Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/2dxeIHledo2BJeNe8XovQfZLhTw.roa
File: 2dxeIHledo2BJeNe8XovQfZLhTw.roa (raw, json)
Hash identifier: FhkR/OFJ/LQ6aqF6bg9IlawKXmzPgzvGiOrySyfvF7o=
Subject key identifier: D9:DC:5E:20:79:5E:76:8D:81:25:E3:5E:F1:7A:2F:41:F6:4B:85:3C
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C18
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/2dxeIHledo2BJeNe8XovQfZLhTw.roa
Signing time: Wed 29 Sep 2021 02:39:02 +0000
ROA not before: Wed 29 Sep 2021 02:39:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 150.116.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:39:02 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D9DC5E20795E768D8125E35EF17A2F41F64B853C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:b7:fe:3a:77:c2:8b:e4:72:85:bb:a8:06:
86:b1:0a:d5:b8:0a:54:94:58:3e:54:c5:64:0c:b5:
32:74:7b:6a:84:c9:00:38:2f:19:bb:10:49:13:90:
92:b3:2a:29:20:6e:fe:80:48:90:56:d8:8a:d9:b1:
16:61:ff:c5:8c:81:44:46:17:03:0c:8e:d2:c0:c4:
a4:a3:f7:15:e3:9f:d8:4a:71:be:5a:77:f2:fb:7b:
5f:c7:f7:88:17:cb:60:63:a9:c9:6e:c7:f4:ec:2f:
28:51:69:a3:35:24:89:1a:8e:74:6f:2c:1a:56:14:
07:8d:73:14:33:6d:51:ec:86:b7:58:97:d2:c9:08:
49:90:29:55:ca:43:42:0f:b7:12:13:3d:49:58:7e:
c5:3d:e1:92:77:ef:bc:16:62:c6:92:10:03:b9:e6:
9b:dc:06:3f:c6:c9:78:a1:ab:f5:d4:bf:c4:e0:3a:
8d:56:ae:45:25:d4:69:38:46:36:fb:62:db:5e:f7:
a5:27:69:3c:e1:f8:c5:a6:d7:4e:9f:d6:44:fd:20:
f6:5d:e7:70:23:8a:11:4c:05:34:7b:ed:4e:be:25:
e7:53:fb:e2:c6:fd:bb:a9:b0:09:dc:e6:ad:6c:9c:
f7:a0:db:e8:7e:1d:9d:03:de:dc:f1:88:ac:13:1f:
d0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DC:5E:20:79:5E:76:8D:81:25:E3:5E:F1:7A:2F:41:F6:4B:85:3C
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/2dxeIHledo2BJeNe8XovQfZLhTw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.192.0/18
Signature Algorithm: sha256WithRSAEncryption
70:59:a5:62:35:c1:54:49:cd:ce:b5:a2:ae:81:df:fe:db:8b:
9d:cd:c1:d4:42:09:54:33:9f:2c:aa:08:fc:83:fc:e6:28:fb:
21:0c:69:bc:69:9b:a7:38:a0:6a:22:ec:20:5a:3f:3d:91:f4:
bd:91:4f:61:e1:95:c2:f4:85:4e:ba:47:55:d6:95:35:a8:ce:
a6:f8:67:f0:5f:c6:46:99:1e:39:78:fe:25:b9:5d:91:c7:4f:
99:87:37:b2:80:bd:71:b9:6b:27:be:d9:6f:04:dd:c9:f5:e6:
27:44:1a:2e:d7:b8:d7:8e:27:2a:6d:d5:e8:1f:47:f8:22:01:
fc:ae:51:56:5d:fc:1f:05:87:00:d3:ea:4e:dd:42:a7:43:78:
84:52:00:0d:54:7b:d7:59:db:8d:5b:29:c8:30:c0:12:7a:ed:
f8:fe:38:92:33:5f:30:64:75:2e:cb:83:fe:8a:4c:0d:68:c8:
aa:f9:c4:95:4f:b3:1d:c7:d5:e3:d3:b0:49:0c:a6:ef:6a:75:
71:85:16:e9:00:a2:0d:91:19:1d:19:ea:05:4f:92:be:fc:c4:
31:5f:a5:d3:c2:bb:27:d9:b2:38:66:4a:af:8a:26:0b:78:ab:
4b:ac:8a:8f:78:63:5a:7e:da:58:66:04:f0:77:fa:2d:8e:fa:
90:ee:44:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org