Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/FD3IEZB3QjWVcDa0Q5W3DdF8uuY.roa
File: FD3IEZB3QjWVcDa0Q5W3DdF8uuY.roa (raw, json)
Hash identifier: souof2LaPtUXdpFEZ0N9Pyp7x3ipJqdTISMWXeP9WYQ=
Subject key identifier: 14:3D:C8:11:90:77:42:35:95:70:36:B4:43:95:B7:0D:D1:7C:BA:E6
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C08
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/FD3IEZB3QjWVcDa0Q5W3DdF8uuY.roa
Signing time: Wed 29 Sep 2021 02:38:58 +0000
ROA not before: Wed 29 Sep 2021 02:38:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17408
IP address blocks: 150.116.8.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3080 (0xc08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=143DC81190774235957036B44395B70DD17CBAE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:3c:6d:11:ec:af:ec:26:b9:76:90:fc:c3:
7d:37:f4:50:83:0c:f2:f6:a8:fd:1a:54:33:65:58:
98:33:5b:65:2d:cc:e9:e4:58:86:e3:54:ee:2c:98:
5f:e1:5a:1f:8e:fd:91:89:ef:b4:bf:27:1f:25:c9:
92:6b:5e:5e:9f:2c:97:6c:b5:45:06:67:8a:18:7d:
fb:c8:7a:de:0d:f7:69:cd:2a:40:ad:87:83:c8:d2:
82:e3:9e:28:7a:ae:5c:fe:60:04:45:08:fe:51:68:
a6:64:be:f2:26:af:6f:71:76:65:d0:e4:c6:a1:24:
b5:a8:05:c8:ba:48:78:6a:32:4d:9c:57:ae:e4:a7:
ea:c8:c2:8a:ef:dc:3f:a6:78:23:b2:fd:70:72:03:
4b:c4:bf:5c:54:18:9d:b6:39:30:3f:12:2c:f7:c6:
86:f0:a9:46:e2:ec:c5:23:68:06:f0:48:63:a5:5f:
ea:b1:ec:6d:f4:41:ac:c5:c2:3a:6c:de:19:41:a1:
ee:31:80:de:6d:b8:90:17:7b:24:81:e8:5a:07:27:
15:08:4d:9d:83:83:d8:13:35:c0:91:ae:b6:24:84:
c1:ae:bb:00:97:b4:66:2a:31:81:40:94:8c:77:fc:
38:d6:e6:fd:6c:1a:78:8c:60:41:de:fc:98:54:d2:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3D:C8:11:90:77:42:35:95:70:36:B4:43:95:B7:0D:D1:7C:BA:E6
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/FD3IEZB3QjWVcDa0Q5W3DdF8uuY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.8.0/23
Signature Algorithm: sha256WithRSAEncryption
36:39:19:c9:c2:46:49:38:85:f7:e7:c1:a1:37:59:75:cd:74:
c8:53:a0:9e:50:ce:8c:bb:44:b3:86:0e:21:11:23:98:18:76:
6b:4d:04:d9:75:5d:e3:4c:cd:99:9c:32:6f:59:16:58:bf:4d:
ff:0e:51:58:17:89:a0:7f:70:3d:0f:2f:35:3c:7d:24:77:a0:
76:05:a2:40:66:fe:f8:4d:22:2e:01:46:54:9e:36:bf:9f:da:
5d:f3:07:97:66:8f:05:a5:9e:fd:83:12:8a:02:35:a4:df:38:
0e:ef:48:b1:2d:ea:8c:e5:81:59:d5:c1:4f:2d:07:05:c0:2b:
dc:d6:bd:73:e8:93:58:87:90:be:cf:4f:e0:d5:fa:f2:1e:89:
31:31:e7:c6:e0:45:cd:94:41:3a:f1:7d:42:6d:f6:7d:68:08:
56:69:fc:3a:37:5b:f3:03:e7:6b:e2:0b:52:13:50:1b:14:e4:
3a:8a:a9:5e:19:b9:e5:f0:64:1d:77:16:6f:a5:91:c4:09:27:
4b:25:ad:2a:77:b4:11:10:37:62:48:78:a2:19:e0:bd:85:cc:
98:fb:eb:6b:09:f1:e9:16:96:a1:17:51:28:64:04:1f:1a:92:
01:43:e8:4c:5d:9a:ec:b0:78:7a:86:9c:c0:07:1a:c9:a8:fb:
fa:9a:1d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org