6:80:39:ad:d8:
61:61:67:f4:6f:66:33:c3:38:62:74:ac:22:4f:87:df:4d:4c:
2f:a7:66:09:fb:e4:09:ff:6e:23:f8:cb:d1:05:51:99:db:2d:
0d:03:37:6f:92:43:bf:c6:8c:25:99:e8:67:f9:0f:35:f1:0c:
22:54:41:c9:48:ca:7f:26:2e:77:0f:1b:07:b1:81:6a:24:fb:
c0:bb:bf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org