Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/D_QPyGfRpDcO-emN51SVx2sEr-o.roa
File: D_QPyGfRpDcO-emN51SVx2sEr-o.roa (raw, json)
Hash identifier: 3Ygkvhlq793IwEk5ODY3WtwNfK3OFrejRY24p4uJIsA=
Subject key identifier: 0F:F4:0F:C8:67:D1:A4:37:0E:F9:E9:8D:E7:54:95:C7:6B:04:AF:EA
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0AEE
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/D_QPyGfRpDcO-emN51SVx2sEr-o.roa
Signing time: Sun 07 Feb 2021 12:58:48 +0000
ROA not before: Sun 07 Feb 2021 12:58:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9922
IP address blocks: 118.150.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2798 (0xaee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 12:58:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0FF40FC867D1A4370EF9E98DE75495C76B04AFEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:9e:a2:7c:7e:f1:cd:de:09:cc:40:73:26:
55:e8:8b:d3:27:7c:2e:aa:3c:3f:05:a1:5f:34:6b:
2e:03:da:d3:d1:7b:85:f4:1b:3f:7f:4d:cd:78:53:
d1:1c:44:78:f3:25:c6:41:ba:03:f4:b6:ac:69:d2:
4d:24:fe:db:b2:db:d5:e9:71:8f:0b:b1:e2:0d:ff:
d0:74:44:ee:8a:03:25:32:29:c1:ba:c2:74:67:95:
92:02:55:74:96:9d:7d:1d:9d:3b:3f:b9:a9:75:9b:
eb:0c:53:de:ac:f0:3f:b6:52:7c:41:c9:91:c4:50:
6b:76:e7:46:9b:39:25:27:21:0c:8f:06:f4:70:88:
8d:ad:9c:ec:af:7e:57:ad:e4:d2:26:14:9a:bc:e2:
26:da:2e:50:7d:60:55:bc:b6:46:e2:b4:f2:09:69:
43:63:b0:c4:6e:61:af:89:75:5a:ef:e5:dd:70:e6:
ac:34:6d:fd:8a:66:54:0c:b9:f8:df:b3:46:2d:b1:
aa:15:ce:61:cc:76:7a:82:b2:fa:c0:23:a7:3c:bd:
b8:65:0f:f7:3d:f5:14:05:81:d5:c5:f7:16:f1:06:
df:86:b1:5d:04:d0:5a:47:3c:48:81:a2:b8:c2:d7:
72:cd:5c:a8:20:01:2d:54:f4:3d:89:9c:d6:94:bc:
96:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F4:0F:C8:67:D1:A4:37:0E:F9:E9:8D:E7:54:95:C7:6B:04:AF:EA
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/D_QPyGfRpDcO-emN51SVx2sEr-o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.240.0/22
Signature Algorithm: sha256WithRSAEncryption
28:fc:c4:0c:06:b8:47:44:1c:bb:fb:7d:59:ca:8b:8b:54:8e:
ec:3a:e2:95:73:05:7e:e0:9d:30:7c:72:87:5f:8f:a5:70:71:
57:7a:35:85:a0:4b:13:66:1b:29:a3:c4:81:03:1c:23:a8:a8:
22:30:3d:fb:2a:94:f4:23:4c:2d:c5:b6:89:e3:af:53:58:2a:
a1:7d:f8:77:6a:4c:a8:20:3f:e4:9e:57:46:ad:2c:ae:cd:a1:
56:25:1b:d0:b3:97:3c:af:7f:3e:5e:6e:2e:dc:a0:f3:9e:ea:
ab:c6:62:58:58:19:bd:0c:5c:a1:c2:ff:42:38:5a:27:af:25:
4f:73:70:52:78:14:49:25:c7:63:36:9e:75:52:2e:29:a7:55:
7e:65:0a:74:3c:20:f2:2e:4e:a1:93:64:67:f8:63:a5:1e:be:
f2:81:14:82:3e:bd:c1:e9:a3:22:d5:42:1c:c2:99:a6:bb:bf:
96:4c:6e:30:2a:7c:eb:40:c4:1c:5e:5e:b7:39:6b:f4:87:5f:
bd:eb:7c:93:47:52:3d:b8:69:c9:2a:4e:03:90:c2:6f:8f:5e:
72:6f:c0:26:4c:cd:0a:8d:d4:56:b2:e6:9c:d6:04:74:8a:35:
4a:5f:9b:21:c4:c5:fd:6e:c4:54:62:4c:66:91:b1:34:8d:35:
f6:f9:b5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org