Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/B62oaU22A829QxOqzYNjeG9R2tE.roa
File: B62oaU22A829QxOqzYNjeG9R2tE.roa (raw, json)
Hash identifier: 1LBFr+q2pF4M8TGhqJVsylC+8GGi307TsOYpzHwFMWU=
Subject key identifier: 07:AD:A8:69:4D:B6:03:CD:BD:43:13:AA:CD:83:63:78:6F:51:DA:D1
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C03
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/B62oaU22A829QxOqzYNjeG9R2tE.roa
Signing time: Wed 29 Sep 2021 02:38:57 +0000
ROA not before: Wed 29 Sep 2021 02:38:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17408
IP address blocks: 113.21.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3075 (0xc03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:57 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=07ADA8694DB603CDBD4313AACD8363786F51DAD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a1:78:49:3f:3e:97:6e:18:fd:21:a0:6f:76:
7c:91:42:65:dd:f2:7a:72:e6:c5:36:97:f1:51:22:
2f:6f:1b:90:02:46:11:02:d1:f8:d0:e5:26:e7:9b:
d0:c8:b3:ab:c0:8e:e8:5e:2f:69:87:91:7b:72:57:
7d:fd:b1:f1:0d:1b:c6:de:1d:94:e1:a2:29:e9:dc:
29:be:c9:80:ef:f6:9a:0d:65:28:c6:9f:03:02:2c:
eb:77:f7:11:25:a9:9a:39:2a:12:64:f4:41:9e:83:
88:8d:7f:75:af:84:f1:e8:a2:28:28:1f:d7:b7:6a:
fc:76:05:89:55:f9:0d:7b:16:20:42:83:8e:52:6a:
37:30:e0:2c:cd:7c:47:14:ea:b0:9b:b7:64:a4:a3:
19:6a:49:b1:78:db:15:a3:70:59:16:b3:42:3d:38:
7f:99:e5:23:b2:ed:f9:05:ad:5f:cc:fd:89:0c:4b:
7e:4d:3c:eb:b5:ce:fe:4f:db:ea:4f:65:9d:7d:7f:
28:d8:fd:8a:1c:1e:d2:b3:83:d4:3d:c9:18:0c:37:
ca:cd:9c:32:72:57:bd:22:7c:7c:b9:f9:c2:e2:84:
f4:a0:ff:26:8d:84:43:ae:eb:dc:33:bc:5f:e4:a4:
c4:cf:08:a2:99:77:c9:33:47:17:a9:f5:1f:23:53:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AD:A8:69:4D:B6:03:CD:BD:43:13:AA:CD:83:63:78:6F:51:DA:D1
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/B62oaU22A829QxOqzYNjeG9R2tE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.88.0/21
Signature Algorithm: sha256WithRSAEncryption
48:6e:0c:70:e7:6c:fb:fa:f6:16:b0:fa:e2:a7:2b:79:7d:60:
d4:8f:23:f2:d9:8f:ca:5b:df:3c:10:53:b3:16:0e:e1:b1:66:
2b:ac:8d:d5:31:16:0d:35:f3:40:aa:f7:16:c2:89:ad:e0:78:
58:fd:7b:0d:c9:91:32:da:5c:f4:14:69:87:0d:e2:3a:96:1e:
a4:23:bc:b9:ae:8c:80:b0:ea:7b:0b:99:2b:bd:1b:4a:2b:cc:
94:17:34:51:b4:e3:f3:75:03:27:79:34:7b:14:d2:f9:39:ea:
dc:e0:17:ad:8c:62:5c:91:9a:be:02:11:ee:cf:c2:b8:9e:ff:
32:d2:e4:5e:3c:d8:ac:9f:59:e2:22:97:b1:0b:78:e9:f2:00:
7a:e4:1f:37:5b:3e:11:38:5c:d4:2f:9d:54:fa:e7:2e:38:54:
12:31:0b:d8:b2:04:ee:52:c9:4a:3c:3b:5f:53:c3:b2:d8:7a:
00:46:b3:86:8c:f4:a1:09:b4:2b:35:e4:1f:70:85:3e:00:ee:
ef:a9:3c:e0:e5:6b:54:42:75:d1:de:d0:eb:a6:b0:47:d5:ca:
ce:7e:7a:d1:0b:95:b1:91:d8:66:5f:c1:71:9a:2c:e0:f6:73:
f1:02:27:80:43:28:b0:82:2a:ab:ff:0a:d0:bf:14:d3:8a:27:
83:3d:8d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org