Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/2ascngHM6QQ55Zg3G_6sRYi9Fbs.roa
File: 2ascngHM6QQ55Zg3G_6sRYi9Fbs.roa (raw, json)
Hash identifier: DnU6JvpfUyrC90d2zApRR48IG40ZkOvhE9Wk+Bc+zU8=
Subject key identifier: D9:AB:1C:9E:01:CC:E9:04:39:E5:98:37:1B:FE:AC:45:88:BD:15:BB
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E14
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/2ascngHM6QQ55Zg3G_6sRYi9Fbs.roa
Signing time: Thu 29 Dec 2022 09:32:12 +0000
ROA not before: Thu 29 Dec 2022 09:32:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 150.116.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3604 (0xe14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D9AB1C9E01CCE90439E598371BFEAC4588BD15BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:49:c0:88:7d:64:37:5e:af:76:94:0f:c5:
49:ea:54:cf:ee:33:70:1b:63:c8:45:9b:47:83:37:
92:11:1e:6c:1b:f7:ec:48:41:6c:20:53:6b:3a:74:
57:d0:55:e5:14:8c:e4:33:8d:04:94:b9:03:6a:69:
58:7b:7c:f8:e3:1d:42:ed:ac:a1:c8:1c:9a:c8:45:
70:73:d5:6f:67:c7:f6:f4:a8:42:90:39:09:7a:e1:
58:0f:b9:fa:2e:c6:49:a7:44:7b:68:ed:d1:1b:ac:
f4:45:11:86:62:76:21:f4:31:d3:34:3d:e4:d2:22:
ee:a6:c1:47:03:b4:fd:93:70:99:b8:60:15:7a:a7:
7e:21:3e:ea:2f:54:28:4d:d7:1b:fe:8e:ea:00:13:
96:15:fa:f4:bc:36:bc:f4:bb:70:e5:c6:8b:2b:27:
22:7e:2a:40:8a:cf:76:20:61:da:39:d4:25:7a:82:
35:4d:07:06:b9:b2:a5:27:d1:53:7f:ee:f2:c8:37:
e2:9e:cc:79:b6:d1:c8:df:f0:c7:ab:87:f0:55:48:
3d:fb:70:dc:24:0b:71:77:d8:80:79:8d:fb:69:14:
82:4e:ca:d6:b3:d9:c3:77:5c:fe:0b:d6:8d:a8:fe:
8f:ac:3f:96:4f:0c:3f:8b:ad:1d:23:85:2b:64:1b:
c4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AB:1C:9E:01:CC:E9:04:39:E5:98:37:1B:FE:AC:45:88:BD:15:BB
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/2ascngHM6QQ55Zg3G_6sRYi9Fbs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.88.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:c9:46:75:d4:a8:b3:d1:4d:cc:01:e2:d7:e5:c6:85:73:15:
09:c3:ba:7e:d4:7e:05:62:24:5e:6e:ed:06:2f:a7:bf:24:c4:
8b:30:c8:ee:fa:cc:2c:71:58:f6:51:d1:d6:85:2d:73:fa:d6:
58:ce:02:08:6f:a7:ff:fe:c1:5b:20:7d:66:5c:a6:51:94:28:
db:f3:ca:a6:62:76:ef:fe:24:ba:68:a0:37:5e:48:c5:7a:13:
c3:32:bd:07:83:55:9d:3d:04:9d:cc:e6:d8:07:e7:0d:e5:a5:
5a:16:22:5e:f3:75:d2:6f:d8:c7:57:a0:f0:c7:2c:df:b5:b9:
83:e0:b2:73:d0:73:f8:cf:35:6e:a7:75:f3:06:4e:e7:38:26:
20:f0:93:1e:3c:b1:28:fb:21:8b:cb:17:58:36:fe:98:95:59:
a4:08:1d:db:9b:5c:50:de:ad:9a:14:f0:3b:0e:d7:49:fb:3e:
ac:ca:24:51:80:bc:05:8e:f8:03:95:19:b1:0c:31:d8:21:90:
fe:ce:73:d2:15:98:b2:e6:96:84:fd:12:8a:fa:eb:87:cb:03:
8d:49:8b:51:e3:2f:1b:fe:7f:09:e3:73:1d:5a:04:f1:64:18:
35:81:30:44:d3:ae:d7:0d:c8:62:44:bf:d9:07:d4:83:46:1e:
9e:3c:2c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org