Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/FGlkwehHkRLzcRarAXCzjQXy67Q.roa
File: FGlkwehHkRLzcRarAXCzjQXy67Q.roa (raw, json)
Hash identifier: 4XcstyJP0pIaYLtPT+nnWCRNkuGeOuwfLfFS0pShsN4=
Subject key identifier: 14:69:64:C1:E8:47:91:12:F3:71:16:AB:01:70:B3:8D:05:F2:EB:B4
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0AC4
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/FGlkwehHkRLzcRarAXCzjQXy67Q.roa
Signing time: Sun 07 Feb 2021 12:38:03 +0000
ROA not before: Sun 07 Feb 2021 12:38:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.168.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2756 (0xac4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 12:38:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=146964C1E8479112F37116AB0170B38D05F2EBB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:db:cc:37:f6:b9:0c:2c:3d:47:6e:05:a6:
85:c4:b8:f2:ce:b4:8d:d2:75:ef:75:63:b5:a8:7e:
62:bf:ac:48:0d:3d:7d:31:02:3b:55:67:2a:5f:63:
89:d4:2d:36:01:d4:0d:7d:ec:07:7b:a1:01:2a:90:
bd:12:e2:6c:b0:f5:df:94:f1:f8:14:a4:0f:39:d6:
ed:9f:17:53:07:d5:66:0d:b7:d5:d2:e4:27:5c:2b:
b6:9b:96:31:f0:dc:12:44:16:cd:3f:72:b2:91:ae:
af:08:dc:a0:50:9b:07:2d:97:66:41:3f:31:6d:81:
33:70:c0:1a:1f:06:25:81:73:01:1a:51:18:4b:16:
f5:6d:bb:ad:bf:51:e1:33:dc:46:c7:21:15:06:44:
98:8a:2b:b3:32:49:11:a2:11:ec:3a:8f:f7:34:34:
84:c3:9d:62:e1:94:c0:bb:1b:2e:df:a6:2c:3a:e2:
4c:23:7e:97:f9:41:a7:1b:37:3d:f5:04:d5:22:48:
1c:18:ff:ff:95:36:6a:47:e5:81:70:5b:89:62:fe:
b5:f7:05:5c:b3:d3:f1:17:0e:0a:8e:e3:f3:84:2e:
c1:b6:7e:12:55:e2:d3:eb:d4:a9:15:1d:fe:25:5c:
cc:3b:33:4b:d2:19:b2:d4:91:51:06:4c:d9:00:ae:
03:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:69:64:C1:E8:47:91:12:F3:71:16:AB:01:70:B3:8D:05:F2:EB:B4
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/FGlkwehHkRLzcRarAXCzjQXy67Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.168.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:bc:6d:d9:a8:3c:02:6f:60:cc:14:3b:94:cd:29:b9:ab:4a:
07:07:0b:82:5a:1a:cb:f9:bd:24:e9:03:29:48:49:a6:b8:7b:
79:e1:22:24:16:f3:1c:39:38:bc:bd:6b:c2:ae:6f:02:0d:61:
52:a3:ec:18:df:6f:99:02:f7:40:05:27:72:14:23:ca:fc:c0:
00:c0:bc:24:b9:16:02:1a:6e:4b:bc:aa:32:13:ab:57:15:02:
f1:c1:08:02:48:d8:9e:0e:27:27:a1:05:0f:9e:80:94:bb:0f:
da:4d:31:b0:30:d2:8c:e3:00:1b:06:11:bf:02:fb:e9:64:28:
54:7e:45:4b:2e:20:de:6f:a3:d8:8b:c7:d7:dd:3f:25:b5:ab:
d4:66:ca:7b:f9:cf:b9:98:e4:96:9e:5d:56:82:08:bd:b1:b4:
4b:5f:74:14:26:69:85:60:ba:a1:40:5a:15:b1:f4:10:dd:64:
31:4a:1b:c0:7d:28:a8:ba:e7:cb:3b:97:85:0b:76:aa:d7:23:
2b:86:48:fa:7d:8a:a6:d2:50:98:bd:5c:10:27:16:a7:92:4b:
2f:cb:a5:54:be:bb:d6:c2:c1:60:33:cd:f6:04:ed:57:d0:4e:
ab:d7:64:da:70:04:46:3b:49:bf:f2:d2:b1:c0:b7:23:d2:07:
ed:7d:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org