Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/87xmus-pPbeKeU8fTpaDSQoY80M.roa
File: 87xmus-pPbeKeU8fTpaDSQoY80M.roa (raw, json)
Hash identifier: rxiUL1yv4wk/w1ZX5MrMVLAF3559MgfVXwmi3/uHSLo=
Subject key identifier: F3:BC:66:BA:CF:A9:3D:B7:8A:79:4F:1F:4E:96:83:49:0A:18:F3:43
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0AE6
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/87xmus-pPbeKeU8fTpaDSQoY80M.roa
Signing time: Sun 07 Feb 2021 12:58:22 +0000
ROA not before: Sun 07 Feb 2021 12:58:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 223.26.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2790 (0xae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 12:58:22 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F3BC66BACFA93DB78A794F1F4E9683490A18F343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:38:31:f4:0b:cc:96:a4:5f:71:c9:33:2e:f6:
ad:f8:4c:74:28:92:96:43:57:be:4c:23:97:84:f1:
ec:73:ff:fa:e0:53:1b:fa:08:d1:47:42:b7:2c:16:
64:8c:05:c7:7e:6b:dc:0a:63:cc:2d:43:40:94:93:
76:08:d0:e4:0b:85:18:86:fb:74:e9:72:4c:14:30:
f1:ae:18:0a:d7:30:2d:fc:29:41:9e:8c:6b:4a:ea:
eb:69:78:b2:9c:d3:06:5c:4f:06:92:09:e5:3c:79:
37:2b:f5:af:e7:f5:2a:25:75:b0:8d:ba:c6:ce:da:
cd:36:e4:7e:21:be:c8:88:29:14:18:8e:46:3a:bc:
b7:83:f1:03:50:ac:ad:50:d5:64:b3:fc:d2:fc:b0:
05:28:c9:48:28:f5:bc:07:ce:b8:20:ee:0c:bb:62:
8c:8e:90:16:6c:b5:40:db:5c:ac:91:e3:c5:3a:0c:
aa:89:bd:cd:67:d0:f9:03:be:54:41:af:1f:2d:66:
59:ab:8e:96:77:a1:f0:ac:95:d8:87:bb:d0:ec:e9:
3d:3e:63:39:44:c2:0a:c9:db:d6:86:b7:1c:6d:49:
73:fd:01:5f:c9:06:25:37:0e:78:92:48:75:cc:54:
08:a4:78:a2:d4:4f:7a:47:ae:56:7c:00:04:43:2b:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BC:66:BA:CF:A9:3D:B7:8A:79:4F:1F:4E:96:83:49:0A:18:F3:43
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/87xmus-pPbeKeU8fTpaDSQoY80M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.112.0/20
Signature Algorithm: sha256WithRSAEncryption
59:7a:39:e1:54:e1:24:82:61:12:a6:ba:13:bd:46:f9:f4:13:
4e:7e:36:33:ec:1f:78:14:db:80:4e:12:f3:eb:11:53:7b:79:
f2:32:b4:8a:79:69:e2:3d:40:30:f4:b9:dd:bc:1f:96:0a:96:
9e:67:3e:81:55:b3:50:56:8a:b7:66:10:ac:8c:ed:d2:4c:85:
ef:f5:a0:46:43:57:53:17:22:b0:b6:25:fa:e0:1c:fa:f0:0d:
5d:df:33:4f:35:90:74:53:c1:dd:e5:cf:aa:c8:af:ec:5c:f6:
c5:bc:6e:1e:a2:91:72:e1:ac:35:f1:2e:af:60:be:97:28:f5:
f8:f0:cd:88:d3:0e:0f:96:14:2e:da:cd:3c:86:d9:d3:61:3c:
20:6d:fd:26:e6:75:27:0b:84:3d:ec:c7:1e:93:d3:ea:78:87:
8f:de:ed:4b:ef:d1:b1:78:15:ec:d5:db:9d:3e:55:c1:00:66:
cd:1b:e0:08:5d:6b:ad:63:f1:81:77:3d:5c:87:c4:eb:60:83:
34:5b:fe:4c:24:7f:ec:d2:3a:81:c5:3b:8b:ad:5d:c2:9b:0f:
95:a2:c5:66:17:78:cc:51:a0:e9:5d:d0:d3:c1:f3:da:7f:98:
ba:89:60:5b:07:1b:52:29:30:02:65:96:6e:e3:7e:6a:9a:eb:
34:71:0a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org