Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/MJUYQl9XgnS4iUP9BX7kvphLpk0.roa
File: MJUYQl9XgnS4iUP9BX7kvphLpk0.roa (raw, json)
Hash identifier: lvI/1XE0SLHptymP6ygx80xDRc5Tsch00tiLgBl/sRM=
Subject key identifier: 30:95:18:42:5F:57:82:74:B8:89:43:FD:05:7E:E4:BE:98:4B:A6:4D
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DCC
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/MJUYQl9XgnS4iUP9BX7kvphLpk0.roa
Signing time: Thu 29 Dec 2022 09:31:52 +0000
ROA not before: Thu 29 Dec 2022 09:31:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 150.116.170.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3532 (0xdcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:31:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=309518425F578274B88943FD057EE4BE984BA64D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:6f:ff:02:25:b9:1f:3e:1f:04:19:13:59:
cf:b0:19:dd:e0:54:8d:49:14:fe:42:dc:81:b6:ea:
76:69:6f:64:60:78:dc:ca:07:8c:0f:54:1a:4e:0d:
d7:d2:c0:cf:ab:56:ee:e0:bc:6c:8d:08:af:cc:28:
46:e1:59:b7:7a:81:dd:3f:e0:52:ee:12:2a:70:77:
ec:cd:09:ad:86:e8:78:32:2e:b6:e6:4c:7e:e7:db:
38:42:34:e9:ad:13:8f:6c:6f:07:5e:bc:f2:b7:3d:
6e:58:f6:6c:24:1a:91:b5:82:11:f2:4f:f2:dc:85:
0d:f7:2a:33:6d:a8:e1:f4:36:29:85:4a:b5:c2:dd:
40:0b:38:60:f6:01:66:0d:a4:a1:94:40:22:b5:f8:
bf:10:5c:96:0c:20:f7:a4:8c:6f:9c:45:ee:83:10:
de:cd:13:61:4a:3b:24:44:40:e6:9a:0c:04:9e:5a:
a5:90:a5:74:ea:9f:e3:85:a5:c6:f8:6c:46:e8:7d:
06:7a:62:a4:be:85:5d:bf:8b:00:2d:49:08:d7:6c:
f3:60:11:2f:5c:69:b9:b0:03:ae:31:44:86:81:ba:
70:82:12:5e:c7:2e:ca:39:9f:70:de:5e:81:60:82:
5d:fe:e4:21:f8:fa:c0:ef:30:9d:15:bc:27:90:92:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:95:18:42:5F:57:82:74:B8:89:43:FD:05:7E:E4:BE:98:4B:A6:4D
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/MJUYQl9XgnS4iUP9BX7kvphLpk0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.170.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:e6:48:cd:8e:52:9b:20:b4:b9:1b:1e:42:6b:6b:9e:bb:1f:
0f:2c:69:42:c1:c2:33:dc:4c:4e:4c:40:8e:07:7a:db:a2:0f:
aa:82:76:7b:ba:6f:ef:77:da:3f:74:68:2f:e6:54:0b:88:e8:
54:02:0a:53:79:d4:bf:2f:c5:2c:37:ba:7f:8b:40:ac:e7:53:
cf:c3:66:3f:42:29:b9:ca:7c:ce:30:5b:56:4c:bd:82:54:f0:
a5:d3:dd:0c:2a:84:78:7c:dd:a0:3d:dc:a1:ae:15:cb:5a:09:
1e:37:80:21:ad:74:3b:92:ce:13:92:0e:4f:0f:8a:43:af:f5:
80:f8:62:54:9b:62:18:a9:55:00:5c:a8:4f:fb:c2:3f:17:57:
2f:ec:ef:ba:d9:e4:de:14:4c:d2:fb:35:ed:d8:3b:b6:34:c1:
f5:28:5e:c0:11:63:48:3a:49:0e:e5:65:52:ff:33:01:5f:83:
81:b2:81:74:fc:4d:37:f5:15:e4:d1:2a:f0:15:5b:c6:42:ac:
d4:53:2d:97:8f:99:60:61:69:51:a7:9e:2a:1d:d6:3f:53:b8:
3c:9d:b4:96:a4:db:ec:ed:a4:b5:59:cb:44:f4:89:68:ab:e2:
ca:7b:cd:d1:15:c2:21:69:cc:e2:b2:32:80:9a:22:c7:72:d7:
be:4d:83:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:02 2025 by rpki-client