Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/52pBNNdO0KyhGT7OwSDW6neZefw.roa
File: 52pBNNdO0KyhGT7OwSDW6neZefw.roa (raw, json)
Hash identifier: jKkImO+m7FomFYAICP3S4PlJQlfW2Nh59bGz9I3b5wg=
Subject key identifier: E7:6A:41:34:D7:4E:D0:AC:A1:19:3E:CE:C1:20:D6:EA:77:99:79:FC
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/52pBNNdO0KyhGT7OwSDW6neZefw.roa
Signing time: Thu 15 Sep 2022 02:39:19 +0000
ROA not before: Thu 15 Sep 2022 02:39:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10085
IP address blocks: 203.163.194.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E76A4134D74ED0ACA1193ECEC120D6EA779979FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:91:2e:54:0a:40:4b:e8:e3:9a:df:26:5e:
5e:62:e1:04:d2:c7:eb:cf:f6:fa:a8:94:e7:7f:6d:
f1:41:67:70:6c:38:b3:81:30:b5:3a:a3:3a:ed:6e:
77:81:57:25:ac:e0:36:af:36:17:70:80:93:4d:8b:
f7:26:67:11:2b:b9:ab:c4:68:28:fc:66:f4:e4:83:
02:07:56:4d:f6:bf:6d:cf:7f:bd:b0:24:60:ab:47:
7a:b6:7d:a4:a3:7d:a0:3a:8b:7f:be:d8:40:c9:fa:
1c:30:f1:6c:86:0e:1c:5f:bb:ac:b0:ad:27:8b:c4:
dd:f8:a5:f5:b7:3c:f0:35:a7:f1:21:66:a2:97:bc:
65:ce:c9:d1:dc:94:40:5c:5c:d0:35:bd:3b:5e:84:
0e:92:97:7d:72:84:3e:be:53:de:3e:e0:de:5c:8c:
b3:2f:2c:88:45:43:01:90:0b:15:8e:ea:b4:5b:cb:
a2:de:2f:cf:23:d7:45:12:f8:07:5c:0e:26:01:a7:
41:c4:31:0a:0b:96:f5:2c:a1:c6:fe:35:0e:26:6b:
fb:e1:1a:3e:bc:d7:df:97:91:20:6a:9e:90:84:c0:
5b:b3:29:cf:15:f2:db:5a:b7:fa:df:fa:9a:e9:10:
3d:ad:53:f0:0d:f1:0c:3c:12:7f:4b:06:2f:25:89:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6A:41:34:D7:4E:D0:AC:A1:19:3E:CE:C1:20:D6:EA:77:99:79:FC
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/52pBNNdO0KyhGT7OwSDW6neZefw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.194.0/23
Signature Algorithm: sha256WithRSAEncryption
39:93:76:d8:ab:b1:45:3e:5e:58:16:0f:02:22:49:a7:de:35:
6a:2b:0a:3b:4e:e9:f9:e5:d8:bb:63:b1:e9:65:57:b3:39:6f:
5e:22:e8:9a:8b:7c:03:4f:8a:c7:99:21:07:1c:c6:9e:0b:4a:
cc:b1:35:cc:a7:5a:9d:00:09:3a:a2:dd:d1:3f:20:e8:b2:f2:
ae:37:bd:91:c5:68:3a:10:9b:0b:10:ff:7e:11:94:e3:08:0c:
08:18:82:d5:e2:57:b4:83:95:0d:7c:76:47:e9:ef:d6:bf:7a:
8f:4c:1e:4d:69:c7:5a:48:42:97:7e:98:f0:78:7d:2b:c9:4e:
da:8e:f5:7c:10:88:69:67:28:08:7b:99:df:58:50:7d:95:4f:
c9:f6:5c:fb:61:52:64:b4:c8:fc:be:68:84:ac:ec:1c:29:bd:
50:7b:37:66:5d:66:90:b0:d6:80:a1:02:c2:92:bb:0c:d4:a2:
c7:26:2d:08:51:16:88:e5:7a:48:a5:12:0f:13:30:c3:05:7c:
f9:4e:33:31:41:dc:e8:86:37:4b:fd:3e:f7:6c:92:b0:57:3a:
c7:1a:bc:d8:ce:7c:a0:96:f7:7b:11:4e:a9:59:e1:05:93:35:
78:08:83:bc:24:bd:98:a2:7c:ce:2e:6a:bc:03:e0:b4:f4:14:
16:4f:86:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org