Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/C-JmT1PlKZLco1y8svokOP3Yj3A.roa
File: C-JmT1PlKZLco1y8svokOP3Yj3A.roa (raw, json)
Hash identifier: 5zeKLnAHA674IUF6/muPiCZJ92qyZx9sLWriSFbEiWY=
Subject key identifier: 0B:E2:66:4F:53:E5:29:92:DC:A3:5C:BC:B2:FA:24:38:FD:D8:8F:70
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E15
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/C-JmT1PlKZLco1y8svokOP3Yj3A.roa
Signing time: Thu 29 Dec 2022 09:32:13 +0000
ROA not before: Thu 29 Dec 2022 09:32:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10085
IP address blocks: 203.163.204.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3605 (0xe15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0BE2664F53E52992DCA35CBCB2FA2438FDD88F70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f6:aa:f0:bf:ac:53:5a:21:0a:cb:2d:0f:b9:
37:e5:52:86:8e:d3:0e:f6:b7:e4:c1:b0:c1:8b:a3:
05:a8:4a:b0:bd:3f:0c:b3:8c:e6:a5:3c:cd:09:df:
a5:8a:1a:3e:a5:86:90:af:15:3e:19:58:b3:6c:41:
ea:dd:6c:04:b2:26:83:2a:33:a1:30:f8:5d:d7:3a:
35:55:73:c3:d3:8c:24:ab:02:e9:7c:eb:2e:2d:47:
4d:58:3d:54:0d:cf:f8:38:cc:c0:4a:53:1f:b0:23:
0a:f1:8b:80:2f:5b:c9:b1:d8:08:60:b1:78:d2:8a:
b8:79:28:a1:b5:6f:86:e1:fd:6e:70:05:e4:ee:48:
06:2c:20:72:b0:e9:55:4b:00:f8:75:32:98:aa:c0:
3a:39:15:0e:80:84:57:6a:e0:d7:f9:b7:0b:dd:55:
d5:97:fd:90:2e:8b:48:ce:b4:94:2c:1e:50:56:d9:
14:de:96:24:6f:68:d6:ba:32:8e:bd:4d:66:cf:7c:
cd:53:8c:a2:e1:3d:08:5e:c5:53:16:f0:97:1f:64:
cc:33:bf:a7:a6:29:33:b1:e1:a0:8b:2e:ac:ee:a4:
59:3e:86:fd:73:a3:60:f5:c2:06:e3:51:91:46:09:
e4:72:57:0d:34:29:93:16:cc:3e:6b:ae:c4:5b:22:
67:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E2:66:4F:53:E5:29:92:DC:A3:5C:BC:B2:FA:24:38:FD:D8:8F:70
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/C-JmT1PlKZLco1y8svokOP3Yj3A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.204.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:2d:5b:a8:c8:61:55:03:5b:18:0a:b8:1d:1f:b4:e4:c3:46:
c4:30:3e:10:61:3b:bc:8e:09:12:a1:41:f3:0a:29:89:92:8f:
b0:f6:03:79:97:74:83:4a:34:51:d7:7d:fa:b7:a1:10:32:b4:
81:58:15:0f:dd:3e:7f:7d:cb:1f:f2:a1:8d:a9:96:68:2a:a1:
cf:ed:14:dd:ae:c9:cc:cc:8a:21:7a:ca:a0:4d:d3:e3:69:87:
e0:6f:f4:56:f9:1c:e7:6f:93:78:5b:30:dd:00:ad:a8:91:a8:
c3:11:53:ac:54:01:7c:e6:68:66:19:27:ff:6c:c1:60:d5:5e:
4d:2d:9a:65:71:2b:f6:cb:fd:bd:13:83:fc:30:70:06:b5:75:
15:09:4a:0b:d2:bc:eb:93:28:03:b1:f2:b2:b1:65:b4:72:cf:
0e:7e:97:15:e4:36:20:94:b8:20:e0:4b:bf:d8:7c:5b:6a:0b:
47:74:9f:13:b7:a0:9a:4f:46:c0:5b:8a:a1:9d:7c:ad:24:5e:
ba:76:94:a8:f3:6b:86:4d:09:ef:8e:e2:c9:cd:28:c4:5d:91:
76:57:df:8e:d6:40:4d:cf:b6:ff:4b:80:a7:b4:24:a0:b7:7f:
a6:81:84:0b:c3:b7:27:18:d7:19:d6:a8:7d:7b:af:88:aa:41:
67:6d:e8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:29 2025 by rpki-client