Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/AXks_R6tnKjX6snjpEYC1_mYURo.roa
File: AXks_R6tnKjX6snjpEYC1_mYURo.roa (raw, json)
Hash identifier: yPB8ENoyZ3ZldGqt5rnRsHcwy8HOKcNcx+HssC04n/M=
Subject key identifier: 01:79:2C:FD:1E:AD:9C:A8:D7:EA:C9:E3:A4:46:02:D7:F9:98:51:1A
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0A7C
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/AXks_R6tnKjX6snjpEYC1_mYURo.roa
Signing time: Sun 07 Feb 2021 11:49:54 +0000
ROA not before: Sun 07 Feb 2021 11:49:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2684 (0xa7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:49:54 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=01792CFD1EAD9CA8D7EAC9E3A44602D7F998511A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:bf:14:cc:03:45:cf:da:0e:fa:a9:ff:23:
2f:9a:6e:f3:2b:9c:88:e5:ef:fa:bd:f3:25:0d:17:
b8:22:76:2d:c6:16:6a:ff:4d:cf:ad:38:1e:9c:e0:
78:60:38:43:c4:d7:59:79:f3:19:8b:69:67:7b:ba:
5d:20:b4:bf:79:c9:12:13:3e:a1:a3:f1:bd:29:1f:
36:69:b5:ce:c3:7d:7e:b7:03:e8:82:f5:9c:80:ff:
49:0f:07:5d:a6:de:aa:b1:76:d7:64:7e:f6:c8:4b:
67:77:20:f0:fe:33:9b:9f:9f:da:0e:9d:2f:3a:f7:
97:80:23:c1:35:c8:dd:b3:ff:b3:f9:30:b1:86:99:
78:38:65:6f:6c:6d:5c:80:a4:fd:43:3c:8c:4e:73:
f8:75:54:9d:98:4b:a0:83:7c:e9:ff:88:05:f9:30:
c6:33:09:db:96:85:f9:08:ef:77:15:37:ea:36:f6:
48:d8:e3:e3:74:94:d7:b8:28:4e:98:76:2d:9b:77:
7f:5d:c9:4f:a3:95:4e:25:59:f4:4e:24:0d:78:15:
39:f4:18:07:b7:7b:ae:8e:ab:83:b4:80:17:86:e5:
65:e3:74:8e:f1:d2:9c:b0:c1:df:2f:dd:62:ac:bb:
2e:32:3b:44:bf:56:2f:f1:57:50:91:ff:67:68:7d:
be:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:79:2C:FD:1E:AD:9C:A8:D7:EA:C9:E3:A4:46:02:D7:F9:98:51:1A
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/AXks_R6tnKjX6snjpEYC1_mYURo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.172.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:b5:d1:04:86:9c:51:08:52:9b:97:a1:a6:31:0d:34:4b:82:
bb:d0:40:32:85:c4:89:ae:69:25:01:1d:3a:be:89:47:4e:76:
1b:50:fe:1c:92:17:c4:df:18:a7:42:58:d2:86:3d:73:44:9f:
55:59:9f:07:b1:29:a6:d9:c6:3e:00:4c:bd:e2:e7:11:40:6e:
b1:76:29:af:c9:df:ee:a5:0a:35:5f:60:84:45:4f:7e:86:ff:
41:b3:f8:c5:36:61:e0:17:36:95:79:ed:08:4a:1f:78:8c:93:
18:54:c3:37:2a:78:72:89:58:71:04:3d:d1:1b:8c:e8:9d:ca:
38:49:b3:73:6e:b7:d3:6f:33:d0:03:0e:2a:49:f8:3c:34:b0:
ad:9c:03:cb:c8:1a:4f:65:39:c8:ac:83:de:bd:be:a5:04:fa:
33:96:b0:c8:5d:31:04:25:80:5a:d2:93:41:f6:f9:e8:70:18:
b9:c4:c1:a4:3a:6d:84:3e:e1:96:9a:0e:14:dd:8f:e7:90:1f:
26:07:5a:71:a0:f0:5a:6a:73:65:69:cf:6b:48:09:8f:c3:3a:
04:c9:c1:01:34:1c:bd:17:bd:cc:25:14:25:f5:d1:75:61:47:
3b:7e:af:d6:17:db:4c:9b:fd:b4:5d:25:a5:4f:72:ed:bb:82:
41:51:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org