Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/MnaoG073BLATBRIHg8CLLoL3OGo.roa
File: MnaoG073BLATBRIHg8CLLoL3OGo.roa (raw, json)
Hash identifier: hLJF5ixQP/nRs7oAhpVYoNtR1FopbDEV6R1gwFquzgs=
Subject key identifier: 32:76:A8:1B:4E:F7:04:B0:13:05:12:07:83:C0:8B:2E:82:F7:38:6A
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BE5
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/MnaoG073BLATBRIHg8CLLoL3OGo.roa
Signing time: Wed 29 Sep 2021 02:38:49 +0000
ROA not before: Wed 29 Sep 2021 02:38:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 150.116.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3045 (0xbe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:49 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3276A81B4EF704B01305120783C08B2E82F7386A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:a3:04:7e:3a:62:bf:5b:93:fe:91:5b:15:
9a:36:03:68:b4:bc:1c:a6:df:8a:b8:2b:01:a5:92:
f7:f0:da:e3:7a:53:03:3d:cf:77:95:9e:b6:ac:cf:
57:43:99:a9:9b:fd:07:2f:13:e3:70:24:a8:b1:c5:
82:47:6d:74:2e:dc:cd:52:fa:cf:41:81:12:80:69:
fa:ca:cc:8c:b2:d8:f9:7d:fc:3c:ba:6f:fe:c0:3e:
cf:d9:28:82:dc:7e:ca:be:00:62:01:92:bc:14:8f:
50:7e:b5:ab:31:2e:1b:6e:9f:cc:27:87:6f:26:7c:
97:3c:8c:07:fe:28:c7:c2:99:96:6f:99:f0:6d:92:
7c:d0:40:1b:74:d4:09:1a:ed:c5:81:10:dd:d7:df:
b0:24:16:ce:ea:58:4d:92:96:5f:87:82:b1:ba:6d:
9d:f1:5c:3a:73:16:fc:19:91:e9:51:4c:81:cc:5f:
c7:d8:fc:88:d1:18:ef:a1:2e:0c:4b:29:1b:22:aa:
5f:3a:cd:21:27:ab:c1:ec:e3:8d:8b:7c:92:0e:96:
e5:d6:d8:66:80:52:37:c3:80:cd:92:c8:d5:b8:b9:
ac:1a:f4:c8:b7:c6:e9:7a:ae:32:de:c3:8a:b9:fb:
ad:c7:e5:34:dd:14:02:0d:92:b7:59:f9:8d:f2:89:
e7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:76:A8:1B:4E:F7:04:B0:13:05:12:07:83:C0:8B:2E:82:F7:38:6A
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/MnaoG073BLATBRIHg8CLLoL3OGo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.224.0/21
Signature Algorithm: sha256WithRSAEncryption
02:8a:9f:85:35:1d:75:c6:17:be:cb:08:02:48:88:57:27:87:
de:92:ec:7f:6b:1c:73:0a:63:85:be:80:20:dd:1c:90:4f:51:
94:74:28:4e:4d:d0:6b:72:46:bc:34:a1:7f:c0:a7:be:e7:1a:
a1:55:94:fb:e5:1b:b7:87:20:7a:fa:ba:9c:34:78:4a:42:12:
1b:de:b1:04:a6:dd:ba:09:b2:05:54:69:24:3f:21:b1:63:8e:
2d:64:7c:80:1a:2e:ef:4b:75:45:09:38:7e:0a:f4:e8:dc:cd:
a5:9f:42:98:38:dc:07:d8:72:2b:ee:8f:5c:b9:7f:fc:9e:7d:
5b:09:a7:6b:84:32:e2:5f:07:38:85:2a:91:bb:19:12:58:78:
05:a9:be:3e:50:f7:51:21:a4:57:b4:32:bc:d6:82:f3:e7:9b:
75:7c:20:ad:1c:80:b8:8f:47:df:60:21:7a:7d:b2:24:46:35:
f4:b2:14:59:5e:a8:df:4f:c5:8b:ab:fb:9a:83:e6:f0:b7:2c:
d3:cc:45:95:95:34:e7:a3:d7:50:48:0e:11:eb:09:85:aa:4d:
fe:e2:6e:85:bc:11:38:65:aa:bd:a4:6e:56:60:85:9e:2c:12:
e1:58:2a:1d:4c:55:64:f0:56:f7:b0:83:f8:6a:ff:e5:fa:b9:
ff:b4:86:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:58 2023 by rpki-client on console-fra.rpki-client.org