Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KL6vxvggjrYKCf0NwJbv5HKNqQM.roa
File: KL6vxvggjrYKCf0NwJbv5HKNqQM.roa (raw, json)
Hash identifier: zOzdN5+D3gMsnXoSqrzRDS4Y5jN01nnc9SR1A+NM8bQ=
Subject key identifier: 28:BE:AF:C6:F8:20:8E:B6:0A:09:FD:0D:C0:96:EF:E4:72:8D:A9:03
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0A8A
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KL6vxvggjrYKCf0NwJbv5HKNqQM.roa
Signing time: Sun 07 Feb 2021 11:50:04 +0000
ROA not before: Sun 07 Feb 2021 11:50:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2698 (0xa8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:50:04 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=28BEAFC6F8208EB60A09FD0DC096EFE4728DA903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:1b:b2:ec:5b:7d:88:81:1f:6f:ec:9d:bd:
fe:ea:79:e7:b1:07:01:60:74:df:44:38:b3:2f:f8:
e3:3d:3c:a1:c6:ad:37:eb:37:a0:45:c4:68:80:d0:
16:fd:3c:cd:84:49:5f:db:6d:a3:89:92:18:58:a4:
6f:c6:bd:6e:ca:0e:b3:fb:c5:74:c9:f8:9c:2b:bd:
ba:a7:48:86:63:b0:86:ca:ca:14:46:9c:f5:71:f6:
84:2b:ad:88:4a:da:eb:ba:81:6d:1a:82:a5:3c:5f:
08:5f:dd:df:77:2d:c6:73:db:9d:7c:d0:16:e8:d2:
9e:0a:a9:d0:1e:d2:08:0d:9f:a6:08:12:79:1f:9e:
24:a9:e7:16:7e:d3:de:eb:d9:93:64:9e:c2:f5:5f:
c1:6b:3e:e5:ae:a1:be:72:6e:51:22:ee:07:80:75:
6c:ed:a7:d8:f5:47:b7:5d:d7:02:72:c9:81:68:15:
ec:7c:2d:21:58:e8:48:25:7b:3d:4d:b1:cd:44:2b:
14:20:06:f7:bc:11:ed:2f:22:43:89:57:6f:be:3e:
2a:c4:f4:0e:2c:0c:97:40:7f:8f:f8:0e:f8:84:32:
af:70:ce:6a:23:63:79:d8:c1:6e:80:e8:7d:cd:1c:
23:2f:c1:f5:fa:6f:d3:db:53:1c:44:31:59:68:33:
b7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BE:AF:C6:F8:20:8E:B6:0A:09:FD:0D:C0:96:EF:E4:72:8D:A9:03
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KL6vxvggjrYKCf0NwJbv5HKNqQM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.240.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:f8:a3:1e:ab:20:0f:29:1c:1b:8d:0e:5a:c1:d6:6f:8a:e4:
45:00:5d:b5:e5:7f:9b:ac:a2:0d:4e:14:a2:5c:a1:3d:67:74:
f6:21:3b:d9:96:9f:14:77:89:a2:d1:b9:e2:64:d0:8c:1e:2c:
9c:42:5c:10:95:98:d8:0f:c5:00:4c:82:91:b9:46:b2:5d:65:
cd:ae:c7:d1:d5:2b:a1:70:46:f2:4c:66:c0:07:7b:9e:ed:1d:
56:dd:4e:04:07:c3:13:15:dc:3d:66:f1:53:99:20:01:01:08:
c9:da:08:f5:dd:16:5e:1e:e5:05:4d:4b:53:f2:94:b9:25:00:
2a:66:5a:65:58:39:fe:e1:6e:0f:0f:18:38:52:5e:8d:27:d4:
12:e7:4d:b0:7e:6a:80:f3:9b:95:7e:ed:f9:b7:2e:2c:8f:e4:
31:ff:94:dc:7e:9a:2f:22:7f:ea:31:f4:d9:fa:3b:ae:54:76:
9d:af:b7:09:40:f5:ac:2e:5e:05:83:ac:06:ab:10:22:7e:59:
c7:81:7b:5e:67:09:18:20:67:68:e8:b9:cd:d8:87:d1:88:68:
44:27:b0:73:78:5d:67:f9:ba:35:49:a3:7e:be:81:82:c5:a8:
e7:12:82:c5:c6:57:14:85:3a:ad:a8:bb:f9:0f:24:1f:1c:38:
83:df:1b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org