Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/M8UH5kr66fTov5U3Af2ittOZMCM.roa
File: M8UH5kr66fTov5U3Af2ittOZMCM.roa (raw, json)
Hash identifier: xvAJ2wqKlXq2A5P2dALNkVcSnet/M1dS53Kcl8zRl50=
Subject key identifier: 33:C5:07:E6:4A:FA:E9:F4:E8:BF:95:37:01:FD:A2:B6:D3:99:30:23
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C0D
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/M8UH5kr66fTov5U3Af2ittOZMCM.roa
Signing time: Wed 29 Sep 2021 02:38:59 +0000
ROA not before: Wed 29 Sep 2021 02:38:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 150.116.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3085 (0xc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=33C507E64AFAE9F4E8BF953701FDA2B6D3993023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:56:3e:46:57:05:28:0c:b7:da:ea:01:7d:
b7:34:db:56:ef:7c:d6:1c:8c:f4:db:05:a5:2a:61:
4c:19:16:54:08:57:31:7e:d3:cb:6c:5a:50:6c:2b:
e2:11:db:2f:ae:d3:a3:7d:68:13:f0:0b:57:9a:95:
d9:7b:b7:90:33:2f:0b:4f:c1:c7:a9:d0:57:34:c9:
7a:68:7d:fc:28:3b:44:30:3f:32:3c:18:93:7f:ec:
d3:13:5c:0a:ec:d4:b6:ab:f9:69:94:da:d5:97:bc:
b5:31:78:ba:2f:81:a8:33:c7:9f:ff:2e:df:4f:64:
da:f9:af:51:98:ac:0a:f1:c8:92:03:52:cc:ed:d4:
bb:0c:39:e4:31:65:c1:4c:27:81:cf:3d:09:74:75:
37:ea:37:69:9b:4e:16:af:45:85:44:d0:ca:31:2e:
6b:a0:93:60:29:23:5b:3c:21:68:7d:73:e3:cc:84:
6a:40:26:10:4f:7d:71:90:8e:1f:67:4a:d4:b4:d2:
f4:f5:f8:15:5f:df:ca:42:c7:11:20:f3:e8:ee:8a:
3c:62:37:e1:d9:22:e3:a4:1e:34:58:22:38:dc:d5:
f8:d3:36:2d:91:a4:58:40:86:97:8b:e6:23:5f:fb:
82:23:3d:62:cb:95:c3:d1:81:db:7c:2e:79:d0:7d:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C5:07:E6:4A:FA:E9:F4:E8:BF:95:37:01:FD:A2:B6:D3:99:30:23
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/M8UH5kr66fTov5U3Af2ittOZMCM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.239.0/24
Signature Algorithm: sha256WithRSAEncryption
27:31:11:f7:c8:27:8b:3f:20:00:7b:3c:64:94:5a:5e:05:0f:
87:dd:53:3e:eb:2c:72:a1:a5:d8:08:50:65:9d:48:88:fd:f9:
47:b2:6e:72:6e:7d:48:d6:79:c3:12:e5:0e:24:a7:b7:ad:4c:
6a:f3:0f:ad:22:1d:eb:1c:fa:ac:6f:91:3d:46:7d:d5:50:41:
9d:e0:67:d4:98:a1:b4:eb:46:55:c0:46:3b:ca:19:ce:32:d9:
b7:c1:58:9d:64:09:6d:6c:d5:7d:cc:b3:a1:f0:f9:36:c1:8c:
90:fe:b5:4a:4d:6c:57:6d:65:d8:ae:64:54:e0:98:2f:f7:07:
35:69:c5:bf:80:8e:bc:e2:0c:ab:03:d0:ff:d5:df:85:f0:5c:
ef:ee:ca:8c:97:05:9b:0b:c2:0c:87:36:7c:b6:d1:da:e1:97:
fb:ac:93:f5:47:30:49:2b:e2:21:d3:aa:2c:28:3b:55:d2:f8:
c9:5a:02:ce:ca:bd:ed:6e:20:dc:72:f2:1b:47:cc:0a:d8:98:
4d:34:af:13:89:5b:d3:96:f1:f0:28:13:6b:29:52:b1:99:9a:
b4:69:54:ed:50:b3:14:ba:f5:30:5e:e3:37:10:dc:8f:9c:8c:
b1:7b:2b:e1:53:a3:fe:a2:bd:c6:5d:e6:7d:e9:0d:2a:32:47:
5a:68:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org