Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5o0io0AeGham8Gr4joUGX5ycpFU.roa
File: 5o0io0AeGham8Gr4joUGX5ycpFU.roa (raw, json)
Hash identifier: ypPsgFC5i/1zr5H2VpXU2v7hrHVsNb1QCbeoV9KWQXU=
Subject key identifier: E6:8D:22:A3:40:1E:1A:16:A6:F0:6A:F8:8E:85:06:5F:9C:9C:A4:55
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0A70
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5o0io0AeGham8Gr4joUGX5ycpFU.roa
Signing time: Sun 07 Feb 2021 11:49:47 +0000
ROA not before: Sun 07 Feb 2021 11:49:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2672 (0xa70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:49:47 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E68D22A3401E1A16A6F06AF88E85065F9C9CA455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c3:2b:c5:28:1d:18:eb:69:1e:1b:0e:3b:29:
c1:79:d9:6c:d4:20:0e:ec:8f:5b:ef:c0:3f:47:0b:
1a:b6:85:e6:ff:cd:5e:bd:07:2e:64:a4:0b:bd:ab:
93:bf:b5:84:8f:3a:8a:bf:95:90:83:cb:5b:ef:4e:
f5:45:9e:32:f7:e6:89:5e:7e:87:1c:6c:e3:ab:ea:
68:ce:9e:88:5f:97:20:b2:63:e6:c6:9a:b7:ab:3c:
8a:93:9e:53:e2:8c:73:49:55:f2:bf:69:bf:bd:a4:
27:ee:5d:67:43:d7:d0:9f:05:cd:63:65:60:61:9f:
9b:e6:b1:05:77:93:74:f6:9f:2a:c3:ec:35:4f:67:
1e:0e:44:eb:0f:3a:77:b6:77:72:95:9c:75:b5:49:
ab:41:38:e3:c3:ec:91:0b:59:f4:7a:42:44:3a:28:
a4:ae:ae:d3:50:51:8d:bb:03:a6:3e:25:21:0b:70:
c5:f9:2a:f0:3b:c8:50:67:57:63:a1:61:80:a1:22:
7b:94:a5:d4:e9:f5:45:0d:15:21:bd:ca:ec:8a:0c:
21:09:c3:05:08:32:53:4c:15:81:e1:4e:fb:27:c8:
45:4a:00:7b:24:ca:61:8f:df:bc:ca:dd:27:48:4e:
10:73:07:71:d7:a7:c3:f3:47:bd:77:01:ec:12:ba:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8D:22:A3:40:1E:1A:16:A6:F0:6A:F8:8E:85:06:5F:9C:9C:A4:55
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5o0io0AeGham8Gr4joUGX5ycpFU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.84.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:3f:8c:19:5f:68:6f:41:29:5e:e2:63:db:db:42:b1:41:5f:
2b:0e:e8:e4:6b:44:4f:23:b8:ee:25:46:92:6d:4d:a3:44:fc:
43:5a:0b:9a:1f:ef:ae:92:da:7c:20:08:c3:70:02:3c:91:67:
13:79:81:6e:f2:0c:75:5e:a7:8f:3e:9f:26:dd:c6:12:d9:be:
05:e6:5a:80:9a:a6:47:81:37:f6:b8:93:e0:01:52:34:64:94:
56:50:40:45:2f:e4:ce:32:ca:4a:d0:7d:5e:12:e2:52:2f:7b:
4f:49:46:dd:36:59:48:de:86:f2:2c:ba:6c:c9:17:ce:e6:2b:
c4:76:b2:eb:46:e0:df:04:a1:0b:83:a1:e9:1f:9a:4d:2b:b8:
90:c1:43:00:2d:44:04:ef:95:5f:53:fc:0d:c1:9c:62:96:90:
9c:9e:7a:43:af:e0:46:0d:3b:08:00:1a:26:88:93:a0:2c:ec:
a1:9b:f1:1e:09:18:53:91:9b:c0:c8:7d:32:50:27:64:e3:f8:
59:d1:06:04:b4:47:45:b0:20:88:d7:0e:d7:5a:08:a4:d3:93:
a8:a3:c4:8c:68:2a:33:9c:20:09:4a:9a:6b:e6:aa:e1:7e:eb:
32:39:e8:7b:23:6c:9e:5d:b8:ef:68:a0:3d:a9:bc:36:b9:ad:
b6:1b:00:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org