Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8FfDevhE_EyVQAo4ecXHyUt5J-g.roa
File: 8FfDevhE_EyVQAo4ecXHyUt5J-g.roa (raw, json)
Hash identifier: 2Q3L6v+DNLaUK8tUtBD0aNAcNWmssNwJvdZzVAPmmDo=
Subject key identifier: F0:57:C3:7A:F8:44:FC:4C:95:40:0A:38:79:C5:C7:C9:4B:79:27:E8
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0AF2
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8FfDevhE_EyVQAo4ecXHyUt5J-g.roa
Signing time: Sun 07 Feb 2021 12:58:52 +0000
ROA not before: Sun 07 Feb 2021 12:58:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9922
IP address blocks: 118.150.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2802 (0xaf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 12:58:52 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F057C37AF844FC4C95400A3879C5C7C94B7927E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:27:c2:ee:85:98:91:3d:93:1e:9f:d4:4c:
e0:18:99:5d:95:14:de:74:84:6f:41:37:58:3a:83:
f4:41:f1:f6:58:a7:6a:49:82:8b:ef:35:80:86:92:
ba:ae:6d:a5:7f:c9:3d:8d:df:06:cb:db:ba:08:e3:
32:17:3a:c0:8c:0c:14:fa:a7:20:fb:78:fc:e5:8a:
04:8f:37:71:b2:e2:f0:93:fd:bc:a6:62:6b:9b:75:
11:c7:27:01:a5:bf:49:ba:ae:c3:fd:03:cc:e7:06:
93:68:27:20:15:2f:d3:7b:01:95:cd:60:c2:24:3a:
87:bb:8b:8b:d7:0e:5d:3d:fc:5f:89:79:1f:56:6d:
c0:6c:0f:33:f9:f2:dc:de:5e:a2:c8:d6:77:27:69:
12:ac:f4:1f:22:05:98:b4:9d:7a:fe:e6:1c:f5:a3:
1b:5b:71:66:3c:9a:3c:84:2a:7d:17:39:b5:ae:d1:
41:ad:81:fe:62:f2:63:3f:a7:97:a4:79:33:9f:57:
67:24:eb:7a:44:76:34:d9:e9:85:ea:06:15:8f:9b:
02:f3:f4:aa:42:81:98:3a:45:8c:9f:34:1b:b9:a8:
13:6c:e9:16:d6:4c:cf:e2:9a:a0:d0:5f:3b:d0:08:
6d:84:d8:06:d7:ca:fd:32:9b:6a:d0:2d:3a:e6:fe:
b6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:57:C3:7A:F8:44:FC:4C:95:40:0A:38:79:C5:C7:C9:4B:79:27:E8
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8FfDevhE_EyVQAo4ecXHyUt5J-g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.252.0/22
Signature Algorithm: sha256WithRSAEncryption
12:f8:a2:17:a7:68:b7:b3:3c:de:3d:64:03:01:ca:8b:13:6d:
fd:4a:83:fc:0a:07:aa:ba:da:67:6f:2d:ef:fc:bb:97:4c:86:
8d:aa:94:55:60:77:d8:d5:b0:ed:fe:60:ac:c5:f0:37:6c:bb:
41:87:1c:09:f9:1c:d0:65:0c:c0:01:68:61:04:51:8f:80:01:
26:dc:71:bf:dc:16:a4:ab:71:1c:48:9a:b1:89:1f:b7:ad:04:
ff:b4:1c:82:a2:6e:bb:39:e0:9e:9e:b6:80:b4:b1:a5:1d:e2:
7a:5b:7a:0a:a1:d2:88:4d:ff:46:c1:ca:19:49:88:3b:62:51:
38:5a:b2:f5:bb:ad:fa:42:b7:36:04:fe:42:6f:e9:1b:c0:db:
6f:39:48:4d:72:67:8d:d2:1c:c2:df:3b:77:90:6e:1d:b1:12:
d9:ed:8e:01:f4:71:c1:4f:ff:64:2f:a8:52:c2:fc:c6:6b:77:
38:95:ca:e2:90:7c:74:e9:e0:3f:0e:71:91:b2:d8:f5:a4:82:
8e:ac:f4:47:80:af:54:af:34:8d:18:49:68:10:3c:9f:85:5d:
ac:80:c5:0a:08:1e:61:7c:66:38:34:b6:6d:da:35:55:64:bb:
f2:eb:45:0e:87:cd:4e:a9:5e:77:52:60:e1:2c:1b:ee:71:f4:
36:0a:ba:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org