Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/AomIemaM2XfdqObbUv5Quk80ROo.roa
File: AomIemaM2XfdqObbUv5Quk80ROo.roa (raw, json)
Hash identifier: PYcqWqdY/T87qFCBve70LuSzh6yDdNske6NBDQC4tBI=
Subject key identifier: 02:89:88:7A:66:8C:D9:77:DD:A8:E6:DB:52:FE:50:BA:4F:34:44:EA
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0851
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/AomIemaM2XfdqObbUv5Quk80ROo.roa
Signing time: Tue 29 Sep 2020 10:02:19 +0000
ROA not before: Tue 29 Sep 2020 10:02:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 150.116.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2129 (0x851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:19 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0289887A668CD977DDA8E6DB52FE50BA4F3444EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b7:3f:f2:f9:46:f4:57:34:44:0b:d7:58:dc:
f1:46:09:7f:f1:a1:ea:3c:99:33:5a:ee:b5:3d:4d:
1f:75:97:01:f4:b9:47:c6:95:6e:ee:95:7b:42:cc:
2b:56:aa:59:98:81:3c:1a:5e:ac:57:3f:9d:41:82:
f3:54:a1:c0:0e:1a:89:41:d7:2a:4f:78:14:47:33:
43:e7:39:3c:46:d8:d7:86:24:19:91:7c:87:14:a6:
09:af:e2:97:8d:9e:07:df:ba:60:14:bf:bd:05:b8:
d1:28:60:76:91:c0:76:b8:e7:81:e9:f5:32:fd:ed:
a4:26:ec:5e:8f:cb:39:7f:ee:44:c8:13:d9:5d:32:
c6:b9:ef:a0:cb:c3:19:d3:b0:5a:06:a9:c9:a4:b5:
ae:b2:1f:0c:fd:c2:9f:b6:6f:1a:4c:08:54:13:ed:
11:fd:a5:43:4e:a3:b5:07:a0:d8:ba:18:05:75:2f:
df:7d:91:15:be:f6:dc:c0:77:89:42:d3:f9:7f:a6:
1e:88:1c:f4:e0:2a:b0:2e:03:f0:ae:e7:0e:58:22:
87:64:2d:9e:e5:41:66:8a:0f:41:6e:ea:88:41:49:
a5:5d:e0:38:51:9c:44:11:2e:f5:3b:5f:2b:23:0c:
dc:74:87:22:17:42:6b:79:fa:15:41:ec:63:b1:a2:
0c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:89:88:7A:66:8C:D9:77:DD:A8:E6:DB:52:FE:50:BA:4F:34:44:EA
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/AomIemaM2XfdqObbUv5Quk80ROo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.112.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:7b:ef:28:4f:8b:d5:f3:0d:de:da:4e:84:3c:bf:81:70:aa:
56:17:89:30:26:df:c5:08:0a:a6:8e:21:b5:2a:57:6b:63:6f:
08:cc:7d:1e:5d:cf:fd:18:dc:cc:5e:8d:b9:2b:0c:05:28:f8:
7d:dd:9c:84:f3:9f:c1:46:c2:6e:ca:a4:f4:16:cc:d0:0c:4f:
52:09:72:ba:5b:3e:c2:a1:75:0a:83:44:ec:98:86:60:70:19:
e4:5f:f9:78:3c:aa:de:aa:d8:e4:2f:6b:49:26:68:dc:ed:ae:
dd:95:1f:5c:bd:83:1f:b6:c7:17:51:cc:a1:e9:34:c2:6d:f6:
b1:98:dd:e8:78:5a:51:e7:18:36:02:64:d2:0a:98:3c:ef:0b:
70:de:59:d6:44:16:e8:2d:6f:34:d5:18:7d:8f:80:4e:a7:dc:
af:c3:4d:47:47:b2:70:6d:27:03:8c:4a:15:a5:6a:d2:0f:e1:
35:f5:9c:1c:d1:c3:84:27:83:be:e1:8e:71:82:7c:ee:06:df:
00:92:e9:85:7b:2c:12:6f:27:76:a5:d9:63:50:1e:aa:38:ec:
11:71:10:c7:d2:24:92:ed:cd:8b:f5:81:08:f1:6a:87:8f:19:
0d:9a:b8:c1:38:c0:81:72:5a:dc:ea:e9:23:8c:b5:d2:d7:77:
f2:c9:be:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org