Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JcEymLYUIdhffGeSNyeYjgPzoWk.roa
File: JcEymLYUIdhffGeSNyeYjgPzoWk.roa (raw, json)
Hash identifier: +ij83n/8qHuqH8SZgYwYsVFmdgX5tmk6ahnjPWJcpJQ=
Subject key identifier: 25:C1:32:98:B6:14:21:D8:5F:7C:67:92:37:27:98:8E:03:F3:A1:69
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JcEymLYUIdhffGeSNyeYjgPzoWk.roa
Signing time: Thu 15 Sep 2022 02:39:12 +0000
ROA not before: Thu 15 Sep 2022 02:39:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 150.117.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=25C13298B61421D85F7C67923727988E03F3A169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:39:83:f8:cd:e6:8b:a0:8b:b3:27:88:39:b3:
45:d0:2e:1c:a4:8b:e2:e8:c0:aa:2f:f6:c5:e5:17:
63:4a:da:10:33:f7:4e:d2:3d:6b:39:3e:20:5c:be:
c0:63:10:8a:04:ec:3c:6c:de:30:9d:67:33:e9:60:
50:88:a2:6c:f9:a0:9a:43:13:89:82:60:23:ad:c0:
72:7b:eb:37:34:ff:69:86:05:e6:6d:28:f7:39:de:
61:d0:a9:11:38:05:3c:dd:40:eb:5c:fa:b2:2d:36:
ee:c5:6e:34:63:3d:d9:fd:d7:35:9c:90:63:71:0d:
89:d2:47:d9:8a:d6:76:8d:f5:0d:22:fd:1f:82:bf:
33:9d:c5:1a:c8:d3:8b:e5:be:ab:50:02:38:f6:1f:
62:e0:10:6d:ed:34:45:f2:a3:f0:1a:3c:53:83:d1:
65:87:a3:7c:c2:06:26:84:fe:97:5c:8b:35:ed:d8:
88:2b:b7:a5:b6:40:e9:c2:8b:34:3f:b2:49:80:18:
54:c6:66:83:09:97:ea:46:94:f6:82:05:94:7b:69:
66:8a:8b:3a:31:72:11:78:54:cd:70:7a:63:d0:14:
69:95:b4:83:a8:93:25:64:01:c4:5b:05:f8:19:23:
8b:17:d9:bd:49:13:f9:61:f6:58:24:0b:c8:e8:be:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C1:32:98:B6:14:21:D8:5F:7C:67:92:37:27:98:8E:03:F3:A1:69
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JcEymLYUIdhffGeSNyeYjgPzoWk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.160.0/21
Signature Algorithm: sha256WithRSAEncryption
22:ee:f7:84:eb:6d:37:56:fb:33:cb:06:dd:6f:52:1b:93:72:
9a:b3:3f:f9:73:d4:45:6d:a1:9b:69:ca:a7:53:35:5e:03:ef:
f7:03:98:ee:68:e8:bf:42:3a:bc:bb:1d:5f:fd:91:fa:0a:29:
66:37:28:88:39:52:d8:99:0b:23:93:e1:db:e5:ac:c8:d7:2b:
fe:3a:58:1a:47:af:e5:78:01:78:e8:6d:59:36:7b:67:1a:22:
2f:de:29:9f:f5:34:52:06:f0:97:47:88:e1:78:8e:af:a1:23:
bf:b2:f8:42:0b:18:ec:64:6d:8b:2b:2b:3f:40:99:d8:1f:67:
49:e3:88:b5:46:22:1b:f2:0d:fd:70:fd:01:f3:33:58:b4:94:
c8:c3:17:6e:d2:89:af:75:74:81:e9:b0:46:97:4e:73:75:19:
48:79:c6:c4:47:d5:6c:4d:6f:ce:be:f4:cd:49:00:e0:f8:ca:
b3:51:af:5b:64:4a:43:9c:8f:be:75:42:74:ae:36:0c:4c:2f:
4a:f4:08:10:be:87:5c:11:3a:39:25:f6:48:09:2a:81:01:b1:
5e:d8:70:e3:6f:ad:8a:77:21:9d:e1:0b:dc:1e:b1:0c:bf:26:
ba:7d:78:f5:13:7f:dd:03:7d:da:41:fa:11:11:f1:16:cc:93:
95:bf:36:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org