Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/2hobTpsUCgYUbujnRoO6nlxbjzc.roa
File: 2hobTpsUCgYUbujnRoO6nlxbjzc.roa (raw, json)
Hash identifier: c1K33Y0M8wDU7DrgRcCxQRBJQnd2aWmBKKj2vMnBFxk=
Subject key identifier: DA:1A:1B:4E:9B:14:0A:06:14:6E:E8:E7:46:83:BA:9E:5C:5B:8F:37
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/2hobTpsUCgYUbujnRoO6nlxbjzc.roa
Signing time: Thu 15 Sep 2022 02:39:24 +0000
ROA not before: Thu 15 Sep 2022 02:39:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 150.117.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DA1A1B4E9B140A06146EE8E74683BA9E5C5B8F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:69:24:8c:c8:c2:6e:82:53:7d:d9:cc:f1:
ff:94:e9:2d:9c:10:96:6f:c6:2d:d5:68:14:7a:ad:
4e:d2:c7:b2:b6:bf:1f:80:a8:8f:e7:0e:06:94:89:
f6:92:07:71:d9:dc:e9:e8:2b:37:a6:ac:4d:87:24:
7e:c9:c1:62:00:36:0b:fe:06:4b:78:62:d6:39:3e:
7d:40:49:57:69:35:29:d5:28:e6:15:cb:f6:69:ff:
8f:2f:6a:88:25:08:17:24:8b:ef:dc:d7:c9:8f:f5:
ae:c4:eb:ee:9c:44:5b:d7:b0:77:4e:62:cf:db:96:
92:f9:1e:bb:fb:3e:62:41:a6:01:39:a1:d2:a7:7b:
ba:b5:f0:3c:7f:68:31:c2:ab:cf:01:e3:d5:d4:64:
b8:5c:37:ca:94:24:6a:15:02:06:06:ca:91:4c:5c:
cb:7d:4f:db:77:18:2c:21:9e:6d:14:6c:b5:9b:fb:
96:a2:34:fb:05:5b:69:6f:3a:14:7c:ad:3d:e4:8c:
b1:bf:d6:92:63:93:7d:b1:de:4b:e8:05:da:4c:cf:
0d:eb:b5:43:1c:ba:c8:ca:e4:15:bb:f4:1b:43:75:
6d:62:e4:a2:06:d6:68:ac:3f:13:61:0b:a8:ee:09:
9d:b1:c6:b4:ac:25:eb:dd:90:5b:68:1e:fc:f9:6d:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1A:1B:4E:9B:14:0A:06:14:6E:E8:E7:46:83:BA:9E:5C:5B:8F:37
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/2hobTpsUCgYUbujnRoO6nlxbjzc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.0.0/20
Signature Algorithm: sha256WithRSAEncryption
66:c3:5f:7b:1f:a1:a5:66:a5:f2:cb:a7:10:a4:04:75:26:5c:
79:56:e3:82:c5:b5:2e:4a:16:b0:04:9c:59:da:6f:85:06:f9:
06:d9:0b:71:be:0b:66:59:06:19:df:ac:ae:0a:26:a1:50:3a:
17:b5:69:44:63:11:44:f6:4e:a1:53:11:e9:5b:0c:06:d4:69:
7c:af:6d:1c:bc:5c:f1:30:a0:74:f2:5c:51:ac:2e:46:96:4f:
57:b0:dd:65:10:e9:e2:6e:30:58:96:cd:d4:e3:59:9b:92:1d:
da:70:c2:49:76:cf:c0:7b:66:05:1c:26:76:68:95:71:70:4b:
cc:7c:50:bf:15:6d:cd:62:f0:7e:0f:b0:72:66:29:b4:f1:0a:
21:53:9d:d1:dd:8c:f4:7e:c9:59:f9:fd:08:54:f3:64:1a:a9:
99:7e:8a:47:8f:77:a6:fb:97:d5:b2:7b:c2:14:8d:76:e9:2f:
2d:b0:fa:54:85:b3:a4:7a:20:e6:55:04:a4:ea:6a:69:3c:8d:
21:15:b4:b5:39:62:ab:c2:02:96:48:b8:35:41:b1:63:34:64:
66:ba:bc:2e:fd:c5:c7:0e:d0:b2:73:97:54:d4:c3:0d:27:91:
a1:a3:84:d9:fc:df:bb:6d:c9:c8:91:11:f3:e3:53:10:fa:52:
47:dd:1c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org