Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/7sGLXyL1YldKlGUXBDwQwWIbBRQ.roa
File: 7sGLXyL1YldKlGUXBDwQwWIbBRQ.roa (raw, json)
Hash identifier: Rt+k7GiSCGU3rR320vFHTpvyt2qE15xrwFGsvVskzqU=
Subject key identifier: EE:C1:8B:5F:22:F5:62:57:4A:94:65:17:04:3C:10:C1:62:1B:05:14
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0AD4
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/7sGLXyL1YldKlGUXBDwQwWIbBRQ.roa
Signing time: Sun 07 Feb 2021 12:42:57 +0000
ROA not before: Sun 07 Feb 2021 12:42:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17408
IP address blocks: 223.26.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2772 (0xad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 12:42:57 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EEC18B5F22F562574A946517043C10C1621B0514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:b4:1a:ae:ee:1d:31:67:67:64:d8:a0:cb:
81:7e:ac:c0:7a:2c:32:68:e3:67:69:85:4a:7e:ba:
cb:7a:d5:a9:eb:c1:93:95:02:da:5f:93:14:27:0c:
ed:ff:29:eb:73:c1:66:86:c8:48:74:2e:ad:8d:cc:
e1:d0:32:15:c4:12:c0:0f:f9:b5:43:d4:c8:67:05:
43:33:df:2c:7b:5c:6b:32:b5:87:90:4b:b7:f0:20:
94:c1:46:94:28:de:de:0d:d7:b2:32:bb:9c:9e:0a:
dc:76:10:68:e4:11:2d:c9:1f:b8:6a:02:c3:88:65:
19:6a:1a:7b:c6:75:69:8a:e7:48:c6:07:ce:f7:ea:
88:42:9c:71:22:c8:9e:75:14:a8:99:81:65:fa:e7:
83:6d:ac:27:dc:a9:88:56:73:bf:33:66:ed:98:b7:
ac:5b:05:9b:93:18:b6:0f:1f:46:2c:82:69:13:7a:
91:54:c1:39:73:20:54:ca:13:9b:1c:db:67:cf:b5:
7b:5b:19:08:ad:67:53:ac:91:e2:53:75:0e:4e:46:
0e:53:42:cd:93:01:04:32:0c:6a:f4:f4:ae:56:0b:
5b:54:39:e1:4c:d6:06:1d:5d:24:21:a0:d0:13:4f:
c8:27:d9:be:c5:89:cb:fb:f4:72:a0:07:1e:05:5c:
25:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C1:8B:5F:22:F5:62:57:4A:94:65:17:04:3C:10:C1:62:1B:05:14
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/7sGLXyL1YldKlGUXBDwQwWIbBRQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.70.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:32:b7:c3:f8:55:9f:06:1c:5e:97:94:ee:e4:63:aa:f5:7b:
6b:c4:68:a0:36:48:07:e5:39:d8:e9:c0:31:2b:f9:de:ba:2e:
d2:29:c3:12:ec:ef:49:55:42:7d:fd:78:cd:8f:b9:f8:bb:0c:
f6:bb:a9:a3:c3:8c:2c:dd:8c:5b:e7:d7:6a:e3:27:84:c0:13:
84:df:8e:e4:b5:32:f0:a1:68:a3:8e:e7:9a:f5:37:f1:a0:b1:
c2:ba:d5:a0:21:29:0b:78:06:51:18:c2:c6:98:1f:59:7a:36:
58:3e:45:55:f1:2e:16:3b:4c:a7:bd:bc:5c:93:0e:3e:05:fd:
5f:81:1d:a8:70:57:13:66:13:1b:b3:5c:17:1e:82:3b:94:d1:
94:5a:79:b0:54:e3:45:d1:92:c7:6c:a5:ad:f1:1d:59:00:c1:
0e:7f:78:71:96:28:c1:25:aa:87:06:30:11:de:9c:e8:ea:08:
60:8b:b4:73:9a:3f:77:ee:f0:8a:7f:6a:4e:a9:71:79:bb:f7:
52:a6:37:ef:87:10:40:27:3e:ae:49:ab:c2:c9:ff:ac:3e:c8:
9c:d0:52:ed:58:e2:8e:d1:ce:08:05:42:1e:8f:ef:33:12:10:
d9:3c:f0:cf:ed:75:3d:95:27:df:d7:b9:c8:76:a5:6f:f0:4b:
38:38:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:11 2025 by rpki-client