Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/GpAymKd5719Sh8xVx7aLsJijkPM.roa
File: GpAymKd5719Sh8xVx7aLsJijkPM.roa (raw, json)
Hash identifier: h4LejRuXfbp7RxRZFVMmlPCVAIYGxcucmoNPhH0kEH8=
Subject key identifier: 1A:90:32:98:A7:79:EF:5F:52:87:CC:55:C7:B6:8B:B0:98:A3:90:F3
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C7C
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/GpAymKd5719Sh8xVx7aLsJijkPM.roa
Signing time: Mon 22 Nov 2021 00:55:34 +0000
ROA not before: Mon 22 Nov 2021 00:55:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18419
IP address blocks: 118.150.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3196 (0xc7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Nov 22 00:55:34 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1A903298A779EF5F5287CC55C7B68BB098A390F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:ea:ec:ce:ec:c6:7e:da:e6:14:8e:d7:c6:
4a:45:b1:7d:8e:14:cd:82:9e:1c:e3:ee:2d:4c:9f:
dc:55:8e:31:b9:7f:bb:a7:92:00:2c:36:55:48:82:
4e:37:96:f3:7f:e2:12:93:b9:a9:54:a3:65:0d:a4:
47:f3:8a:fd:24:b8:94:88:5a:13:0f:af:dc:a0:7f:
73:b9:6a:c4:83:92:b0:5d:2d:49:7c:b3:9d:72:44:
ff:0d:22:14:fc:da:b4:51:27:c9:ad:7c:1f:b9:ce:
c4:dd:60:4f:03:8f:19:e5:e4:99:34:4d:bc:be:73:
ea:9e:72:9b:e5:84:93:f9:b2:4b:da:41:59:a3:95:
7a:ce:d5:08:35:ef:83:f9:53:04:1f:85:e1:a5:21:
3e:96:b7:ba:cd:8c:5a:43:5b:52:9a:72:f1:b6:fe:
ec:0d:4a:46:0a:91:23:52:38:5b:b7:4d:a2:11:83:
1a:45:e3:aa:b0:12:9f:89:29:b0:ab:5c:c9:65:1d:
4b:b2:d3:e9:47:84:b2:c2:5e:4f:7a:ab:37:2d:dc:
c4:3f:f3:b2:9f:0b:1c:de:6d:bf:c9:66:52:1c:de:
08:c6:b2:3e:c7:06:9b:5d:7f:07:11:50:b6:69:16:
0e:e6:ed:50:66:c3:aa:e6:3a:c6:28:2d:fc:8f:fc:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:90:32:98:A7:79:EF:5F:52:87:CC:55:C7:B6:8B:B0:98:A3:90:F3
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/GpAymKd5719Sh8xVx7aLsJijkPM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:28:d8:92:59:2b:4a:4b:a6:7e:e8:21:d7:a9:5c:d3:a6:68:
46:e8:6c:fa:dc:28:70:0b:e8:e0:dc:db:42:6f:21:4c:40:53:
4b:c4:06:45:66:ad:3b:76:4f:3d:12:78:b9:aa:76:af:a0:bb:
26:61:e7:25:53:23:82:95:69:12:a8:6e:8c:57:67:6c:d4:90:
b3:25:8c:c1:74:7b:e8:ba:86:e5:91:0c:32:08:76:af:e9:f8:
24:a3:0d:de:f4:4f:8c:b8:7e:7e:e6:a4:99:cd:5e:c3:d3:36:
a3:fb:a3:4f:f7:47:ae:ab:0f:75:4d:ed:eb:16:ad:7f:e2:21:
93:48:21:1c:b1:71:9b:11:fa:a8:cb:63:2a:9f:25:d5:61:a6:
14:95:f9:91:ae:a9:35:d6:0b:7a:77:5e:ac:16:99:3c:14:b6:
81:3b:02:2b:3d:fb:58:b9:ca:7d:5b:6a:36:e0:0d:4b:12:17:
47:53:e8:f1:1a:2d:4f:34:50:39:f4:07:e8:f0:37:4a:a1:60:
36:a8:ff:70:f5:3d:8b:68:8c:5e:12:93:c2:ab:e2:fc:f8:d0:
e3:91:5f:23:57:87:05:5e:9d:2b:bd:7b:9d:1a:a0:8d:2c:2e:
05:0e:17:cf:04:36:f4:64:04:b6:6a:84:62:7e:7c:25:9d:2f:
59:de:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org