Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/0oQrP2xa1f1oARHnj--blQWQ4j4.roa
File: 0oQrP2xa1f1oARHnj--blQWQ4j4.roa (raw, json)
Hash identifier: rmBEVDL1usN/3jrRESpPBqpj/tFbuN+gmC5g17jfBOs=
Subject key identifier: D2:84:2B:3F:6C:5A:D5:FD:68:01:11:E7:8F:EF:9B:95:05:90:E2:3E
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/0oQrP2xa1f1oARHnj--blQWQ4j4.roa
Signing time: Thu 15 Sep 2022 02:39:01 +0000
ROA not before: Thu 15 Sep 2022 02:39:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131607
IP address blocks: 150.117.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D2842B3F6C5AD5FD680111E78FEF9B950590E23E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:b9:09:60:b6:f9:9c:4a:34:de:4a:7b:05:
54:d6:06:8f:99:28:fa:9b:17:cf:42:dd:a2:75:03:
1f:fb:8e:47:f1:56:de:3b:28:3c:a4:42:45:b3:57:
23:f3:7d:61:23:bc:5b:9c:8f:13:a5:79:e9:3f:26:
a5:79:f8:31:21:de:c8:60:11:46:4c:3a:49:1b:b3:
ac:78:e3:cb:47:7a:86:37:df:be:08:7d:58:12:7d:
ab:8e:70:64:c6:af:d0:a5:89:30:65:81:57:b0:ae:
4b:e9:bd:b2:a0:43:b2:d9:78:29:d3:be:9c:1e:3f:
81:09:3f:17:dd:74:ab:8d:ee:31:7c:95:52:28:8a:
a9:68:3f:1c:59:2e:e4:a1:4a:c1:13:b2:b2:6b:d6:
01:ae:ae:cd:b4:3f:17:9c:34:b5:db:2b:89:76:a4:
0e:63:68:1f:80:e4:7e:aa:a5:97:6e:15:b3:a5:bf:
d3:23:a8:84:02:cd:f6:a7:70:07:13:b7:b8:52:20:
1d:80:6e:b0:f1:34:a6:a7:25:54:ad:21:6c:74:fb:
38:6a:b3:42:3b:4b:c0:aa:c8:db:f1:c6:2b:8d:4f:
8f:50:a7:62:77:08:c9:a2:e8:23:26:16:c0:5c:ba:
3a:15:cf:63:72:c8:c4:12:3a:bf:9d:9b:7a:d3:64:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:84:2B:3F:6C:5A:D5:FD:68:01:11:E7:8F:EF:9B:95:05:90:E2:3E
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/0oQrP2xa1f1oARHnj--blQWQ4j4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.224.0/21
Signature Algorithm: sha256WithRSAEncryption
30:00:c9:fb:23:32:5a:93:34:f4:f4:37:1f:9a:58:47:45:f3:
4b:59:30:fa:01:a6:7c:79:59:42:38:8f:28:33:a2:0a:a6:3a:
58:aa:1f:cf:7a:4f:a8:5c:eb:74:cd:fd:0d:71:d3:be:d6:92:
ce:62:8f:71:81:53:d6:89:c3:24:08:68:10:ef:e8:15:9f:0b:
6c:e6:ad:39:5b:1c:6c:60:69:dd:0c:c6:d7:66:b1:7f:df:0a:
f4:37:e9:89:fd:15:f4:f8:95:ac:52:62:9f:60:92:81:73:ff:
03:19:7d:e7:30:4a:4a:c3:16:3d:fc:fd:7f:00:3c:4c:60:44:
93:03:f0:2c:96:a6:d9:04:f0:8f:42:71:75:b6:a2:f9:19:41:
05:53:84:63:02:8e:8c:e7:66:ad:09:47:e8:4c:85:05:5d:d7:
aa:99:72:82:54:3a:f4:7e:bb:39:85:c0:df:b7:3f:ea:fc:a3:
e9:20:25:c2:ae:b3:f9:6a:e6:0d:31:5a:9f:20:55:10:d5:2b:
58:d4:5b:61:5f:5f:8a:81:3c:a7:7c:40:87:98:d7:95:bc:11:
30:72:ec:bd:d3:f6:a1:73:37:ac:20:ed:95:b8:d4:be:e2:82:
19:88:b2:21:98:4c:c2:20:08:0c:71:b2:6a:11:97:50:74:4a:
5b:0a:5a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:47 2025 by rpki-client