Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Gw5mDPJ16dMpe-RGd888k5hVD3E.roa
File: Gw5mDPJ16dMpe-RGd888k5hVD3E.roa (raw, json)
Hash identifier: JYvEoz8Wedz/rcZsavN2YVnL0xfGg0zKDglITy7S4oM=
Subject key identifier: 1B:0E:66:0C:F2:75:E9:D3:29:7B:E4:46:77:CF:3C:93:98:55:0F:71
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D59
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Gw5mDPJ16dMpe-RGd888k5hVD3E.roa
Signing time: Mon 05 Sep 2022 05:42:27 +0000
ROA not before: Mon 05 Sep 2022 05:42:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 138915
IP address blocks: 150.116.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3417 (0xd59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 5 05:42:27 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1B0E660CF275E9D3297BE44677CF3C9398550F71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c3:bb:de:0f:94:81:04:b5:04:c9:0e:e7:b2:
da:db:09:d9:a8:49:13:78:c9:9e:5c:43:5b:d0:58:
ed:89:42:7a:47:5b:3b:ff:1b:90:7c:00:58:28:7d:
fe:83:3d:1b:12:2c:6d:a9:09:7d:41:56:4f:5e:ef:
58:38:11:10:8d:98:26:42:63:f5:20:de:63:e4:ae:
36:b2:ef:c8:46:d0:c8:e5:48:01:77:9d:18:ee:2c:
e2:a4:13:6f:9e:24:26:51:36:61:3b:ae:a0:90:bb:
00:b6:f7:1f:8d:a3:88:0f:ff:6d:0e:0d:31:f8:76:
3d:95:b6:ff:35:43:ee:ae:5e:c7:b2:db:87:08:8e:
2a:24:74:4e:4c:17:41:8f:56:9c:1b:e0:2f:43:14:
13:7c:05:8a:9b:53:57:2d:46:21:6f:58:57:c8:82:
66:e8:84:c8:b7:1e:b9:e9:b1:b2:11:a3:95:54:e7:
24:6a:47:a2:55:7f:fe:74:f9:ad:63:52:88:ef:07:
f1:e7:3a:c7:c5:68:60:5c:58:00:59:d3:3d:39:db:
0a:aa:ca:66:11:7f:66:a9:37:d9:37:1c:2e:0e:e6:
a1:55:5f:93:39:64:03:13:ce:4c:9c:fa:22:d6:c9:
be:e5:95:e1:6b:c8:25:bf:05:4d:4b:50:e4:07:a5:
4c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0E:66:0C:F2:75:E9:D3:29:7B:E4:46:77:CF:3C:93:98:55:0F:71
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Gw5mDPJ16dMpe-RGd888k5hVD3E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.117.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5d:2d:8a:e4:5e:bc:94:3a:30:c6:07:ff:04:a5:18:d8:cf:
bc:67:51:70:9b:f8:8e:8b:3a:f5:1e:e9:99:92:e5:49:a1:e4:
ea:ed:c7:e7:a0:cf:19:fb:31:d1:be:b8:a4:09:0e:de:c6:8b:
a3:ad:84:85:8c:20:27:43:a3:0a:39:51:5b:7a:4d:c4:f1:d8:
90:e1:2b:42:7e:ea:a9:42:94:ab:43:ec:39:0e:de:1c:b5:76:
ba:9d:53:a8:4b:e2:ac:c6:75:7a:7e:92:b9:ed:e1:0e:e1:b5:
02:5e:06:31:98:65:41:d5:b4:aa:7d:2b:27:a8:54:21:be:30:
bc:17:34:61:2a:3d:9d:05:fa:bb:22:64:cc:51:46:9c:bc:8b:
be:84:83:4b:e5:6f:a6:66:e5:42:ef:ee:ac:ef:40:74:59:e6:
e5:fa:51:89:7a:6f:c0:a3:c9:25:de:7c:45:da:6a:23:f1:04:
87:06:50:60:36:f9:04:1a:7a:e0:8b:88:5b:54:2d:ee:ac:70:
94:f2:60:9d:e5:71:9c:65:41:d3:e1:92:24:a5:6c:4d:b0:3d:
5c:ef:b4:f4:37:e0:80:81:49:fc:06:b1:f1:f9:b3:f8:42:c9:
73:dd:cb:00:2e:98:01:26:d6:46:57:77:1a:fb:08:db:a3:80:
89:92:b9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org