Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DuBwn_lH6UgoBteSo7i5wFyzEQ8.roa
File: DuBwn_lH6UgoBteSo7i5wFyzEQ8.roa (raw, json)
Hash identifier: oq1HedvViEbqGI8c7USBeKN08pEdQzwuYQnatm424po=
Subject key identifier: 0E:E0:70:9F:F9:47:E9:48:28:06:D7:92:A3:B8:B9:C0:5C:B3:11:0F
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0873
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DuBwn_lH6UgoBteSo7i5wFyzEQ8.roa
Signing time: Tue 29 Sep 2020 10:02:28 +0000
ROA not before: Tue 29 Sep 2020 10:02:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18419
IP address blocks: 118.150.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2163 (0x873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0EE0709FF947E9482806D792A3B8B9C05CB3110F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:65:73:26:2c:59:aa:d7:b3:3d:da:55:9d:
33:f1:86:0b:fe:33:6a:11:c7:c5:54:d4:62:68:af:
64:1f:1e:eb:98:8b:8c:f8:77:70:e5:62:06:a0:94:
d9:e1:6d:7a:8c:8d:d7:f1:7d:7d:63:a5:06:cc:d3:
25:47:d4:ba:4d:3b:dc:0e:f8:04:12:30:d9:dd:b3:
20:e1:de:0d:71:8f:bb:60:34:8f:8b:ce:56:6a:d8:
4c:0e:8f:c2:7d:34:9f:fe:bb:ad:13:81:c7:c9:5e:
32:03:1c:fb:7a:fc:ec:aa:3e:cc:6f:1a:30:20:0d:
a8:2b:c7:64:d9:97:bc:95:a5:8c:9d:3f:85:af:a2:
83:85:0e:bd:f2:e6:61:7e:a3:79:7f:b4:11:6c:49:
58:21:f1:23:27:60:9a:15:5c:8d:02:f9:d7:0f:24:
8b:01:e3:2b:4b:aa:4d:ac:05:a3:eb:50:cc:9e:4e:
98:27:21:7f:62:6d:2c:0c:fa:a0:d0:3e:43:69:3b:
f1:cf:a2:d8:32:5d:24:8b:e8:51:5b:3c:16:70:e6:
85:18:c4:71:ef:1e:fa:98:0a:62:bc:1b:79:d3:20:
9c:6a:57:7e:73:c6:55:ee:4c:ee:39:26:37:81:72:
9c:41:9e:e6:e5:29:ac:52:ad:bc:db:6f:ea:6e:73:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E0:70:9F:F9:47:E9:48:28:06:D7:92:A3:B8:B9:C0:5C:B3:11:0F
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DuBwn_lH6UgoBteSo7i5wFyzEQ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:b2:5e:94:b4:fb:c7:02:7b:26:fc:72:c6:98:5d:fa:74:ef:
9a:85:86:38:e4:12:01:f3:1b:8b:1b:d6:25:64:0d:7c:91:f3:
2b:c5:5b:89:49:c7:84:ae:a0:b1:fb:69:85:29:60:b6:2f:7e:
8a:f5:56:2b:0f:44:34:86:ee:d6:e1:00:09:a2:aa:7f:6a:2c:
f5:18:11:0b:c5:64:b7:9a:3f:fb:64:9e:c8:33:93:2f:98:d6:
32:a2:cf:90:31:20:22:36:70:06:e7:9b:80:60:7a:1d:fe:37:
36:dd:99:54:d4:61:58:91:88:97:c3:fd:e2:ab:ee:d1:53:00:
a6:e8:a3:2c:b7:cb:4d:61:b2:22:83:b3:77:af:52:7e:0f:fe:
1a:fc:fe:20:b3:59:62:29:0f:5a:57:42:4a:50:ea:6d:19:20:
f8:77:38:40:5d:15:8a:aa:fe:8b:31:12:bd:00:16:76:2b:06:
75:64:10:ca:e4:dc:8b:2b:f4:dd:3e:a8:2a:30:81:a4:9f:02:
57:9a:73:be:3b:d9:0c:e5:75:4d:f1:3a:5f:61:f7:05:4e:dd:
1d:c6:9a:d9:37:53:0a:6d:f5:fa:f3:bd:2b:1d:7c:5d:0f:cd:
51:6f:eb:48:da:60:b8:15:83:6e:a1:83:04:0b:7e:65:6b:68:
97:f3:b1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org