Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/EQcemSuWoF_L2WtN3iIx6RGw4iE.roa
File: EQcemSuWoF_L2WtN3iIx6RGw4iE.roa (raw, json)
Hash identifier: 27QQyrcVMM47UHXl3tlgbtDQbz1pq6PbREOOJF9GaE4=
Subject key identifier: 11:07:1E:99:2B:96:A0:5F:CB:D9:6B:4D:DE:22:31:E9:11:B0:E2:21
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/EQcemSuWoF_L2WtN3iIx6RGw4iE.roa
Signing time: Thu 15 Sep 2022 02:39:24 +0000
ROA not before: Thu 15 Sep 2022 02:39:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17651
IP address blocks: 150.116.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=11071E992B96A05FCBD96B4DDE2231E911B0E221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:af:5d:79:ca:9f:98:4a:27:92:b0:27:55:
f7:17:9b:00:e8:90:f4:d7:81:3d:2c:ac:3f:13:5d:
3c:8e:a3:8d:90:02:8a:28:51:6f:9b:5a:50:88:75:
15:cc:cf:b2:9c:33:3a:c0:f6:6d:5c:92:19:6a:fb:
09:d1:b1:41:5d:cf:aa:81:c1:10:f2:0e:77:02:98:
7f:24:41:51:33:ec:b5:64:63:89:81:33:5d:93:e7:
e8:bf:41:2f:c2:38:0d:d3:b6:43:32:a7:a8:44:d6:
50:3a:47:ab:c1:bb:35:7e:ed:c2:b1:0a:57:a7:b9:
cb:4d:f1:da:76:0f:1c:57:4c:49:61:6b:39:81:62:
c7:db:93:bd:07:1d:6b:8f:77:83:bf:34:65:2a:10:
80:d2:53:e1:fc:06:c7:41:00:e7:e4:88:fc:1f:3f:
55:91:8b:ae:24:40:80:38:a6:91:5d:19:50:3d:61:
b9:cf:6f:71:6f:09:ae:0d:87:a2:b0:33:94:eb:a8:
3f:ac:2f:a7:5b:43:94:16:ad:99:c1:bf:07:9c:26:
8a:9d:b1:98:8b:95:c6:b2:0d:15:b9:4f:03:57:3f:
46:72:ae:b2:0e:16:3e:53:49:36:ed:a1:44:fe:35:
43:6b:17:1b:05:10:83:5f:d9:46:a2:ca:c3:74:55:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:07:1E:99:2B:96:A0:5F:CB:D9:6B:4D:DE:22:31:E9:11:B0:E2:21
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/EQcemSuWoF_L2WtN3iIx6RGw4iE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:9b:64:2c:02:55:db:06:a5:af:eb:8c:ca:9c:e4:e6:3b:df:
e9:f0:23:dd:b1:76:80:4b:5b:70:dd:60:59:f5:b9:fb:6b:91:
7c:f0:43:cf:b3:ba:31:b1:67:df:a3:74:45:30:5b:6d:2b:e4:
ac:ab:47:ce:c1:3c:83:f9:3b:d4:e8:1e:74:b5:87:f8:51:bd:
8a:1f:d9:58:6d:f9:93:7b:9f:cd:46:62:a1:16:df:52:48:fc:
37:76:94:30:2c:19:b3:85:99:d1:c9:19:9c:d4:8d:fd:19:f5:
c0:07:c6:dd:05:41:1e:3e:35:3f:a6:4b:cd:a6:d7:fb:5d:60:
ec:8a:8d:7e:f1:a9:98:24:26:7a:a2:3e:4c:ee:8d:e8:2c:4c:
e7:f8:df:7b:29:26:5d:68:58:4e:5f:cc:ab:f5:5e:1f:14:7b:
79:8a:d9:95:68:98:b1:8c:67:46:d6:ec:e8:56:2e:e0:bd:1b:
ef:0b:df:92:a5:96:31:73:86:4c:ec:ac:ad:ad:83:93:6e:74:
fb:04:f0:9e:c7:41:63:b5:c5:3f:32:b5:02:fd:6d:ea:97:aa:
8f:d6:cc:31:08:3c:fc:b3:af:b1:18:71:49:e4:20:82:44:bf:
6b:23:c9:83:f7:dc:c2:dc:74:32:50:49:10:9b:00:de:96:45:
ce:82:34:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org