Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/HGSMQU65-3urcEe8DC9OZeq-_HE.roa
File: HGSMQU65-3urcEe8DC9OZeq-_HE.roa (raw, json)
Hash identifier: K7E1ujBiGZlP/spUNI6gNSUF/0AZNH6/mQU9+KROP4s=
Subject key identifier: 1C:64:8C:41:4E:B9:FB:7B:AB:70:47:BC:0C:2F:4E:65:EA:BE:FC:71
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/HGSMQU65-3urcEe8DC9OZeq-_HE.roa
Signing time: Thu 15 Sep 2022 02:39:06 +0000
ROA not before: Thu 15 Sep 2022 02:39:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10085
IP address blocks: 223.26.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1C648C414EB9FB7BAB7047BC0C2F4E65EABEFC71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:00:02:37:53:f3:19:4b:bf:f7:c8:c4:18:
ed:55:12:20:6d:21:5e:2d:64:0f:19:8c:00:c0:6d:
4a:52:53:0f:06:4d:8a:52:c2:ef:f7:5d:51:2f:ed:
e7:da:65:5c:ef:b2:b2:ed:55:0d:06:f6:ab:e7:66:
e1:3e:aa:85:bb:ca:7a:dd:4c:70:dd:60:cc:fa:75:
27:58:80:66:38:e1:ab:ce:64:a6:38:d9:8b:ae:fd:
40:3b:7b:98:e9:53:53:92:39:1b:d4:69:ca:d1:65:
44:93:f6:2b:a5:60:03:86:99:20:d3:8b:7d:83:89:
3e:9f:b5:8b:73:c0:9a:30:3a:f3:b6:c3:26:61:3e:
3f:2a:e8:0a:24:2c:64:43:19:4c:a7:a5:f3:3e:4d:
5f:eb:76:cf:9a:0d:62:d7:73:ac:62:5a:41:b0:a0:
3d:73:eb:45:1c:3f:6a:76:9d:a3:03:c5:87:81:3d:
b7:7d:36:e1:90:c1:96:d4:ee:9e:65:12:e3:31:0f:
10:2c:bf:5f:9d:58:20:2f:3f:83:2e:b3:88:e9:be:
aa:94:50:00:de:9d:0b:dd:e1:00:44:e7:c7:2d:22:
12:c9:6d:7f:b3:61:4b:c0:04:d8:b7:1e:e5:b4:4e:
f2:97:29:05:9e:f4:f5:77:d7:d2:66:83:e2:83:94:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:64:8C:41:4E:B9:FB:7B:AB:70:47:BC:0C:2F:4E:65:EA:BE:FC:71
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/HGSMQU65-3urcEe8DC9OZeq-_HE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.92.0/22
Signature Algorithm: sha256WithRSAEncryption
72:c0:6a:e9:4a:1c:9f:03:a5:81:d4:d0:47:5a:14:a7:7e:34:
f6:02:75:39:01:ff:3b:75:8a:b5:96:fe:23:86:1f:cd:d8:ab:
57:62:9d:21:3f:a4:ad:98:cb:d9:d8:d1:88:0e:66:b5:ec:02:
ee:a0:26:78:e3:7a:32:d3:3c:45:39:91:23:66:8e:5c:b0:26:
8c:e3:9d:eb:1c:fb:3b:18:28:a9:43:54:03:34:e0:48:09:f7:
cf:56:08:c4:c3:18:48:32:bc:4d:b2:70:73:8e:cc:ef:37:48:
fc:f1:98:e4:24:91:7e:0a:f0:2e:7d:54:1c:ad:6c:f3:cf:a6:
97:f5:be:c4:f1:96:27:fa:78:4a:6f:41:94:91:cc:6b:a8:46:
ef:1d:7b:db:d1:a9:6d:31:48:04:5c:6e:d2:ea:61:ce:06:b3:
fb:e1:fd:63:be:69:73:da:1f:74:d4:e8:ec:d0:f7:36:26:d2:
0b:f7:0c:c8:38:cf:80:14:db:72:7f:55:cb:b4:73:40:d6:37:
67:1c:93:20:18:b4:fe:a9:56:a9:2d:8e:9c:b8:99:d6:b1:4b:
b1:fd:95:a6:06:80:06:44:da:44:f0:9c:e5:d5:81:4a:b2:79:
7a:a1:2e:73:c6:94:d1:61:88:1c:f7:8e:d2:f9:cb:74:06:19:
b0:2c:51:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org