Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/FgGgrAG1qgBZKyF4zHkFYH71cwQ.roa
File: FgGgrAG1qgBZKyF4zHkFYH71cwQ.roa (raw, json)
Hash identifier: 4yYgoItflhburm5E9SWCTBaLA2JTGc1+BAEZeWiYGV8=
Subject key identifier: 16:01:A0:AC:01:B5:AA:00:59:2B:21:78:CC:79:05:60:7E:F5:73:04
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0853
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/FgGgrAG1qgBZKyF4zHkFYH71cwQ.roa
Signing time: Tue 29 Sep 2020 10:02:19 +0000
ROA not before: Tue 29 Sep 2020 10:02:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 150.117.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2131 (0x853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:19 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1601A0AC01B5AA00592B2178CC7905607EF57304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:9f:75:41:1b:ca:69:49:7a:6c:80:2b:05:
5b:d1:a8:fd:72:5b:34:e4:7c:e3:8d:d9:82:ed:21:
c3:e9:45:b1:92:14:b0:a7:08:18:a5:70:0b:50:b1:
24:76:8c:8f:aa:b7:f9:6e:ca:14:e6:d4:d6:b9:48:
40:46:3b:f1:88:bf:5b:5f:e3:78:7c:8e:0f:0d:43:
a4:66:36:07:b1:c1:3d:a6:b5:3a:f9:93:59:81:36:
a7:c5:7e:c2:b4:af:70:f1:bf:ad:f0:09:65:ec:e8:
74:3e:f6:e7:27:04:20:b3:c6:26:a6:2f:aa:ca:52:
c6:77:00:45:11:00:e5:38:cd:3c:fc:b0:83:7e:06:
d7:cc:5b:88:16:62:7b:d9:87:f7:b3:88:9f:30:72:
7e:9e:6a:69:e4:43:1d:4f:e3:ae:21:71:67:27:5a:
d6:cf:9d:9a:7b:18:5f:67:52:94:40:07:82:c1:b0:
1e:49:45:60:46:92:24:d4:de:3a:d4:28:6b:39:90:
34:7c:30:f6:7f:75:ec:08:55:f5:57:d1:96:b7:3e:
86:0f:f4:7a:ea:ae:0c:09:da:a9:55:66:9d:57:5a:
25:6c:0c:98:b4:cb:c1:5d:01:b9:68:0f:ca:82:8b:
9d:96:0c:17:ea:1c:61:9f:90:66:e8:91:33:8d:42:
6f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:01:A0:AC:01:B5:AA:00:59:2B:21:78:CC:79:05:60:7E:F5:73:04
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/FgGgrAG1qgBZKyF4zHkFYH71cwQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.0.0/20
Signature Algorithm: sha256WithRSAEncryption
73:f1:06:ad:c9:d3:4e:68:6c:e7:76:25:69:6f:3d:89:61:1d:
16:5d:22:66:9f:f1:99:ca:90:f2:73:78:99:1a:ad:dd:8b:87:
a9:85:6f:51:ce:c4:96:88:d9:02:d2:ec:80:c8:b2:39:fb:df:
11:6c:f5:ae:8d:c9:0c:0a:dd:02:41:ac:89:74:e6:bd:2c:fa:
36:ee:98:4e:18:39:b2:6b:74:00:89:f9:6f:e5:e3:37:99:db:
41:e9:cf:c8:c6:5c:20:30:47:3e:83:39:3a:e2:1a:49:70:2f:
40:ed:50:3b:3e:50:ea:06:2c:08:77:5e:8d:55:ef:d7:74:55:
58:27:59:59:32:f4:aa:79:30:19:44:cd:9f:e2:32:aa:fe:4f:
55:c3:d3:2b:7a:b6:3b:0d:52:28:a9:62:8e:1a:44:b5:92:40:
8c:41:5e:a0:00:2a:a8:86:70:e0:3a:a9:b5:3d:86:f2:c4:c8:
65:9d:a7:b2:91:8a:a4:df:da:58:ba:f0:9e:51:29:1b:d2:e5:
7b:f6:ce:90:86:9c:2c:6f:e6:3c:99:3d:22:91:5f:0c:55:e4:
24:28:11:6a:7e:c4:87:8c:e1:39:f0:4a:97:ea:7a:75:07:61:
1f:d2:ba:d8:1a:c1:5f:80:46:07:60:4e:b2:e6:ba:2a:dd:9e:
89:44:8a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:23 2025 by rpki-client