Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/HArxSCZvZCjZ-oY3joN3uYb39u0.roa
File: HArxSCZvZCjZ-oY3joN3uYb39u0.roa (raw, json)
Hash identifier: KiMjFYQ/bwJVLGz24EnsqUNtj9qALwjxLfK/Y0OpSAw=
Subject key identifier: 1C:0A:F1:48:26:6F:64:28:D9:FA:86:37:8E:83:77:B9:86:F7:F6:ED
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C3D
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/HArxSCZvZCjZ-oY3joN3uYb39u0.roa
Signing time: Wed 29 Sep 2021 02:39:11 +0000
ROA not before: Wed 29 Sep 2021 02:39:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 141167
IP address blocks: 150.116.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3133 (0xc3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:39:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1C0AF148266F6428D9FA86378E8377B986F7F6ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:6d:fa:6a:26:82:2e:ea:86:5b:3e:ad:f9:
bd:32:c7:5b:d1:98:bf:16:c4:18:65:08:7e:38:bc:
c2:8f:54:95:ff:ba:60:34:e1:c2:59:b8:b2:78:c8:
2d:66:b3:eb:d9:d9:2b:73:d9:5d:0e:6c:9b:88:2d:
80:fb:2e:48:55:6c:de:e2:64:57:04:e4:a0:2b:ce:
ff:82:bd:24:e5:b1:6b:ca:ff:17:8a:d9:3d:f6:9f:
e4:64:20:56:f7:90:ba:00:7b:26:2f:7d:c4:72:ab:
40:1c:72:4c:cf:b7:fe:47:df:9c:16:1c:4d:75:71:
32:24:81:3b:cc:c4:dc:de:44:ac:5d:4e:b5:3f:82:
37:42:bd:7e:8f:5e:a2:ee:cb:34:44:21:b6:bc:e1:
4e:23:47:12:dc:d9:08:9a:01:44:64:10:cb:b6:25:
79:ea:86:73:24:d8:8e:30:bf:15:55:21:99:c3:0c:
af:81:88:e4:aa:eb:a7:29:1e:05:df:d3:32:fb:c6:
ac:96:35:f2:f3:99:4f:59:f8:2f:4b:b0:55:49:5a:
89:f6:64:4f:01:e4:d1:49:03:db:74:ab:40:9a:a6:
23:23:91:ad:28:8e:1e:f5:43:16:16:ca:26:41:89:
02:a2:fe:18:c0:f7:4b:e4:16:c7:15:18:cd:40:20:
79:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0A:F1:48:26:6F:64:28:D9:FA:86:37:8E:83:77:B9:86:F7:F6:ED
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/HArxSCZvZCjZ-oY3joN3uYb39u0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.81.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5a:1a:28:90:6a:75:49:21:a5:6f:96:17:6b:bf:eb:e7:aa:
59:ef:9d:a7:f6:b9:8b:6c:7b:e6:72:8f:76:98:94:63:16:82:
7f:7d:07:49:1a:05:0e:2a:6e:1b:9d:bd:75:f5:5b:6e:09:58:
58:9e:d2:ce:5c:32:0f:ee:46:61:40:62:d3:76:6a:99:2c:15:
2d:dc:d7:1d:dd:44:37:81:5c:03:99:ac:5f:a4:d2:d2:91:44:
1e:b1:2d:a9:04:a0:e5:6a:15:19:32:2b:e7:d7:51:e8:fe:73:
4f:a7:5c:b1:73:ee:48:90:f8:7a:f4:ee:56:35:9e:43:28:a6:
01:ec:90:28:d7:6f:46:85:40:03:86:0f:2b:f6:b8:89:95:27:
76:8b:af:3e:fc:4f:8d:54:b8:1e:bb:58:f8:6b:1f:60:5d:ae:
ca:df:60:4a:dd:50:45:c7:48:d2:73:dd:29:42:87:5d:c6:f0:
f1:45:d3:46:92:da:08:6b:a0:a0:84:fc:cb:bd:b6:d5:58:d6:
30:74:90:88:4f:45:27:c6:27:ac:2e:98:80:cd:c2:41:6d:84:
45:e0:67:8e:a6:d1:33:2c:0e:27:4d:74:60:b5:d7:1d:f3:f4:
c2:96:28:48:fa:3b:95:58:b5:4a:36:47:4f:0a:8a:e2:fa:58:
83:79:cf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org