Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/MGnn5GpPCwTmDHSqphGdUYpxaL8.roa
File: MGnn5GpPCwTmDHSqphGdUYpxaL8.roa (raw, json)
Hash identifier: +UgM9uRT1d5c3706B7OrK+mnXh46f/46dr/eqh4TFm0=
Subject key identifier: 30:69:E7:E4:6A:4F:0B:04:E6:0C:74:AA:A6:11:9D:51:8A:71:68:BF
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C3F
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/MGnn5GpPCwTmDHSqphGdUYpxaL8.roa
Signing time: Wed 29 Sep 2021 02:39:12 +0000
ROA not before: Wed 29 Sep 2021 02:39:12 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131273
IP address blocks: 150.116.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3135 (0xc3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:39:12 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3069E7E46A4F0B04E60C74AAA6119D518A7168BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:1c:24:d7:ae:25:7d:c8:58:20:ad:5a:25:
8f:24:a5:3f:a6:ad:62:a8:7b:4a:91:f3:c2:db:8a:
2f:89:57:54:ab:f3:71:31:24:a9:23:51:4b:2e:58:
ca:98:10:cb:fd:2f:9c:c4:21:09:a8:30:17:fa:79:
33:ee:04:f8:2c:dd:ae:e2:58:6f:0e:d4:48:3e:8f:
e3:80:7c:20:c7:c5:64:0c:be:21:dd:ec:02:56:fc:
95:8e:59:d7:20:c4:5b:b8:8f:b7:73:7c:e2:d9:d6:
81:27:41:ba:94:1c:1f:c3:90:8e:74:f1:e5:2a:8f:
8c:58:47:6b:f5:da:a9:b9:4d:15:a9:53:4f:2e:82:
2b:e7:0c:c6:89:be:a3:6d:1a:47:d7:61:96:ae:53:
7b:66:31:ca:4b:46:cf:5d:ac:8b:65:5b:f5:56:45:
20:fc:0a:34:45:b1:58:17:98:6b:08:31:8b:e9:99:
74:e8:0b:8f:52:dd:a7:dc:64:dc:5b:eb:4b:ae:77:
91:d6:ad:40:dd:27:20:71:e8:52:b8:7b:2c:0d:43:
58:80:50:9b:2c:c3:6c:76:23:d8:e7:75:15:a3:34:
1f:ce:f4:07:e5:e5:66:e4:d6:3f:db:b5:3b:df:63:
49:6c:ab:43:af:d1:79:21:4c:ee:a0:91:36:a7:b8:
1d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:69:E7:E4:6A:4F:0B:04:E6:0C:74:AA:A6:11:9D:51:8A:71:68:BF
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/MGnn5GpPCwTmDHSqphGdUYpxaL8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f8:e1:54:48:f2:05:ff:5d:20:91:e6:7a:24:ae:e8:bb:cd:
08:67:27:53:03:ce:15:07:80:bc:3b:25:e8:8b:de:a7:ca:a6:
38:fb:25:27:d8:9c:cc:b4:2e:40:21:2e:20:b0:fe:c3:84:c3:
b5:5e:34:42:ae:a4:e3:f6:0c:4b:1c:d7:fb:95:0b:4e:19:d9:
98:be:88:85:98:45:3b:03:64:1c:63:8c:c0:5f:03:bb:0f:46:
f6:63:b1:cf:19:4f:c3:cc:5e:4a:45:cc:94:cf:9e:be:6a:4b:
61:05:4b:b4:3c:10:34:89:58:a2:0d:0d:1b:f2:4f:9c:7f:de:
50:e9:39:68:ea:66:43:2e:7f:6a:cf:61:fd:cb:bd:8d:ea:19:
79:45:5b:77:32:54:14:d0:e7:5e:1e:9b:58:50:57:02:ff:c1:
dc:43:6d:ee:ac:b5:02:d5:57:f7:7c:69:c4:c0:15:d6:6a:20:
03:32:fa:cb:11:76:90:81:50:58:4d:88:55:7f:9d:e5:80:da:
9b:42:e2:0c:f6:a6:07:ac:64:fb:73:1b:3a:72:58:c3:1d:ff:
65:44:87:07:34:36:22:e7:94:5d:9d:03:60:e6:4e:02:92:32:
4a:ad:ac:23:c9:13:ba:fa:ca:e1:51:77:ae:d2:97:aa:ed:59:
09:38:10:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org