Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/4DVmX2KLQEINuj8LbeyhtNRX374.roa
File: 4DVmX2KLQEINuj8LbeyhtNRX374.roa (raw, json)
Hash identifier: C7tJiZu8Sk8wDZE7zbLD5RnIq1ryQDeewG4sexBXmnI=
Subject key identifier: E0:35:66:5F:62:8B:40:42:0D:BA:3F:0B:6D:EC:A1:B4:D4:57:DF:BE
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E19
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/4DVmX2KLQEINuj8LbeyhtNRX374.roa
Signing time: Thu 29 Dec 2022 09:32:14 +0000
ROA not before: Thu 29 Dec 2022 09:32:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10133
IP address blocks: 203.163.222.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3609 (0xe19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E035665F628B40420DBA3F0B6DECA1B4D457DFBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:e5:ae:78:29:be:87:0f:a1:58:e3:ea:4d:
cc:89:a6:e0:2a:83:94:8a:6d:82:c1:8d:62:cb:9e:
5f:de:66:ec:51:52:28:54:65:9b:b8:9a:5c:6c:92:
6b:2c:13:7c:42:72:3c:fb:81:92:d3:d2:bd:2c:7a:
7a:3e:21:5e:50:ce:bf:e9:a4:1e:ad:0a:89:e7:69:
84:21:e3:77:86:39:0a:80:ba:61:77:50:55:b4:af:
f0:3d:04:24:e0:e1:67:c5:a8:65:8e:2a:ba:ae:40:
01:52:e3:85:36:46:8c:3a:4a:5d:7b:09:02:4b:88:
8e:41:a3:71:1e:8b:2d:d6:6b:a8:d8:87:63:1b:17:
77:f6:17:f5:f4:d8:8c:ba:7f:49:85:2e:71:80:81:
93:45:c2:53:e5:92:b2:c9:5a:a4:92:00:2f:1f:ba:
7f:1f:e7:ee:2c:3b:85:c3:2a:07:2d:aa:ca:0a:12:
cf:f2:31:de:ae:68:25:c6:c4:4f:a8:d6:b4:b2:1e:
9f:b1:68:40:ae:a1:6f:0b:3d:c0:77:f2:f8:26:a6:
02:1b:ed:43:33:22:86:18:70:9f:8a:97:03:9e:13:
ee:75:d0:13:93:81:c2:be:27:0e:af:1b:d1:84:eb:
da:3c:e2:b2:98:e3:7d:5e:03:bb:9b:33:67:bc:00:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:35:66:5F:62:8B:40:42:0D:BA:3F:0B:6D:EC:A1:B4:D4:57:DF:BE
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/4DVmX2KLQEINuj8LbeyhtNRX374.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.222.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:03:36:b1:3f:95:bc:65:f9:0b:2e:30:1c:a4:3b:07:05:88:
8c:ea:79:72:92:95:f3:19:bd:d2:0d:18:ce:30:fc:51:3a:d8:
a2:69:9c:eb:64:c7:02:3f:69:ad:56:dc:55:06:b5:b7:a9:d7:
d1:71:4d:84:3b:d8:aa:a1:ba:72:92:52:dd:a3:83:0e:35:fd:
b2:48:07:63:8c:ce:a7:e3:b5:34:45:37:6c:06:16:23:8b:0f:
95:8e:9b:c9:d0:d3:36:10:ea:f5:00:7b:4f:3e:74:6e:dc:55:
ec:e2:1a:ad:a7:a4:73:cf:e8:9b:2f:45:a0:bb:c6:8a:8a:1b:
e2:8a:cc:11:a2:a6:93:c9:c9:7f:63:f6:41:66:c3:08:e0:2c:
ea:b8:6a:73:4c:73:77:b2:09:d1:d2:5e:c5:dd:c3:7a:19:cc:
3f:73:eb:9f:6b:d2:c3:ed:86:65:02:d6:0b:66:60:61:c7:0e:
96:ce:4e:d7:d5:fe:46:a5:0e:12:d1:f8:ba:68:cd:66:91:de:
d3:70:45:88:22:bc:b4:ac:e8:f4:6f:6e:40:75:0c:e6:1f:fb:
44:ab:0b:c6:f0:88:8f:a2:9d:cb:c0:82:70:ed:34:b0:00:ef:
bc:19:ae:92:84:53:6c:50:ae:e2:a1:d9:c7:0d:19:48:ce:6d:
02:e8:ce:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org