Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Aq0USPcNDeLC3nJLqcE3ZXHT9gQ.roa
File: Aq0USPcNDeLC3nJLqcE3ZXHT9gQ.roa (raw, json)
Hash identifier: 1VSljsmib0jqNXyqcBP6sKnA8ISxNA+vCtHKrjAyhWA=
Subject key identifier: 02:AD:14:48:F7:0D:0D:E2:C2:DE:72:4B:A9:C1:37:65:71:D3:F6:04
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0F8A
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Aq0USPcNDeLC3nJLqcE3ZXHT9gQ.roa
Signing time: Fri 01 Sep 2023 08:29:15 +0000
ROA not before: Fri 01 Sep 2023 08:29:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 223.26.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3978 (0xf8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=02AD1448F70D0DE2C2DE724BA9C1376571D3F604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:dc:a1:cd:c4:c1:8d:af:fe:73:7f:8a:b3:
51:40:31:12:39:b7:ea:27:c4:74:95:92:62:cb:dc:
b9:f3:bf:6f:5a:f5:0d:37:0c:46:e3:1f:df:bb:6f:
f2:93:bc:49:8f:24:bd:df:6d:13:c5:ae:73:bc:24:
01:6c:cd:84:3e:d9:36:1b:91:94:95:f1:55:0e:93:
13:d5:8f:19:83:42:eb:99:c1:d0:e9:4c:32:9e:9e:
bd:cd:74:22:c4:ea:1a:4b:42:b2:31:be:be:90:5f:
f3:fc:d4:d3:db:91:ed:df:24:ff:6b:1d:81:43:3b:
f8:d0:c2:01:4e:ce:5d:ec:97:85:bf:d1:b4:45:75:
a6:6f:4a:3a:8a:43:10:10:80:57:98:76:40:4e:ac:
3f:44:f3:b5:1b:34:d1:ad:8d:37:0d:4a:42:bf:5c:
68:52:7d:6c:0a:8d:10:65:97:63:d7:24:a7:dd:0c:
46:dc:5d:a1:f9:fa:3e:44:03:d0:bc:dc:5e:c1:d5:
55:86:5b:a7:52:4a:62:fc:2e:d5:3d:24:ad:f3:97:
d1:93:bb:c5:84:09:00:42:89:76:bd:b8:db:81:f6:
86:ca:14:d5:63:03:42:29:72:c2:a9:94:82:d8:c1:
86:a0:87:ed:69:f0:16:10:41:42:a4:60:02:fb:e1:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AD:14:48:F7:0D:0D:E2:C2:DE:72:4B:A9:C1:37:65:71:D3:F6:04
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Aq0USPcNDeLC3nJLqcE3ZXHT9gQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.104.0/22
Signature Algorithm: sha256WithRSAEncryption
00:a3:6a:e8:e0:c3:31:d6:37:6f:4f:f9:a3:ac:ca:f5:57:bf:
22:b8:44:28:6e:23:9d:06:f2:c6:1f:a6:46:e0:ae:72:3d:52:
8c:34:97:04:3e:02:5a:19:f9:4a:6b:16:21:0e:80:80:c3:3a:
49:cd:af:5f:a9:f9:ae:2e:ac:05:b7:28:52:34:31:4a:82:ea:
d5:33:3e:d3:d4:b7:a7:37:94:be:dc:44:92:d8:a9:06:d5:74:
30:9e:e2:30:d6:cc:92:3c:8e:78:08:fe:94:17:c5:29:12:a9:
be:e9:28:33:dc:78:82:e5:74:a9:cf:29:46:23:87:ba:5b:83:
50:d7:6f:f1:99:98:9a:70:51:d3:b0:2a:94:9c:5e:08:ed:69:
c4:2b:b4:bd:c7:a5:de:8b:d7:37:1c:1b:8a:46:96:33:51:7d:
9e:fa:e4:15:df:0a:5c:5f:0c:60:3a:28:8f:d5:1b:13:1c:d3:
92:d4:06:2c:e1:8a:fb:3d:d6:bd:ce:d4:88:35:cd:0a:5e:73:
1b:e1:3b:e3:ef:c6:42:a4:57:04:89:65:41:eb:49:09:92:e9:
68:47:f6:19:19:48:59:b2:8e:7d:d9:8c:17:c3:0b:75:a5:09:
62:1a:4b:8e:db:42:34:d6:05:76:f4:d1:9f:63:89:cf:89:6b:
5f:fc:18:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:42 2025 by rpki-client