Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/3g-zNxiANebyYWKRwVAt5wRk4zo.roa
File: 3g-zNxiANebyYWKRwVAt5wRk4zo.roa (raw, json)
Hash identifier: 8YE7iiEwhhJzuJIMW3Qt0uWNlLphic2M5UvLDo/svsE=
Subject key identifier: DE:0F:B3:37:18:80:35:E6:F2:61:62:91:C1:50:2D:E7:04:64:E3:3A
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 08A0
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/3g-zNxiANebyYWKRwVAt5wRk4zo.roa
Signing time: Tue 29 Sep 2020 10:02:42 +0000
ROA not before: Tue 29 Sep 2020 10:02:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17408
IP address blocks: 150.117.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2208 (0x8a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DE0FB337188035E6F2616291C1502DE70464E33A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a8:2c:6c:fe:a8:82:cb:1b:59:12:18:77:56:
8d:77:43:4a:b0:47:1b:97:aa:86:97:3c:69:45:ec:
6d:c4:7a:a2:1c:1f:81:bc:19:30:38:57:f0:da:26:
b5:7e:41:3b:91:58:65:6c:08:04:6e:a7:62:34:2f:
6a:d9:8b:6e:96:b9:ba:05:59:29:26:24:4d:67:8d:
eb:81:b3:55:a8:9c:42:ec:d4:22:91:fb:f1:97:03:
bc:b8:b4:11:29:9b:58:81:c7:05:2b:b1:3f:91:fd:
53:55:e0:91:1f:8e:5e:f9:38:7b:30:9c:90:89:f7:
40:34:1c:32:80:cb:75:27:a2:86:61:10:3e:ce:cc:
40:f9:dd:b5:7d:57:bf:82:0a:f5:26:68:70:9b:23:
cc:53:b5:80:d1:e7:5e:e3:26:e5:55:c4:4a:c3:c1:
04:f7:2b:4b:4a:89:7f:af:81:81:92:52:15:aa:7e:
6f:11:92:a1:c7:0d:0d:f6:0e:33:3f:53:6c:7e:62:
5e:79:b3:f5:c2:e7:81:f5:96:35:1b:0c:f1:91:18:
eb:3b:c5:81:2f:f7:a4:e6:cd:91:36:56:08:7a:f1:
d6:02:03:5a:f2:ae:b2:07:89:b4:42:91:b9:2e:0a:
ec:bb:e8:5a:fe:00:f3:5e:ce:eb:c5:44:7f:80:48:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0F:B3:37:18:80:35:E6:F2:61:62:91:C1:50:2D:E7:04:64:E3:3A
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/3g-zNxiANebyYWKRwVAt5wRk4zo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.128.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:03:89:8d:b0:dc:50:ca:19:05:d2:9b:ed:1f:75:c6:fe:cc:
04:ae:f9:c9:22:b5:76:0d:82:86:7e:f3:93:64:9c:b0:0f:1a:
23:f9:9f:fa:41:a2:f8:42:55:f9:8b:74:df:a3:93:e4:6a:45:
a3:b3:93:76:f2:56:8f:e3:66:00:7c:82:d0:46:57:95:6b:63:
ee:96:e6:80:4e:22:50:92:95:19:b2:aa:24:4c:17:0d:69:de:
ca:a6:36:cc:8e:1c:25:28:94:34:dd:72:cc:9f:1c:fa:76:06:
9b:c1:53:38:cc:ec:60:f4:9d:d8:c9:bc:a7:aa:ef:58:f7:b6:
d3:ab:d8:b5:f2:bf:34:d2:09:fb:13:32:e2:03:05:c8:26:ec:
a4:1f:c1:28:e7:a4:2e:c6:bc:cc:42:5c:c4:6d:1a:da:57:99:
aa:66:20:9e:fd:88:3f:d2:f1:92:89:6e:7c:6c:00:2b:f2:a4:
87:61:e4:e9:19:eb:b8:20:e7:4d:43:d9:81:c0:c4:72:70:33:
b9:8f:ed:58:53:5d:fd:1b:eb:c4:06:b9:52:90:b3:37:fc:2f:
9f:b4:38:a7:d4:ec:48:4d:9b:06:99:0c:4e:c3:6a:eb:f9:28:
62:f1:64:70:9f:23:ce:fc:ad:72:c0:2c:91:56:8d:ac:7d:79:
c7:68:a4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org