Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DjrExcLFXQ8l7_Cdznbd2Jz577Q.roa
File: DjrExcLFXQ8l7_Cdznbd2Jz577Q.roa (raw, json)
Hash identifier: yx5rX7Azt34EHmugFBNSadUPV4OQDnfRapgsctQWZE4=
Subject key identifier: 0E:3A:C4:C5:C2:C5:5D:0F:25:EF:F0:9D:CE:76:DD:D8:9C:F9:EF:B4
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DBE
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DjrExcLFXQ8l7_Cdznbd2Jz577Q.roa
Signing time: Thu 29 Dec 2022 09:31:48 +0000
ROA not before: Thu 29 Dec 2022 09:31:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 118.150.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3518 (0xdbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:31:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0E3AC4C5C2C55D0F25EFF09DCE76DDD89CF9EFB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:7c:0c:79:cc:84:22:56:e2:da:9a:f5:10:
9a:88:0b:33:88:b8:97:67:b2:ee:dc:02:85:cf:11:
4d:bd:7d:96:6c:44:d0:7a:de:cb:50:67:25:01:e0:
b5:3c:c8:31:19:5e:41:12:df:3b:de:f9:ae:5d:43:
48:e6:9a:f3:e6:10:fa:02:da:0e:ca:ed:48:ed:f6:
bb:ea:68:7a:8c:15:5c:59:63:d0:0f:0f:86:31:6a:
69:76:7c:c2:d6:69:63:51:c5:91:f8:2e:a1:e3:c5:
46:ae:33:9a:30:b1:64:a5:28:53:de:d5:cc:10:7f:
1a:69:81:09:9c:7c:16:00:77:32:1a:c5:bd:7e:48:
ed:8a:be:80:c0:4e:8c:27:a8:1f:2d:c9:72:f4:1f:
c7:33:fa:70:26:57:e1:7d:b0:db:e5:79:56:69:a1:
bf:3f:ed:44:4f:18:cd:ac:fb:36:33:90:48:e9:d2:
34:7c:e3:d3:eb:ee:3d:5a:2e:07:20:39:4b:8b:2d:
ab:d4:08:b8:e3:f7:a3:98:12:ca:66:41:56:5e:ff:
cf:38:04:a1:72:0e:5e:2a:dd:41:a4:d7:00:e6:61:
dc:9f:0e:8f:c2:bd:b9:eb:6b:2d:33:cb:3d:a3:52:
84:83:c0:c3:81:dc:9e:d0:bf:8b:65:43:32:6d:ab:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3A:C4:C5:C2:C5:5D:0F:25:EF:F0:9D:CE:76:DD:D8:9C:F9:EF:B4
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DjrExcLFXQ8l7_Cdznbd2Jz577Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a6:f8:ef:2a:22:41:4e:fe:be:d2:3d:e0:af:53:ff:4a:3c:9e:
82:2c:db:74:a6:13:a5:55:62:f8:97:0f:14:48:65:fe:de:08:
8c:97:ed:a4:fc:cb:29:98:8c:b5:c9:ff:35:25:31:12:de:8a:
5f:89:01:4b:b9:97:72:1c:d8:fd:71:d4:79:56:58:83:46:be:
0a:3f:af:41:17:89:53:ca:2b:99:be:04:9c:87:2b:e3:c3:b6:
49:81:3e:45:85:1e:22:2c:3d:d3:63:a5:8a:83:6f:38:aa:4b:
30:d1:68:ae:44:91:e8:ec:bf:cf:38:7c:04:5f:ea:99:25:d1:
c4:0c:c1:88:2a:94:96:a1:db:17:19:c8:4e:f5:50:42:86:38:
ba:33:97:1e:81:1c:09:b2:06:89:07:aa:63:7a:5d:b3:8c:08:
7a:c5:9f:c6:27:8d:21:2c:c3:b9:9a:42:6b:00:26:17:00:b7:
d9:41:50:6e:33:b2:e4:00:ce:d6:77:39:0a:e5:dd:92:26:21:
a9:d0:a8:b1:6f:2f:be:04:e4:b4:53:2e:65:56:9b:3c:80:2c:
3a:93:a0:8f:23:25:fc:fc:98:29:03:32:d5:6b:9a:91:0a:36:
3f:af:f9:83:ef:4e:2e:4f:fb:ad:67:e9:2f:fc:fa:ba:ae:c6:
ba:97:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org