Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/7_q5zZgkhyfPZ4Lju9cQ4xqkaxc.roa
File: 7_q5zZgkhyfPZ4Lju9cQ4xqkaxc.roa (raw, json)
Hash identifier: uP/VtY7COw5P+o8E6G46MNVbOWlcIMP1FFi17SglRto=
Subject key identifier: EF:FA:B9:CD:98:24:87:27:CF:67:82:E3:BB:D7:10:E3:1A:A4:6B:17
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E08
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/7_q5zZgkhyfPZ4Lju9cQ4xqkaxc.roa
Signing time: Thu 29 Dec 2022 09:32:09 +0000
ROA not before: Thu 29 Dec 2022 09:32:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 150.116.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3592 (0xe08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EFFAB9CD98248727CF6782E3BBD710E31AA46B17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:17:1f:7b:63:6a:2c:cf:fe:58:f5:e5:b0:
c8:42:d0:1c:cd:5f:f2:80:1e:68:45:ed:94:18:1d:
49:58:1e:aa:b9:42:18:68:58:f7:71:20:b7:38:e5:
af:d5:00:4c:ba:71:de:4d:48:35:69:dc:ea:4e:ca:
9b:31:f0:2a:18:08:50:b4:c7:e6:71:98:14:e6:b3:
e9:f2:8f:b7:ba:38:c9:0b:9e:33:24:65:7f:cd:a8:
de:5b:d2:11:02:b7:f0:4f:f2:5e:7c:3d:89:0c:04:
3d:f3:25:35:0c:b3:dc:e9:f0:78:54:cf:0d:e3:19:
a4:37:44:17:7c:cf:84:1c:5b:84:e3:8b:e3:27:40:
c5:db:1a:b3:10:d9:42:fe:d9:a8:eb:f6:6a:c1:50:
92:c8:fe:6a:a2:2e:ad:b1:e2:63:a8:46:ca:1a:33:
a8:26:2e:c5:85:bf:f1:c0:22:e9:bc:01:4e:af:3a:
d8:b7:fc:09:93:26:2e:20:73:8d:cd:57:4e:d8:17:
4b:93:2d:d5:db:ad:26:c0:55:7f:38:13:68:f1:4b:
91:9b:ab:1b:1c:3a:f2:bd:c0:08:3e:9b:19:1f:b6:
f4:f0:53:bf:6b:49:5e:f7:55:e0:34:6f:75:dd:a1:
03:bb:11:08:61:82:a1:a2:d0:59:3b:78:25:d6:d3:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FA:B9:CD:98:24:87:27:CF:67:82:E3:BB:D7:10:E3:1A:A4:6B:17
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/7_q5zZgkhyfPZ4Lju9cQ4xqkaxc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.32.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:1e:e3:7a:99:ce:6c:e5:33:68:4c:e5:f3:84:c1:44:29:fe:
1c:69:a3:e4:c9:a7:91:69:f2:7f:9e:01:e1:a1:74:12:74:bb:
63:1d:b3:1c:51:3b:ca:9e:e7:b9:ac:54:b6:a5:0e:3b:28:bc:
52:fa:c4:6b:aa:39:1d:fc:0d:80:3c:3d:36:a4:41:e5:82:28:
54:19:19:5c:1a:eb:88:b7:5a:bd:f8:26:4f:d1:d5:48:42:94:
16:23:74:65:58:4e:bb:fe:b7:d7:f9:f7:7a:e2:1e:57:24:6b:
73:66:e7:2b:51:3f:12:ef:62:82:9d:a9:57:13:8f:c6:34:af:
51:9c:04:29:0b:e2:56:a0:ee:37:40:b4:05:51:f7:6c:0e:68:
3c:fc:72:cc:1d:ab:ef:60:18:5f:e2:d1:2f:4d:6b:d6:d5:cf:
41:07:f7:85:0c:c9:25:f3:dc:ac:96:47:d0:1b:7a:ca:ea:78:
ca:3e:f4:d2:d7:96:e1:e0:e3:40:cb:5e:e6:ee:0a:24:1a:d4:
e9:a9:cc:8e:5a:8e:ad:e4:f5:6f:f6:05:c3:94:7d:42:ff:45:
ae:81:56:f9:5f:e1:08:0e:ac:02:69:fc:a1:37:e1:3a:81:74:
e3:60:52:34:2d:60:18:a9:78:37:47:4b:59:aa:bf:4c:5f:1d:
97:1a:00:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org