Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1WZcy9yREUc3mhEOeSfz3ofNEZk.roa
File: 1WZcy9yREUc3mhEOeSfz3ofNEZk.roa (raw, json)
Hash identifier: P+35Kg4+UmWJKmmlSae0kZsusavo/tZ86/hdxHy/VIg=
Subject key identifier: D5:66:5C:CB:DC:91:11:47:37:9A:11:0E:79:27:F3:DE:87:CD:11:99
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1WZcy9yREUc3mhEOeSfz3ofNEZk.roa
Signing time: Thu 15 Sep 2022 02:39:07 +0000
ROA not before: Thu 15 Sep 2022 02:39:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 63199
IP address blocks: 150.116.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D5665CCBDC911147379A110E7927F3DE87CD1199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:f0:85:d5:10:6c:0a:21:d9:17:ba:7a:4b:
d2:f0:46:52:b8:f8:60:fa:84:94:23:63:46:6d:fe:
2b:10:80:bc:67:74:8d:48:ce:3e:6c:e8:fe:d3:32:
91:54:b7:50:66:d3:f2:81:50:0b:de:ea:10:2f:38:
5f:92:15:3b:12:89:23:d8:e7:39:4c:75:00:60:3b:
a5:5c:c4:10:aa:05:fb:3c:59:6d:3f:72:4a:19:14:
fb:1d:26:17:b0:78:75:3c:76:04:82:aa:ef:af:0c:
1e:c9:c3:aa:da:48:16:5c:fa:17:34:e2:d5:e3:ea:
62:68:d2:52:d6:39:2d:9c:a9:d9:34:47:c0:35:25:
ef:68:da:d7:d0:5a:62:c4:1c:5f:6e:8b:99:af:6c:
81:63:71:bc:ae:c6:48:b5:13:c0:1f:04:98:b0:47:
53:d2:99:23:68:15:e3:06:70:52:00:0d:eb:93:07:
a7:e7:11:87:b8:d2:af:b1:a7:10:29:91:77:34:94:
53:c0:95:cc:56:56:41:53:65:2e:d5:65:c7:56:0b:
45:4d:32:df:96:b6:1f:60:a8:07:74:ce:67:33:90:
3a:b7:0a:e4:97:88:85:f0:8d:06:3a:46:92:e6:bc:
dc:0b:f9:2c:2d:19:22:6c:2f:0f:ea:91:88:8e:0d:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:66:5C:CB:DC:91:11:47:37:9A:11:0E:79:27:F3:DE:87:CD:11:99
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1WZcy9yREUc3mhEOeSfz3ofNEZk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.4.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:89:00:df:8e:56:50:ed:1a:a1:6c:04:bc:b2:6c:1c:85:b8:
53:12:58:90:c5:32:81:c8:9a:43:03:95:2b:2a:4b:05:89:f7:
c5:ae:ae:a8:d8:fe:af:1f:f9:76:ef:f4:7d:ac:f6:cf:3d:6b:
33:63:9f:4c:65:a3:67:3a:ca:38:ce:70:a5:73:fd:51:bb:56:
12:7e:14:8a:6e:43:44:42:c9:00:d2:9d:80:0d:64:5a:f1:b2:
56:ea:0b:23:c2:4b:69:57:dc:87:9c:9c:f8:05:fa:6f:38:e4:
28:f0:c0:bd:dc:f6:c2:ae:b4:18:e2:06:00:f0:91:37:68:5c:
e8:67:a3:a0:2a:17:25:50:a5:15:df:1f:47:71:91:be:08:ed:
49:61:e7:34:32:52:07:e6:82:5f:1a:d1:2f:4d:68:2c:84:08:
90:61:f0:fc:b2:b6:c8:f2:a0:8d:8c:f1:14:f9:30:70:2c:2e:
23:70:9a:83:2d:09:7d:4b:15:3c:71:38:f8:dd:ba:0d:d1:7f:
f2:b5:bb:39:5b:8c:8b:5d:8a:24:f7:15:4c:62:7d:4a:70:a1:
05:13:d7:3c:d0:cb:ce:47:4e:8d:1c:a8:80:93:d2:1a:35:6b:
56:31:7f:8f:b8:68:82:2a:be:11:2f:c0:14:4b:af:ea:51:c2:
a9:7d:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org