Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/3CDp-LSMswTBEbYSqMZeUW66bco.roa
File: 3CDp-LSMswTBEbYSqMZeUW66bco.roa (raw, json)
Hash identifier: brvJDN3W1yje6nR6xdAIkw+bjDwismnk60E+PRhRsG8=
Subject key identifier: DC:20:E9:F8:B4:8C:B3:04:C1:11:B6:12:A8:C6:5E:51:6E:BA:6D:CA
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0CF9
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/3CDp-LSMswTBEbYSqMZeUW66bco.roa
Signing time: Thu 28 Apr 2022 05:25:31 +0000
ROA not before: Thu 28 Apr 2022 05:25:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38047
IP address blocks: 150.116.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3321 (0xcf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Apr 28 05:25:31 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DC20E9F8B48CB304C111B612A8C65E516EBA6DCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:68:09:31:e5:df:7f:59:04:0f:10:79:36:
b3:6a:c3:a1:a9:8c:51:30:7b:8c:8c:0f:6e:f8:84:
8d:fd:18:b2:f3:43:c2:25:14:c1:9f:2e:5a:42:db:
3f:55:47:bd:08:1f:1c:57:61:71:6f:69:06:38:46:
65:3d:b2:2c:bc:61:d6:88:ec:ec:73:72:4e:0f:57:
0d:fc:36:33:63:00:64:5c:00:6c:a2:bb:68:51:15:
2f:3c:a1:1e:3a:e5:71:1b:16:05:4e:34:7b:04:6a:
09:0a:b3:19:20:73:27:f8:77:8e:1c:5a:a7:3e:96:
25:84:9e:3f:2e:0f:a3:3c:63:ae:6c:3b:29:8a:8e:
e6:a1:56:09:6d:8d:47:c8:fc:8c:aa:5f:23:b6:8e:
67:6d:c3:dd:30:d7:3b:a3:86:14:82:b4:13:89:36:
b2:e8:11:65:7e:9a:5a:1e:68:b5:60:ac:c8:6b:6a:
a8:52:15:21:40:9b:21:c3:59:b9:78:45:52:ad:40:
c5:ff:4f:bc:2a:75:ff:38:74:3a:a4:b1:1f:69:06:
69:d9:75:66:44:42:c6:ed:98:92:ef:97:82:f1:09:
f0:01:a6:7b:84:ba:03:ff:d7:64:2a:f3:57:f3:ec:
7a:84:52:89:5d:f0:7c:5e:de:31:1b:48:da:5d:4e:
f0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:20:E9:F8:B4:8C:B3:04:C1:11:B6:12:A8:C6:5E:51:6E:BA:6D:CA
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/3CDp-LSMswTBEbYSqMZeUW66bco.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.5.0/24
Signature Algorithm: sha256WithRSAEncryption
16:15:83:5f:cf:35:5e:6e:66:2d:a5:49:4f:c1:6e:cb:88:41:
08:66:41:f4:a2:49:fc:fb:df:84:b4:43:42:42:48:ed:a1:68:
6f:2f:04:48:23:95:f6:b7:6e:43:6e:0d:d1:22:77:2b:ed:5b:
cc:fa:65:71:66:e1:e2:4c:dd:1e:08:34:46:23:61:32:cc:54:
e2:9a:a1:ad:ce:f4:e0:61:4d:7c:49:c8:a5:5f:f1:1a:eb:72:
b5:6a:7d:db:ad:9a:53:c4:21:b7:07:33:fc:d5:49:1a:ca:64:
3c:54:45:b6:02:bc:e8:96:7d:d5:2e:54:9b:01:43:14:d2:75:
2f:bf:d3:62:99:27:ed:c0:84:04:9f:6d:97:f1:84:3d:3d:0c:
25:19:53:b1:36:24:f3:59:e9:e4:ba:a9:1d:5d:d0:72:4a:f7:
b9:b8:36:a8:3c:f7:82:59:8b:41:5b:41:31:20:49:10:cf:7c:
bf:69:d1:3b:59:7a:b4:4b:fd:08:80:79:82:bc:71:5b:2d:c1:
20:ff:77:54:dc:d6:bf:0d:a9:6c:f8:91:f5:fb:97:74:f6:1e:
21:c5:49:28:92:10:bc:a7:70:bd:89:00:b6:3e:e6:72:92:cd:
4b:e2:f2:57:54:df:e9:bf:99:d4:fb:50:08:7c:5a:b6:21:53:
71:eb:02:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org