Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/H4skz5NkLt1TI9Cp2HCBj4Q1dts.roa
File: H4skz5NkLt1TI9Cp2HCBj4Q1dts.roa (raw, json)
Hash identifier: O6NMA3jsaQm2WDddaXup+KLwOQVvEgX1Jdm5s99K9+w=
Subject key identifier: 1F:8B:24:CF:93:64:2E:DD:53:23:D0:A9:D8:70:81:8F:84:35:76:DB
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0A9E
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/H4skz5NkLt1TI9Cp2HCBj4Q1dts.roa
Signing time: Sun 07 Feb 2021 11:50:39 +0000
ROA not before: Sun 07 Feb 2021 11:50:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 10085
IP address blocks: 150.117.112.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2718 (0xa9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:50:39 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1F8B24CF93642EDD5323D0A9D870818F843576DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:85:a0:fc:ef:21:a8:ca:df:5d:d7:ac:e4:ce:
de:c3:b1:09:0f:ff:28:bc:e1:bc:47:60:1c:a4:d2:
af:4d:fc:bb:05:9c:48:bc:27:d0:63:3e:5d:c9:1e:
23:9d:47:ec:03:ac:86:79:d0:cc:f0:71:7d:69:a7:
11:90:bb:24:03:d9:e5:ca:e8:0d:cf:9a:d7:a4:11:
6f:7f:30:fa:18:23:7c:40:df:2c:d0:26:d2:e3:f6:
0c:c1:d3:b4:7b:68:a2:16:9e:d8:a9:62:2a:2c:f0:
d3:11:32:4b:7e:bb:c4:6d:d6:be:56:6f:e6:53:3f:
b6:91:ad:03:7f:9e:f8:a4:0b:14:07:4d:d1:14:de:
cc:55:83:61:e9:20:80:4b:eb:19:8a:0a:84:1a:d6:
d8:66:90:25:31:64:e5:6e:9f:76:d3:44:f9:f7:23:
a3:ea:ef:fe:b7:7b:2e:3e:f9:04:54:62:ef:54:fb:
20:2b:f9:a7:14:17:22:32:95:95:14:79:8d:63:96:
ff:8b:2d:48:9b:20:90:9e:b4:1b:b4:1c:66:a4:2f:
b8:03:c1:07:18:f4:3c:87:1e:fb:21:57:6a:25:be:
95:cd:d6:9f:32:af:42:c0:2a:f4:39:b5:0c:bd:be:
9b:d8:5f:bb:20:ab:2b:d1:3a:5b:d0:85:b2:40:64:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8B:24:CF:93:64:2E:DD:53:23:D0:A9:D8:70:81:8F:84:35:76:DB
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/H4skz5NkLt1TI9Cp2HCBj4Q1dts.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.112.0/21
Signature Algorithm: sha256WithRSAEncryption
19:df:da:18:94:87:3f:7f:26:73:79:45:00:2b:12:37:18:1a:
59:ce:78:09:89:b7:ee:96:12:c9:d8:ae:ba:e9:ed:0c:17:e7:
87:e5:f2:38:5d:ad:29:04:0d:8b:0c:f6:47:4d:08:64:bf:da:
05:f8:86:1e:90:6d:4b:75:66:de:17:02:b3:ec:e2:64:41:42:
ae:07:a9:13:9f:13:64:7e:8a:0e:aa:1e:b9:06:de:5c:3d:a4:
4c:dd:18:5c:ba:d4:e2:86:c0:6f:87:1f:8e:c2:bf:5a:6e:16:
fe:fc:b0:c2:8d:d2:16:67:90:1e:5d:e9:05:9d:bc:b8:af:c0:
a5:9c:8a:fb:b7:7b:0a:8c:a8:04:91:52:ef:e0:93:03:4d:64:
1c:9d:3c:c4:f0:4f:e5:f8:ac:cc:b2:27:05:44:6b:f9:c1:1f:
40:58:f6:aa:16:f3:37:9e:57:bc:9d:f1:ae:f3:2e:a0:29:cc:
a0:f8:87:c5:f3:b8:c9:61:6e:5e:fc:48:7c:3d:16:e6:90:0c:
a2:a1:8a:0f:7c:cb:a5:2c:77:a9:9b:64:74:a0:84:eb:e0:ba:
2e:40:ed:f4:95:09:ac:ff:07:11:6b:63:d8:35:ee:37:bf:26:
b1:88:d0:5c:f6:71:6c:e8:d8:8c:60:49:c5:6a:df:00:13:14:
36:77:20:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org