Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/7X9oOXdnDq7Fey7HftKKk-mxuVk.roa
File: 7X9oOXdnDq7Fey7HftKKk-mxuVk.roa (raw, json)
Hash identifier: eEH54tPM0/hf+HoZ1ZrcH8knZ/4bi+m5ze1EpCUJNYA=
Subject key identifier: ED:7F:68:39:77:67:0E:AE:C5:7B:2E:C7:7E:D2:8A:93:E9:B1:B9:59
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0897
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/7X9oOXdnDq7Fey7HftKKk-mxuVk.roa
Signing time: Tue 29 Sep 2020 10:02:40 +0000
ROA not before: Tue 29 Sep 2020 10:02:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7532
IP address blocks: 150.116.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199 (0x897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:40 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=ED7F683977670EAEC57B2EC77ED28A93E9B1B959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:10:f4:16:9e:86:b4:97:f7:c9:50:38:4e:
a1:71:3b:98:08:77:d9:e6:12:75:32:a4:ad:64:6c:
d5:3f:20:1b:50:8d:69:60:22:d8:24:b1:28:d2:6e:
46:f2:40:d3:7c:11:70:b8:cd:b3:ab:d4:56:19:ac:
8c:b6:5c:84:71:fc:70:ff:af:76:d5:11:0f:ed:79:
10:df:53:dd:86:c5:35:a7:2f:af:ca:2c:73:d3:da:
5c:7a:9f:68:97:9a:17:32:4e:8f:d2:19:b7:e0:96:
e0:6f:a4:ea:9f:76:77:dc:b5:18:51:97:52:08:2d:
58:16:4f:6a:76:5e:e6:9d:35:02:d6:85:30:30:99:
39:bd:c7:e5:fd:bb:17:14:13:9a:e0:d4:f6:b3:b5:
93:5b:b1:38:8a:8f:7e:b1:53:9e:87:a6:1c:3b:ce:
c1:92:42:bb:7d:d1:fa:b4:62:d4:83:97:3a:2b:de:
2c:f5:d0:b4:35:da:a1:eb:fd:62:16:a9:52:6f:79:
f1:50:b1:ba:ea:15:d6:68:e3:48:7c:19:5e:0f:ca:
c9:1d:05:69:06:ad:8b:4b:b9:e3:18:78:c0:30:0e:
15:0f:99:ea:b9:fd:fe:6f:29:a0:bc:9a:22:96:24:
63:90:db:97:c0:f4:49:79:b8:ea:a3:66:14:2d:17:
11:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:68:39:77:67:0E:AE:C5:7B:2E:C7:7E:D2:8A:93:E9:B1:B9:59
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/7X9oOXdnDq7Fey7HftKKk-mxuVk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.56.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:fb:3d:0a:e7:b1:50:d8:49:f4:95:3b:6a:49:43:c0:c1:06:
fb:9b:95:18:e3:29:85:00:4e:f8:13:28:d1:6b:d7:6f:13:05:
35:a7:c7:66:81:60:73:35:b0:c8:e0:07:66:a1:6d:65:53:eb:
92:72:29:21:03:87:c7:ce:fd:8b:6d:2d:31:b3:50:62:29:84:
7c:52:c1:25:2c:14:42:e7:30:be:f5:77:23:b5:24:c8:d0:b5:
e3:f7:7e:31:04:84:35:27:0a:35:fc:60:cc:76:9d:3b:96:07:
7b:af:7b:f0:b5:5d:f3:c1:6d:ab:d7:4a:0e:e5:76:92:b8:b7:
47:d5:c1:5f:c8:0f:45:9a:4b:28:85:91:7f:04:19:16:eb:c6:
f7:45:e4:c3:80:3c:44:dc:6c:52:d5:32:ee:c3:ab:b2:78:63:
71:5b:3c:cd:16:ba:fd:0a:1e:e7:e0:16:bc:9f:66:71:48:a9:
60:fb:20:10:d6:45:9e:0a:65:15:b0:9f:bf:d9:73:09:8b:12:
e0:7c:43:3b:58:b1:b5:4f:c0:bb:da:e3:1a:06:c4:cd:75:fc:
75:39:9e:d3:c4:1e:db:db:5f:60:6c:22:6f:d3:71:51:ca:c6:
8b:f2:b4:f5:f9:5d:f9:72:28:b4:1f:84:97:72:03:ce:d7:5d:
ee:2d:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org