Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ARMOgSt00GKMVCP1CjM9-j04BFU.roa
File: ARMOgSt00GKMVCP1CjM9-j04BFU.roa (raw, json)
Hash identifier: S+8246JkQlP9P7LLHAackuXFxQvG4ZHM5JBSzpw4LZo=
Subject key identifier: 01:13:0E:81:2B:74:D0:62:8C:54:23:F5:0A:33:3D:FA:3D:38:04:55
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DEE
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ARMOgSt00GKMVCP1CjM9-j04BFU.roa
Signing time: Thu 29 Dec 2022 09:32:02 +0000
ROA not before: Thu 29 Dec 2022 09:32:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 113.21.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3566 (0xdee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=01130E812B74D0628C5423F50A333DFA3D380455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:e2:39:b2:75:47:09:4f:e5:03:08:8d:25:
b2:b6:96:39:88:6b:24:67:ae:01:12:1a:75:f2:86:
33:fb:f4:81:ff:83:15:d1:0c:c7:ca:ed:8f:a6:67:
66:bf:fc:8e:7a:c4:0d:0a:f2:06:f6:d2:56:a6:e9:
14:ac:b4:22:9a:85:cd:d8:ae:76:de:a4:0e:68:e5:
5a:4c:eb:b5:5b:35:67:72:66:24:1b:c9:0d:d5:bb:
24:83:37:8f:57:69:1d:5e:ff:91:c4:65:2c:41:38:
4e:f1:33:49:ff:e5:d9:ac:1a:2b:cc:19:84:22:0c:
cc:94:f0:c8:a9:21:df:de:0a:cb:3e:0f:18:dd:2e:
de:85:40:20:f1:e2:08:63:9f:b8:7c:13:31:73:44:
3f:f3:91:e8:51:ca:cc:4b:36:57:12:20:1f:2d:7c:
5f:fd:fe:54:99:ee:be:fc:61:97:c9:6e:35:da:a8:
15:c0:42:35:7e:c5:15:78:af:1f:cd:19:6c:27:0f:
4e:43:9a:40:f8:4f:ff:5e:3e:96:d9:7a:68:00:f8:
af:6a:81:d2:02:17:96:29:10:6c:fe:3c:b3:28:67:
4f:bf:2b:cf:9e:f3:da:d3:9c:19:e1:e6:4d:fa:52:
c3:7e:a5:fa:ad:13:a0:4d:6c:92:9c:61:9b:d8:ec:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:13:0E:81:2B:74:D0:62:8C:54:23:F5:0A:33:3D:FA:3D:38:04:55
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ARMOgSt00GKMVCP1CjM9-j04BFU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.88.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:37:7b:be:82:33:2a:e2:9a:3f:dd:bb:4c:fa:70:70:39:a6:
76:48:5a:4b:9c:ab:57:e6:6b:59:0c:ec:af:78:ee:be:6d:6b:
2d:84:4f:0e:7d:03:b8:3f:8c:af:3f:e7:9c:ec:07:19:94:f9:
ec:66:9e:0a:a8:b5:33:c2:06:e2:9d:fd:7a:b7:50:d3:33:70:
58:dc:bf:9d:2b:f2:ce:40:23:54:b1:45:56:21:74:20:ed:68:
22:0b:0d:66:40:b0:07:38:90:f6:31:99:eb:02:8e:9a:3a:fa:
ac:2e:7d:92:f8:85:a0:8c:6c:c6:5b:c1:0d:91:e9:2d:47:f8:
17:02:f8:72:4a:86:53:43:7f:4a:d5:ee:ec:e6:c8:1f:8b:03:
92:09:74:40:a5:de:24:03:89:8a:5d:8e:92:70:72:02:d4:26:
95:a2:a7:6c:eb:2b:94:91:ed:ef:33:c1:ee:ac:76:db:1e:9c:
8e:a4:d0:86:9c:89:d2:47:36:73:8d:aa:90:6d:6d:1c:61:5a:
71:a5:d8:86:91:c2:76:df:46:13:1f:59:b0:f3:db:88:4d:80:
e8:51:75:28:a6:9d:2a:40:24:cf:16:e2:87:76:ad:11:70:7a:
3e:8e:61:df:52:01:cb:91:63:0b:1c:c5:e8:db:9f:c4:ab:b6:
77:c3:b1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org