Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Mjmim-2cWMcBa5PyN9u1OYAMQ6Y.roa
File: Mjmim-2cWMcBa5PyN9u1OYAMQ6Y.roa (raw, json)
Hash identifier: EjLmmOnzTZ0/6SiWQeo4SeO1+JAG4sv6go2re3nFZJg=
Subject key identifier: 32:39:A2:9B:ED:9C:58:C7:01:6B:93:F2:37:DB:B5:39:80:0C:43:A6
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E00
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Mjmim-2cWMcBa5PyN9u1OYAMQ6Y.roa
Signing time: Thu 29 Dec 2022 09:32:07 +0000
ROA not before: Thu 29 Dec 2022 09:32:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10085
IP address blocks: 150.117.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3584 (0xe00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3239A29BED9C58C7016B93F237DBB539800C43A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0e:13:1e:76:bc:e6:d6:c0:bd:17:4b:f9:a0:
43:d6:d2:58:42:be:6d:2f:48:ba:ba:2c:ba:84:ef:
81:84:01:5e:bb:de:ad:67:ff:98:1b:be:1c:58:c6:
3b:65:a6:fc:77:8d:16:00:a3:29:ae:d4:21:da:f4:
96:b3:53:d8:4c:99:cb:eb:42:26:69:ad:52:7f:d0:
c1:09:b7:f9:b5:46:ee:69:43:9e:a5:82:0b:7b:3c:
9d:72:7c:b1:4a:cc:5a:ba:51:e6:a3:5c:15:78:f4:
49:b3:fa:5d:a5:6f:9b:30:5d:2e:f0:d5:c7:9c:ea:
72:a7:eb:ef:35:c3:85:8f:97:06:9c:e0:c2:55:9d:
62:c6:b3:71:07:77:d5:bc:e0:34:25:aa:de:40:18:
16:78:53:3d:74:80:3b:aa:cc:da:e9:9c:c3:bb:d0:
18:1f:d5:6f:be:16:f1:3a:3d:95:d1:a5:09:77:c4:
56:14:24:a2:0a:e6:51:96:64:f3:5f:10:c5:d1:5f:
f2:58:aa:41:26:7c:49:6d:a5:0b:18:cc:5f:b3:f0:
9c:9d:55:00:95:77:06:e1:1a:4c:7a:a5:31:0c:c7:
2a:d9:c8:10:3d:1d:44:31:d0:de:0f:ed:02:b1:7c:
49:b4:fd:44:de:40:25:5e:b3:9f:f2:9b:d4:ea:17:
c5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:39:A2:9B:ED:9C:58:C7:01:6B:93:F2:37:DB:B5:39:80:0C:43:A6
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Mjmim-2cWMcBa5PyN9u1OYAMQ6Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.96.0/21
Signature Algorithm: sha256WithRSAEncryption
57:89:63:95:b5:59:29:d6:f5:dc:04:d1:72:b7:52:76:41:f1:
c5:de:4c:02:31:c7:d5:39:ca:d3:9c:07:f0:e3:ad:7b:6b:24:
1b:e1:e1:da:9b:de:6f:5b:94:9f:94:40:c2:83:eb:f5:88:22:
84:9d:9e:2b:b3:5d:59:3a:64:fc:14:d5:a0:31:4d:c0:b6:dc:
35:06:ec:61:4f:fa:f8:b7:cf:b7:9c:ca:1e:99:2f:cd:4f:fb:
08:76:50:c6:a9:88:de:4f:a1:4d:b0:ba:2b:fe:b2:64:c5:0f:
f3:64:2e:4c:76:5a:40:4c:3a:60:13:92:bd:97:39:21:e3:71:
af:6b:5b:ed:8f:fe:0b:a8:83:6e:5a:b4:b9:ef:c5:bd:a3:38:
92:55:5f:82:31:07:18:b9:a2:a5:89:3e:d6:99:45:74:79:e8:
71:e6:ab:42:22:23:74:a5:51:49:fb:cc:30:0b:89:e8:20:2c:
c7:18:9b:cd:f2:c6:45:33:bf:4e:f2:cf:5f:30:00:ab:de:f1:
84:c0:d1:ae:88:30:dd:b1:f5:bd:02:ed:40:2f:28:09:b2:45:
83:a5:31:f7:02:64:41:1f:b3:b9:ac:ee:4f:9c:d7:10:55:30:
3c:ca:6f:8d:2a:d8:89:0c:c4:fd:03:4c:99:34:12:28:7c:39:
aa:09:a1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org