Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5qAjM8TJqCeHm-HsEy_gmuLMA3E.roa
File: 5qAjM8TJqCeHm-HsEy_gmuLMA3E.roa (raw, json)
Hash identifier: fY/VWTXsf7lyG2IAMxGcgOJDISdhoIknOzeqXkAxKmc=
Subject key identifier: E6:A0:23:33:C4:C9:A8:27:87:9B:E1:EC:13:2F:E0:9A:E2:CC:03:71
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5qAjM8TJqCeHm-HsEy_gmuLMA3E.roa
Signing time: Thu 15 Sep 2022 02:38:59 +0000
ROA not before: Thu 15 Sep 2022 02:38:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 118.150.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:38:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E6A02333C4C9A827879BE1EC132FE09AE2CC0371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:95:42:2b:e8:79:11:c9:da:67:d0:1b:ee:
7a:9d:6f:3c:89:64:54:d4:43:81:a1:88:f3:d2:11:
b1:90:9b:00:43:76:ab:6b:5e:20:7b:e0:78:28:27:
3a:24:3e:06:66:b7:87:a4:3c:d8:ac:44:bd:97:9f:
84:85:fa:45:f8:ec:7e:a1:67:5c:8b:4f:a8:39:29:
9f:f7:62:98:9a:32:0b:d1:ad:74:2f:86:9c:48:f0:
eb:b0:bf:d0:5f:ef:83:b1:74:a6:b4:de:81:ac:4c:
84:77:a4:34:d3:43:44:69:40:11:7a:17:3c:30:da:
17:42:97:db:78:c3:75:45:c6:74:06:aa:a1:ed:b3:
7b:66:81:1b:ca:27:e3:83:ce:b5:57:b0:be:bd:b2:
18:3d:18:af:5b:5a:90:a0:3a:65:88:7e:b2:cb:61:
6e:5c:6c:54:a0:09:d5:c5:9c:2d:2f:9c:6b:60:0f:
52:bd:27:92:13:0e:92:8e:46:f7:af:35:78:d7:c6:
df:93:51:e6:e7:34:33:e1:1e:f9:d5:75:67:7b:df:
91:64:e7:f1:fc:13:a7:bf:f8:94:56:31:b4:21:27:
87:6c:9c:f1:d4:a8:31:9c:09:f7:45:52:5e:c0:48:
63:55:e3:cd:2d:97:68:33:82:e0:7a:84:3c:cd:a7:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A0:23:33:C4:C9:A8:27:87:9B:E1:EC:13:2F:E0:9A:E2:CC:03:71
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5qAjM8TJqCeHm-HsEy_gmuLMA3E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.128.0/18
Signature Algorithm: sha256WithRSAEncryption
29:77:9d:a8:73:86:65:ef:9a:bb:58:fd:cd:90:47:0b:69:8a:
cd:5c:97:08:78:52:da:4c:7b:8a:7b:b9:d4:87:25:bf:11:29:
78:4b:6c:b2:55:21:bb:89:11:1f:05:dc:54:5d:a6:2e:b3:cb:
33:7a:34:bd:b8:c9:df:2a:a6:0f:8d:fd:d8:34:65:94:01:81:
09:ed:a2:a1:8c:7a:ec:15:25:16:d2:8c:b3:11:b8:67:3d:a6:
f6:ff:5a:86:8f:af:2f:93:54:33:c0:75:8e:90:0f:16:c0:e0:
14:df:26:63:42:23:92:0e:58:17:f8:d3:c0:b8:4e:59:0d:74:
48:ef:29:18:ed:df:c9:6f:e6:30:72:0b:c3:61:0c:72:3f:9c:
0c:37:e5:f0:f3:54:92:17:05:87:6c:b4:ba:77:5e:c8:02:18:
c7:b7:4f:22:de:06:5c:c3:e4:9a:b8:9c:05:94:c6:3c:d9:5b:
ec:c7:f6:3d:95:56:33:13:91:ca:d1:e7:56:ab:09:32:81:7c:
15:06:23:6c:8f:1d:07:0b:db:8d:02:13:72:e5:80:b0:c4:90:
74:47:5d:13:22:45:c0:b6:1c:27:33:7e:c9:ca:4a:35:68:d7:
04:08:52:bb:1f:8d:ba:96:aa:6d:db:40:20:79:be:63:1d:3f:
dd:72:70:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org