Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/O02xaY3Xcmfo9MObhA6mPxTzYEw.roa
File: O02xaY3Xcmfo9MObhA6mPxTzYEw.roa (raw, json)
Hash identifier: bM2MY/fCcFfdxSyy2+j2WIuW7PPFK+p9/N2NZc9Noxk=
Subject key identifier: 3B:4D:B1:69:8D:D7:72:67:E8:F4:C3:9B:84:0E:A6:3F:14:F3:60:4C
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DC8
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/O02xaY3Xcmfo9MObhA6mPxTzYEw.roa
Signing time: Thu 29 Dec 2022 09:31:51 +0000
ROA not before: Thu 29 Dec 2022 09:31:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131600
IP address blocks: 113.21.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3528 (0xdc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:31:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3B4DB1698DD77267E8F4C39B840EA63F14F3604C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:95:1e:c1:fd:04:02:d0:58:04:ae:e8:65:
ad:6a:95:a8:e8:42:94:1a:c1:c7:36:46:54:04:54:
bf:30:d4:b5:b2:3f:48:1b:b0:94:e2:a8:1e:32:91:
27:f0:00:3a:d9:71:94:65:3e:c4:0c:9d:42:ba:1f:
fb:c1:12:f2:e9:86:1c:0e:cc:8b:00:4f:12:50:1b:
a5:37:36:ac:a2:4f:2f:2d:a9:68:95:86:b7:d7:84:
f8:14:8e:3a:9e:a6:36:5a:d3:d1:9b:aa:66:cc:e6:
b9:ed:cd:fa:af:32:63:e2:3c:15:39:a9:71:93:d0:
a7:7a:a0:8f:84:c6:ce:9a:15:1c:c3:1f:89:3e:0b:
43:31:e9:ff:6c:49:04:88:53:16:11:cd:f8:8c:4b:
75:3b:65:11:85:19:e7:f9:2d:aa:78:89:d4:b0:c7:
17:b1:f6:99:00:e8:ba:52:c9:5a:60:38:30:04:68:
1e:00:1c:1a:ba:cf:50:3e:fd:0d:95:df:85:da:91:
ef:62:ab:ef:df:6a:f6:e5:75:4c:16:13:b4:79:f0:
9f:44:78:cb:35:70:70:7b:d6:6b:81:23:85:42:d4:
75:22:7d:28:10:94:49:72:f4:e0:1a:59:84:5a:e1:
01:fa:f6:4c:63:9e:01:ba:67:24:73:d2:28:bb:2a:
7b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4D:B1:69:8D:D7:72:67:E8:F4:C3:9B:84:0E:A6:3F:14:F3:60:4C
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/O02xaY3Xcmfo9MObhA6mPxTzYEw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:47:67:1e:11:63:73:5d:bc:6a:8c:f1:ae:26:f9:8a:33:9d:
11:49:0a:11:9f:bf:4a:96:2e:9c:db:cc:a6:77:ac:06:0d:66:
b8:99:27:fd:60:69:e5:a2:4a:a6:78:b0:16:98:c5:01:79:15:
76:a6:76:86:25:16:76:e4:98:65:bb:9a:ab:be:4a:6f:b6:3e:
41:99:47:cb:a6:ac:81:f3:c3:0f:28:34:cd:f2:ba:62:a0:2c:
ed:d0:53:b1:41:a2:25:d7:f7:68:12:8f:a6:4e:43:e4:cc:7f:
be:0f:40:cd:52:fa:86:da:ec:dc:ae:2a:22:8c:bc:72:39:d2:
a0:8f:03:a3:d9:02:8c:f4:c4:43:2e:aa:22:a3:3d:78:48:a2:
88:e3:02:ed:93:b3:44:31:13:cb:cf:69:7c:09:20:ee:9b:2b:
12:03:38:35:21:74:36:ca:b3:9a:6a:f7:14:20:8d:3d:bd:04:
19:b2:d8:11:9e:f9:ee:4c:28:aa:6a:b0:ff:82:a8:ed:c4:ef:
15:ed:fa:83:bc:ad:b3:3c:ff:91:cd:b2:2c:d8:b0:e8:05:8b:
6e:9f:41:7d:89:3a:fb:e6:1d:e8:cc:d2:27:b5:eb:55:af:a6:
60:9f:52:49:41:1a:9a:59:d2:29:8c:d5:b5:fb:a5:b8:f2:fa:
30:1b:38:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org