Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/06_Ax-es7mD9oXKW5BRAQNXfEqE.roa
File: 06_Ax-es7mD9oXKW5BRAQNXfEqE.roa (raw, json)
Hash identifier: pGWvI7EXjN9ZEo8wANVO4mYQQS23ipA1rejTn3U4q3c=
Subject key identifier: D3:AF:C0:C7:E7:AC:EE:60:FD:A1:72:96:E4:14:40:40:D5:DF:12:A1
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C27
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/06_Ax-es7mD9oXKW5BRAQNXfEqE.roa
Signing time: Wed 29 Sep 2021 02:39:05 +0000
ROA not before: Wed 29 Sep 2021 02:39:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131600
IP address blocks: 223.26.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3111 (0xc27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:39:05 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D3AFC0C7E7ACEE60FDA17296E4144040D5DF12A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:03:cf:46:aa:8b:e5:d7:96:18:e3:5f:a7:
a9:04:b8:af:dd:5c:e2:ab:db:89:49:2e:7e:c7:ac:
17:6b:22:52:9b:68:be:d8:aa:a6:a4:af:5c:6c:a9:
b5:13:c2:d3:9c:f3:a9:f1:9c:35:2f:e4:21:8a:ca:
79:c1:84:96:ee:02:98:10:fd:80:ea:a1:d1:81:e8:
53:62:fe:35:fe:23:27:3f:c4:d2:d3:60:f5:40:fe:
07:49:cb:0c:22:ca:8e:55:c6:3a:86:2e:20:41:32:
0c:fb:d8:fa:55:b4:ac:44:6f:4c:c6:34:15:7e:98:
96:fb:0c:30:e8:a6:ad:03:f7:40:34:75:98:41:bf:
af:0f:83:54:df:26:8c:10:9b:11:10:97:0d:73:f8:
96:03:0f:9b:87:8f:61:90:7c:f0:57:18:19:4c:b6:
6e:a7:5c:0b:ba:ba:fa:aa:fe:54:20:a8:d8:6c:db:
e0:af:00:58:9f:46:7f:c8:96:61:71:f2:14:8f:15:
fc:4a:35:55:7d:66:bd:3e:c2:30:a0:bb:2a:da:81:
31:0f:3d:26:8a:10:84:88:99:20:5f:cc:b6:b6:cb:
2e:93:7b:94:aa:5d:3c:00:20:09:fb:75:d0:c6:61:
57:97:2c:eb:26:8d:41:48:67:c0:1d:a9:4f:d9:40:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AF:C0:C7:E7:AC:EE:60:FD:A1:72:96:E4:14:40:40:D5:DF:12:A1
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/06_Ax-es7mD9oXKW5BRAQNXfEqE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.68.0/24
Signature Algorithm: sha256WithRSAEncryption
53:3c:a4:de:30:56:aa:7a:d7:b0:4a:ac:88:88:a6:e7:30:75:
39:bf:84:cd:17:30:39:08:48:24:00:b6:9e:8c:b1:5f:6d:c3:
0b:30:64:a5:12:40:4e:8b:3b:2f:8d:6f:0e:69:92:0e:5b:52:
70:04:94:90:bf:49:42:82:49:8b:2c:27:62:b7:66:01:42:56:
94:6c:69:04:bd:57:f6:0c:c0:97:8f:49:7b:5d:c0:cf:b8:2f:
6a:b6:52:94:8b:21:63:5a:80:7d:65:bc:fc:7d:6e:a1:2f:0d:
84:fa:a5:f1:ca:2d:7d:23:cd:d4:be:40:9c:bd:75:5f:46:45:
c5:49:d4:32:d2:5d:04:d2:4e:6e:37:81:40:ec:51:9f:91:52:
99:39:66:04:2b:84:67:14:07:0a:85:14:09:0a:84:32:d0:e4:
bf:15:90:6e:88:65:f5:f7:48:d7:80:79:97:49:c6:76:6d:94:
fd:75:e6:b5:a9:6a:42:59:52:31:6f:b5:11:28:06:47:d5:6b:
a5:bf:87:3f:43:c7:d9:85:20:7f:0b:81:0d:67:a7:ab:e0:b8:
b5:02:1e:86:a0:ca:ad:f1:6a:ea:a0:70:2b:4e:6a:54:b4:cc:
70:96:3c:96:0f:32:7f:8d:cb:e4:9b:f2:da:97:28:ba:27:6d:
aa:14:60:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org