Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/IA_QrTLdQtREJwrky4UhUIzUDn4.roa
File: IA_QrTLdQtREJwrky4UhUIzUDn4.roa (raw, json)
Hash identifier: OY5eusG1DIbwMS7tEFjruYmPJHnQ4NYvdCjumClODWU=
Subject key identifier: 20:0F:D0:AD:32:DD:42:D4:44:27:0A:E4:CB:85:21:50:8C:D4:0E:7E
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0849
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/IA_QrTLdQtREJwrky4UhUIzUDn4.roa
Signing time: Tue 29 Sep 2020 10:02:17 +0000
ROA not before: Tue 29 Sep 2020 10:02:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:17 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=200FD0AD32DD42D444270AE4CB8521508CD40E7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:b2:6a:5b:40:c9:f6:e7:1e:17:27:36:b1:
2d:0a:b0:cb:f9:37:66:20:b0:d7:3e:bb:eb:40:ba:
4e:d1:78:30:a5:af:94:bc:19:76:b2:c9:6d:e2:1f:
a0:91:86:ca:e0:8d:57:97:4c:2e:62:8f:92:b2:0c:
cb:3c:67:1d:9e:8d:91:7b:96:9e:30:44:ff:a6:28:
2b:92:dc:4c:0f:a2:79:1e:9f:9f:0b:b0:ca:40:97:
70:d0:c5:80:7a:f6:e6:56:1b:65:74:c4:15:01:09:
38:6b:dc:74:04:38:d9:dc:02:ee:b5:5d:99:1e:31:
4c:e5:4c:05:6d:74:fc:07:84:32:55:18:89:84:16:
dd:1f:8a:d5:94:f1:f6:9d:c4:4e:6e:5c:9d:84:e6:
a1:35:2e:98:c6:58:77:aa:35:f9:4a:ac:69:df:60:
ef:99:98:d3:3d:0e:5e:6d:b4:d3:c1:f4:a3:ae:7a:
68:e2:59:70:5b:f0:27:b8:59:27:ea:51:20:e5:cc:
a1:d7:f6:ca:26:09:c8:e5:35:0e:71:b1:76:33:a6:
b2:01:36:75:d8:63:f8:e6:14:3d:55:59:79:af:a6:
03:cf:4a:77:6e:8f:c7:92:3e:6e:4d:97:28:86:ca:
80:4c:e6:84:e8:ef:8a:c9:e0:51:8b:d5:cd:57:06:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0F:D0:AD:32:DD:42:D4:44:27:0A:E4:CB:85:21:50:8C:D4:0E:7E
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/IA_QrTLdQtREJwrky4UhUIzUDn4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.83.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f6:80:0a:2a:88:b0:d3:9c:d1:9f:72:81:68:c3:e5:a4:9b:
0f:cb:ce:e8:20:59:80:23:f4:8b:7a:e4:c6:06:1e:f5:80:a7:
f6:c3:03:e0:a4:79:40:91:43:87:b2:73:21:1a:56:ba:f5:ff:
85:ea:60:94:bb:d9:83:45:99:31:f4:16:6b:c1:7b:cb:73:0c:
8c:82:20:cd:5d:0a:48:dc:66:2b:db:d1:8a:28:34:a3:59:b4:
9d:10:03:9c:d8:f0:96:3f:1e:b6:cc:d3:c4:12:b2:e9:c7:7b:
a3:9a:7a:79:53:92:30:b3:bd:c7:fc:c3:9e:54:38:e1:58:8c:
ba:f5:4c:96:17:51:b0:14:c9:23:9a:74:6f:ce:34:59:de:02:
67:87:0c:56:71:92:a0:0d:89:8a:4a:30:f9:49:d8:7f:d5:34:
d1:ec:b7:3e:e1:40:d8:04:31:15:b1:66:0f:9a:d1:83:b6:9a:
8f:81:10:74:1e:ff:50:c8:c8:98:36:26:62:bb:b4:3e:2e:ae:
98:87:73:68:3a:73:7a:df:b7:5b:05:19:ce:ee:50:b0:2f:1d:
3f:46:a8:ef:fe:7d:65:65:56:54:0a:13:5b:61:1c:87:9f:7e:
4b:fe:b7:55:5e:12:0e:fb:05:dc:19:44:30:71:94:79:56:1f:
71:df:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:20 2025 by rpki-client