Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/-suHyyIXaVzIvKvoBv6mVIyRKOg.roa
File: -suHyyIXaVzIvKvoBv6mVIyRKOg.roa (raw, json)
Hash identifier: rwMZpL5Toa3XIy/KC6nx/AEcKBC2TkR9EMviKTfTFJI=
Subject key identifier: FA:CB:87:CB:22:17:69:5C:C8:BC:AB:E8:06:FE:A6:54:8C:91:28:E8
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BF4
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/-suHyyIXaVzIvKvoBv6mVIyRKOg.roa
Signing time: Wed 29 Sep 2021 02:38:53 +0000
ROA not before: Wed 29 Sep 2021 02:38:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131600
IP address blocks: 150.117.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3060 (0xbf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:53 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FACB87CB2217695CC8BCABE806FEA6548C9128E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:04:dd:86:c1:d9:a5:8a:59:68:15:08:b1:
8f:6b:94:ef:fb:52:02:50:db:c3:b2:0b:e1:54:d2:
14:3c:fa:8e:3a:df:73:75:6c:f8:bb:b9:3e:97:f6:
45:86:dd:78:cf:7b:ca:77:de:20:7d:ed:67:13:52:
23:74:6e:06:59:9c:a7:c9:8d:f3:73:12:6d:db:23:
b2:95:b4:6d:2e:a1:9a:5e:9f:10:2a:d7:42:fb:b3:
93:a5:23:69:e7:02:e4:be:74:41:aa:e9:41:91:38:
95:6d:ee:1c:f1:c4:eb:88:3f:01:8b:c2:ad:28:d7:
03:b8:83:15:fe:c5:58:d5:8c:55:f4:2c:bb:cf:f9:
52:89:fd:94:50:fd:a1:bf:d6:f1:23:d7:2d:b3:90:
74:34:f4:d5:b5:b1:1c:9d:b8:5a:86:ad:da:aa:4e:
47:ad:cd:23:53:89:7b:9d:2a:29:a5:b5:5c:e9:4f:
74:83:6d:44:ad:29:d9:40:67:57:0d:db:19:46:d1:
ee:27:53:44:6b:4e:c8:a2:97:3b:4e:54:fb:b7:06:
7a:98:a3:fc:be:e2:f3:40:0c:cc:6c:f2:f5:ec:c5:
33:f8:dc:7c:9d:6d:4a:a1:54:a7:bf:52:f9:84:25:
15:70:39:30:41:76:4e:d4:5b:22:78:89:c9:ee:8e:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CB:87:CB:22:17:69:5C:C8:BC:AB:E8:06:FE:A6:54:8C:91:28:E8
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/-suHyyIXaVzIvKvoBv6mVIyRKOg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.120.0/21
Signature Algorithm: sha256WithRSAEncryption
82:d6:0c:53:ca:6d:2b:10:ac:89:06:7e:7f:2b:87:9c:af:3e:
e9:19:d6:d9:61:dc:16:c3:e3:da:d0:db:96:dc:95:e2:18:63:
66:65:85:a6:7a:a1:a8:b6:28:57:7d:d0:7e:b6:ce:47:e7:58:
51:a3:ec:0a:24:24:3a:df:63:b8:e6:f1:b1:bd:97:ab:f0:88:
ad:ee:01:ec:18:61:e0:2d:e4:6b:75:19:7b:6e:42:95:b6:b5:
b3:a1:dd:0a:8b:15:45:37:64:3b:85:21:2c:7a:31:9e:aa:ca:
61:8e:14:8d:cd:f2:8d:f2:d2:4a:2f:bd:55:f6:15:03:61:00:
56:2b:06:84:25:f4:96:0d:45:0d:52:ff:3e:75:14:0e:4f:3d:
a9:6d:ef:dc:65:e1:86:4a:0b:8f:67:76:58:67:9b:7e:f2:1b:
2b:1f:02:28:9a:47:81:9c:b1:48:0c:76:ee:8a:aa:0e:27:85:
81:86:33:c3:75:5e:06:9d:8a:5f:00:8b:cb:0e:ba:7d:66:c5:
a0:54:13:3c:bc:4b:6e:03:8b:ef:b0:92:28:c7:2d:18:01:0f:
91:3a:04:e9:2b:ce:f9:5d:04:be:1b:44:85:23:11:4f:67:f9:
c4:8c:80:cc:b2:a0:86:1c:fc:42:a0:37:ea:46:3c:51:3d:1c:
bf:85:c1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org