Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/48mIwCxhTzFaCBjEi0x4ImRWAVw.roa
File: 48mIwCxhTzFaCBjEi0x4ImRWAVw.roa (raw, json)
Hash identifier: bXHSvCwFxEQOGgCW9gr0y2ktzfr6K3GsKrI5pjmMwnY=
Subject key identifier: E3:C9:88:C0:2C:61:4F:31:5A:08:18:C4:8B:4C:78:22:64:56:01:5C
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 087D
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/48mIwCxhTzFaCBjEi0x4ImRWAVw.roa
Signing time: Tue 29 Sep 2020 10:02:30 +0000
ROA not before: Tue 29 Sep 2020 10:02:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18419
IP address blocks: 150.117.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:30 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E3C988C02C614F315A0818C48B4C78226456015C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5d:38:72:d4:70:64:30:10:ce:09:97:05:1c:
fb:2a:ac:fd:4e:7f:a7:58:eb:9d:8c:a2:7f:08:6d:
c1:b8:9b:f1:87:01:c7:02:44:e4:d6:82:f9:42:0e:
d1:ca:eb:11:6a:c9:00:0a:f0:b3:55:43:5a:93:89:
af:f1:f8:f8:c7:22:34:3d:9f:c9:5b:34:e2:38:49:
85:8e:72:9e:45:d3:cf:06:d0:32:19:94:3d:a0:ba:
9a:cf:ba:1c:90:0c:ab:43:bc:7e:dc:5b:46:ef:6d:
33:be:36:fa:46:f6:44:e3:8b:69:82:4f:92:67:6e:
a2:40:a9:11:37:eb:9c:16:a7:96:c4:4e:61:5c:8e:
73:77:b0:5f:56:96:7f:c3:b6:b1:ba:8d:db:e2:78:
7e:d5:cf:ca:20:80:1b:eb:f5:df:47:3d:8c:79:ff:
5d:0c:89:66:d4:cd:d2:e5:23:92:48:b5:d7:39:00:
13:9a:d1:c6:fc:0d:a4:89:fe:ea:03:0c:2d:fd:56:
65:85:3c:aa:51:d5:eb:09:0b:c7:b8:40:5d:f5:ec:
22:14:cd:b0:0c:31:16:6a:31:44:f1:81:69:7a:c7:
85:6b:c1:a3:51:10:7d:43:9a:9c:05:f4:2c:36:94:
90:70:51:d9:49:65:db:77:d2:e4:f4:6f:83:d1:d7:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C9:88:C0:2C:61:4F:31:5A:08:18:C4:8B:4C:78:22:64:56:01:5C
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/48mIwCxhTzFaCBjEi0x4ImRWAVw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.16.0/20
Signature Algorithm: sha256WithRSAEncryption
13:fe:05:97:d9:ad:96:c3:ed:c0:b5:a7:a8:2a:2c:41:5f:3e:
55:ab:f8:d4:bd:01:23:37:94:fe:81:2e:b0:ec:06:3b:aa:2e:
26:b8:d5:e1:95:f8:26:50:08:46:ec:19:92:0d:5b:dc:fc:a7:
bc:dd:96:61:7c:7d:2c:6f:00:09:0b:84:5c:8c:c3:23:84:5a:
b4:45:f4:70:fd:5f:eb:fb:a3:23:ad:07:53:85:4a:63:34:32:
fb:07:9f:92:d1:bc:78:c3:94:51:f5:76:98:5f:30:6c:32:dc:
1c:08:b1:b4:d4:b8:8f:56:07:0b:9f:3c:36:aa:5d:a4:39:b8:
ae:53:d7:a9:81:63:23:08:7b:3d:c7:b9:c8:9f:95:9f:3e:68:
96:f9:57:23:7e:8f:b9:1e:dd:71:b2:93:81:ae:15:18:3d:39:
ab:0c:63:97:6f:87:ff:60:69:f5:17:22:5d:04:84:1f:57:77:
b4:e9:3f:dd:a7:fa:7d:22:48:64:f0:2e:bd:e4:c6:44:94:88:
da:26:7b:c1:4f:e2:22:13:15:89:58:ce:5e:a1:77:37:0f:cb:
10:89:6c:44:bc:95:19:34:f8:57:8b:d6:8d:fb:0e:43:d7:f7:
0c:2e:78:04:a7:14:e6:ff:d3:eb:66:00:50:5b:d8:a1:09:c5:
ad:ef:04:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org