Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/AZlzlrglZaJuIMhMM51y8HgcXgw.roa
File: AZlzlrglZaJuIMhMM51y8HgcXgw.roa (raw, json)
Hash identifier: Mo8+BkfgDjUPHl5puMYiywdkrmjh15ISbArdWgiwb+8=
Subject key identifier: 01:99:73:96:B8:25:65:A2:6E:20:C8:4C:33:9D:72:F0:78:1C:5E:0C
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0889
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/AZlzlrglZaJuIMhMM51y8HgcXgw.roa
Signing time: Tue 29 Sep 2020 10:02:35 +0000
ROA not before: Tue 29 Sep 2020 10:02:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2185 (0x889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:35 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=01997396B82565A26E20C84C339D72F0781C5E0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:49:0d:cc:9e:25:1f:5b:30:9e:40:91:35:
2f:85:3a:33:55:51:e0:30:28:03:1d:70:c1:48:f7:
76:15:76:12:fa:1d:ca:c5:66:80:f9:1b:af:86:1c:
d8:8d:3f:8f:85:60:13:2d:fc:83:37:a0:75:a2:cc:
7b:47:8f:56:f4:11:d7:75:03:66:f3:ab:2e:12:3b:
55:d1:5c:6d:3d:aa:88:d5:e2:99:e5:aa:67:97:31:
df:b7:15:83:29:a8:53:cd:9d:e0:f6:f5:fe:0a:ec:
ae:9f:a6:78:17:d0:0f:38:a2:11:45:73:48:f6:1f:
a6:73:d9:5c:9a:21:5f:a9:c5:6f:22:17:32:92:96:
2c:36:f8:04:7e:61:2e:59:0b:ba:ee:88:72:1f:8a:
16:8c:fc:1d:f4:fc:ca:1f:37:09:cf:3b:0c:7b:50:
76:5c:9a:b3:dc:f0:8f:b2:0b:61:0d:ae:1e:db:15:
6a:b0:f8:68:b9:e2:d6:71:7f:c2:a8:e4:d1:1f:88:
2d:7b:fa:35:4f:98:db:48:73:ca:44:66:05:72:1a:
79:8b:f6:95:53:16:9f:b5:29:55:25:5e:31:7d:a0:
b1:a5:f8:0a:cf:50:af:e1:a4:8d:3a:43:fd:7a:e9:
3a:ca:bc:42:bd:75:1b:b8:e3:d8:e2:bd:2d:1d:b6:
0c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:99:73:96:B8:25:65:A2:6E:20:C8:4C:33:9D:72:F0:78:1C:5E:0C
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/AZlzlrglZaJuIMhMM51y8HgcXgw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.172.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:34:72:01:65:66:77:55:63:89:3f:32:24:c5:aa:35:02:21:
24:58:d4:2b:f1:e4:89:bd:23:cf:90:95:59:e1:c7:0b:ca:70:
e4:e1:32:14:99:f2:40:04:cf:49:3d:54:14:c8:d3:4b:2d:ef:
f3:42:ff:a0:ed:80:ee:dc:f4:95:4b:49:e2:e1:c3:cb:c3:af:
be:f5:5f:cf:55:41:ad:39:e5:4d:cc:f6:92:c9:1d:df:2c:c4:
71:00:27:07:3a:02:35:50:43:47:42:a2:df:1b:12:77:bc:19:
53:73:b3:3b:73:e6:48:ef:e2:37:36:1f:43:14:88:db:09:cd:
42:bd:90:fa:1f:fe:6d:ee:77:33:0b:8b:e9:02:f8:31:38:04:
51:1e:37:14:a1:5a:63:a3:7d:fb:ed:b6:29:b1:85:f3:26:d9:
64:0e:18:7d:e1:62:86:49:d1:6f:48:e5:c2:4a:a1:b8:53:94:
67:d2:61:b9:5e:67:a5:de:af:d4:1a:2d:90:84:d1:51:70:c4:
e5:62:2f:0c:f4:6d:8e:24:4f:8a:78:81:25:d3:89:e7:25:90:
17:b8:ef:ec:32:cf:2e:b2:d8:43:2b:75:3d:1b:5f:37:00:69:
8e:66:10:e8:09:ad:74:9d:3a:cc:bf:d2:a0:cb:e0:b3:7f:ab:
3d:71:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org