Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/CvHYlnLloVnnVE1T73-o66FMK84.roa
File: CvHYlnLloVnnVE1T73-o66FMK84.roa (raw, json)
Hash identifier: 7I8QjyTo6rxk6f7bGiyTLVKpkIfqMfPcIDoD3nanZ50=
Subject key identifier: 0A:F1:D8:96:72:E5:A1:59:E7:54:4D:53:EF:7F:A8:EB:A1:4C:2B:CE
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DE2
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/CvHYlnLloVnnVE1T73-o66FMK84.roa
Signing time: Thu 29 Dec 2022 09:31:58 +0000
ROA not before: Thu 29 Dec 2022 09:31:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9831
IP address blocks: 203.163.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3554 (0xde2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:31:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0AF1D89672E5A159E7544D53EF7FA8EBA14C2BCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d6:8f:33:b3:da:29:fb:0e:e5:f6:93:a5:86:
c0:62:22:a7:0f:4e:08:c3:37:8b:d8:28:be:6f:62:
79:e5:f8:c3:01:b5:20:1d:62:24:9e:b9:3f:9f:74:
60:cb:1b:fe:1e:c8:1c:08:e2:55:2c:9e:1e:e0:39:
5f:38:f9:4e:7d:b8:d1:04:b7:b7:99:5e:ff:d9:f6:
41:40:69:48:e3:22:f4:74:69:14:58:1e:61:51:dc:
d7:a8:25:03:47:7e:91:b7:5c:20:3b:05:22:39:3f:
e2:cc:74:61:d5:0f:53:07:0e:68:ad:6a:5b:49:c6:
04:a9:10:58:10:7a:4d:80:92:1e:1d:b7:61:5b:0a:
6c:a8:be:8d:a9:f3:7b:d2:f7:95:9f:42:3b:1f:75:
c6:02:0a:65:5a:52:e6:61:82:35:29:1e:b1:e2:3f:
3a:c6:5b:9d:9b:e8:e9:cc:15:6c:37:86:0f:bc:d5:
9c:bd:58:c8:fd:ac:3a:7a:d2:96:97:cc:c5:97:91:
17:22:51:a1:d2:51:a4:2d:4d:d4:52:41:11:dd:c7:
3b:0a:1f:65:c6:73:02:16:b2:59:c1:50:26:f7:a7:
fb:12:a9:b4:7a:6e:e7:10:5c:0b:c3:3c:a1:21:ba:
ff:a9:27:4a:3a:6d:2c:49:4d:70:f0:5a:7b:d4:c6:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F1:D8:96:72:E5:A1:59:E7:54:4D:53:EF:7F:A8:EB:A1:4C:2B:CE
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/CvHYlnLloVnnVE1T73-o66FMK84.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.201.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f1:7a:4a:bc:bb:21:8c:76:ba:1d:a2:9e:cc:02:64:82:1f:
69:90:11:92:65:65:50:c0:27:c8:1b:31:53:bf:df:ce:8d:e4:
6c:9f:91:dc:b8:af:f4:45:c3:38:7e:50:de:93:b1:12:23:f2:
93:71:49:86:ab:f5:c5:66:4b:f9:95:ed:4f:ca:25:a6:da:f6:
72:7f:d0:8e:d1:63:b8:37:e2:18:c8:de:bc:2d:c5:f9:59:ec:
f7:39:f1:d8:40:01:93:34:d8:10:4b:12:cd:8a:07:20:36:98:
19:ac:30:ee:16:5d:69:e9:78:84:1a:e6:32:6e:36:bd:25:28:
54:55:e3:31:90:44:69:8e:0e:2f:aa:03:d4:56:43:c5:1f:89:
a4:84:45:b0:96:e3:b6:58:5a:b4:42:6d:63:83:16:3e:9f:d7:
da:94:c1:56:32:86:69:05:9f:72:60:3f:b8:be:6f:dc:2d:4c:
0c:ed:66:46:ee:fe:c4:73:ef:cb:95:13:45:a5:eb:43:8a:3f:
03:de:52:d8:ce:b8:b0:ae:20:d2:cf:cd:bb:9e:5d:54:d7:27:
2e:6b:ad:46:c2:2b:78:09:09:ff:35:1c:b8:27:86:e8:66:59:
8f:3e:e2:3c:ca:df:98:e4:21:6c:bb:c7:68:07:f6:c8:3a:75:
c8:4f:27:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org