Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/GAaSNRY3fIpqP21LkC5lu4ayDv4.roa
File: GAaSNRY3fIpqP21LkC5lu4ayDv4.roa (raw, json)
Hash identifier: bJncI6SGzlEnrXYi4KKa5pMYMhPhC3L/jnEjh6rccN4=
Subject key identifier: 18:06:92:35:16:37:7C:8A:6A:3F:6D:4B:90:2E:65:BB:86:B2:0E:FE
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 086D
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/GAaSNRY3fIpqP21LkC5lu4ayDv4.roa
Signing time: Tue 29 Sep 2020 10:02:27 +0000
ROA not before: Tue 29 Sep 2020 10:02:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9922
IP address blocks: 118.150.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157 (0x86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:27 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1806923516377C8A6A3F6D4B902E65BB86B20EFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:df:84:10:2b:32:59:23:c3:f1:ae:66:4e:
28:30:90:79:cf:79:30:43:e5:eb:70:9b:69:bb:19:
1a:0c:0e:1e:e8:c6:13:5f:a5:62:9e:6b:ec:ec:8e:
31:11:af:11:12:e8:55:b3:22:ba:0f:72:76:77:11:
4d:d3:cc:d6:d4:e0:18:49:76:00:88:6d:e2:36:93:
ff:ba:3b:ae:a7:f7:7d:75:34:e7:eb:88:9a:2d:be:
80:7c:0a:31:08:4d:70:83:b2:45:25:3f:8c:f8:28:
87:7c:3f:24:77:d9:8b:6d:3a:bf:69:94:aa:f9:3e:
6a:86:f5:fb:c8:d5:b8:53:f3:7d:40:28:5f:1a:24:
18:6b:81:f0:90:a9:03:a9:d6:26:d9:c8:c5:df:ea:
02:3b:6d:08:2b:01:a3:53:9e:83:1b:3d:86:85:45:
a7:d3:4f:b1:6b:21:11:e1:8a:3c:b3:b8:de:4b:af:
23:c2:cb:3e:86:4e:be:82:ad:66:14:91:81:eb:0c:
a4:0a:e9:44:ef:12:2c:86:d1:e3:41:6f:4c:0c:4e:
39:26:fd:18:d0:1f:93:27:60:bc:80:91:16:3b:4d:
f6:10:6b:0d:23:b9:81:61:1b:76:bc:7e:8b:9e:45:
77:f0:64:65:77:8c:2c:21:4b:8b:55:0b:ca:a3:dc:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:06:92:35:16:37:7C:8A:6A:3F:6D:4B:90:2E:65:BB:86:B2:0E:FE
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/GAaSNRY3fIpqP21LkC5lu4ayDv4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.244.0/22
Signature Algorithm: sha256WithRSAEncryption
93:72:8b:b9:dc:32:48:dd:93:9c:18:2a:48:55:00:17:cc:9d:
06:19:8f:c3:c6:f6:46:a9:6f:44:0d:97:c7:72:5a:a8:5a:e2:
15:52:16:93:84:ff:ef:7d:d0:aa:08:48:09:2d:e0:1f:88:fc:
b4:0c:61:9b:51:d7:e1:28:08:22:74:d5:dc:80:b6:d4:d6:d5:
b9:25:66:4c:99:15:d0:d4:c0:76:22:a1:c3:4d:23:66:09:47:
94:11:5d:79:d5:df:54:e5:c3:f8:d7:65:3a:80:34:1e:ed:b4:
42:6b:aa:6c:4a:68:2b:6f:96:bc:15:b6:57:3e:2d:da:e3:11:
59:00:1e:c3:6a:41:b7:7e:cc:13:69:9a:49:2a:b6:f3:7c:50:
7b:2b:25:9a:95:d7:f5:96:fd:92:11:8d:d7:2a:d2:46:dc:dd:
0d:b4:0c:5a:33:43:d5:79:97:b9:c9:bf:f6:03:2a:a5:c7:70:
c1:9e:18:07:16:6b:2c:77:0a:a3:9e:21:67:5b:b8:9b:de:db:
8f:a4:10:c7:7c:35:16:5b:c3:76:24:63:e4:36:32:a8:c2:fb:
70:dc:8e:9e:a3:50:67:bf:ff:fa:9f:61:88:10:1f:bc:26:91:
c2:91:be:66:9d:d2:67:ab:17:f0:66:ce:4c:00:c1:ed:d3:18:
95:23:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org