Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/BOMwqmgRyB8WAVeEFLU6Sk-USJ8.roa
File: BOMwqmgRyB8WAVeEFLU6Sk-USJ8.roa (raw, json)
Hash identifier: 3CiPJQHWTSb5hFPtAB2Zrv1B8oO875lLCnQSuexDpds=
Subject key identifier: 04:E3:30:AA:68:11:C8:1F:16:01:57:84:14:B5:3A:4A:4F:94:48:9F
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E0E
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/BOMwqmgRyB8WAVeEFLU6Sk-USJ8.roa
Signing time: Thu 29 Dec 2022 09:32:11 +0000
ROA not before: Thu 29 Dec 2022 09:32:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 150.116.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3598 (0xe0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=04E330AA6811C81F1601578414B53A4A4F94489F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ef:dd:99:12:d4:58:88:ba:3d:c8:46:7e:16:
03:96:13:0f:80:1b:5d:7d:b0:b5:2d:3c:39:72:e1:
4d:16:cb:4d:84:62:31:2d:e7:f7:3d:13:da:f0:8d:
74:68:aa:ba:57:6f:b3:0d:0f:f3:40:d8:df:58:3c:
24:d7:b0:f1:ef:fe:14:60:4e:04:f8:67:f0:d0:b5:
a8:bb:3b:68:7d:29:e6:86:c8:ef:82:2c:48:1d:50:
42:d6:aa:a5:85:3b:40:76:a8:2c:e9:c0:9c:f2:6a:
77:cf:de:81:79:15:84:cd:a1:c5:97:31:88:09:d4:
81:2e:3f:28:e9:cf:2a:d5:60:b8:cc:ab:4d:7f:e9:
8b:ea:14:67:a5:a7:02:d5:88:be:e4:4e:2e:d7:62:
23:49:45:27:ea:00:ff:0e:c5:35:a6:63:71:a2:24:
2a:d2:fd:28:82:a4:11:3e:47:01:56:25:e7:81:07:
5a:03:6a:99:46:54:7b:15:a9:e7:e8:a8:37:73:55:
51:4f:de:6c:5d:c8:1e:de:43:c4:20:36:b9:54:3f:
87:7d:0b:6b:01:ab:52:ed:2c:0f:4e:52:2d:85:55:
4a:84:11:be:6f:8f:90:69:0f:a6:4e:e5:7b:93:66:
b4:b9:c8:c9:82:26:de:87:93:b6:32:61:d8:b6:88:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E3:30:AA:68:11:C8:1F:16:01:57:84:14:B5:3A:4A:4F:94:48:9F
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/BOMwqmgRyB8WAVeEFLU6Sk-USJ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.239.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:3f:84:26:3b:e1:a4:54:8b:28:2c:03:13:10:6d:ec:17:47:
0b:78:83:f8:52:e1:67:0c:01:de:87:72:93:7b:de:98:c0:33:
44:64:0e:bb:52:3e:42:7d:e2:2f:1d:11:59:94:0e:27:9a:ab:
5f:9c:3a:69:31:3b:71:37:ec:bd:0d:0b:68:68:67:01:67:ae:
f0:c7:a2:2a:ce:53:07:6d:97:09:41:50:b1:2d:cc:73:31:23:
6e:25:d1:e2:dc:3d:6c:37:f7:ba:f7:64:7e:3b:1f:c0:0e:3a:
11:34:7a:9e:83:1b:49:39:da:77:0d:8a:41:22:a5:0d:e9:6a:
01:3d:b7:d3:2a:d3:e6:b9:cc:97:7d:4a:24:74:c2:3d:ce:35:
bb:8e:7a:72:fa:1f:ad:62:d4:4f:1f:9d:8f:65:d9:73:38:11:
a0:87:c0:4e:2c:6f:83:1e:42:18:7c:bd:73:cd:aa:31:5f:b5:
97:e6:9a:fa:b1:da:68:54:50:87:cc:3c:3a:dc:14:c9:c0:a2:
62:3c:77:81:8d:0f:24:5d:b5:46:cc:ab:1e:18:84:95:20:ef:
15:7c:cd:72:2d:03:42:f3:00:19:27:d9:55:b4:82:a6:cf:c9:
3c:f5:22:3a:89:2e:96:33:61:d1:f5:92:92:60:e1:3b:c2:da:
38:2e:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org