Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OkOc07r5yeBYuDnVaigzibAsolE.roa
File: OkOc07r5yeBYuDnVaigzibAsolE.roa (raw, json)
Hash identifier: kyW1BHNHT26Ds+NdzQb409oH+i7rJatlbF+BQqQvwco=
Subject key identifier: 3A:43:9C:D3:BA:F9:C9:E0:58:B8:39:D5:6A:28:33:89:B0:2C:A2:51
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0AC0
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OkOc07r5yeBYuDnVaigzibAsolE.roa
Signing time: Sun 07 Feb 2021 12:37:59 +0000
ROA not before: Sun 07 Feb 2021 12:37:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2752 (0xac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 12:37:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3A439CD3BAF9C9E058B839D56A283389B02CA251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:84:2e:83:f7:7c:0b:71:98:b4:e4:46:8c:12:
13:b4:22:54:7b:b4:d4:32:23:a3:cc:48:e3:1f:30:
e3:03:d3:f5:83:15:fc:06:5a:9c:22:21:3e:73:68:
fd:88:5e:f2:f3:9c:d3:be:45:37:16:6a:4d:c9:33:
fc:af:fe:86:ac:5b:dc:83:d6:5a:61:0b:e9:25:c9:
f7:05:e0:02:86:e8:36:7c:5a:2c:61:ec:8f:35:15:
fe:bb:b5:43:1e:c1:72:8b:d2:13:54:0b:18:ed:31:
9d:37:9e:88:20:dc:01:cd:32:f6:94:3e:ea:6f:df:
87:27:75:45:9d:f2:99:c6:8c:6c:9f:24:0f:13:f2:
5a:7f:26:3e:dc:bc:9b:1e:10:65:47:0e:84:5d:02:
1b:26:8d:64:b8:0c:01:2c:eb:f9:8b:8f:74:79:bd:
3a:f6:25:e4:f4:19:40:7e:ca:ab:fa:83:6d:7f:1a:
b8:db:ce:bf:ff:59:da:af:cc:49:d4:ce:41:e4:b3:
df:3b:6c:d0:1e:b4:c4:4c:60:af:e2:bd:30:32:f3:
de:c1:4b:a5:e0:39:e3:da:52:bc:1a:09:48:06:d9:
57:5a:4a:12:6a:3a:8a:7d:43:d3:26:87:c5:3b:80:
16:b6:2d:4f:ef:e6:53:79:1a:1f:ba:2a:50:53:03:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:43:9C:D3:BA:F9:C9:E0:58:B8:39:D5:6A:28:33:89:B0:2C:A2:51
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OkOc07r5yeBYuDnVaigzibAsolE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.64.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:b9:e9:ed:68:24:ad:03:5d:ce:9c:01:49:15:ee:f9:96:67:
62:bd:28:fb:66:a7:0a:5c:97:76:36:38:ed:5f:0e:02:8f:79:
cf:16:b9:7d:a7:c8:e9:4d:35:2d:8c:19:8a:94:2d:e7:a0:5b:
c8:06:b0:3a:0e:c2:0e:29:7d:7e:db:30:11:f7:f8:3f:92:af:
f2:90:94:6d:cf:cc:95:94:34:3e:c7:96:aa:c7:31:ec:82:74:
59:c8:bc:31:00:8c:d0:f3:e3:60:8c:fe:c4:46:de:85:ca:98:
47:6e:4e:81:68:b9:78:6f:ac:5d:d0:fc:c8:66:7b:0b:0c:9e:
f8:8b:18:86:e8:ad:e7:e9:68:39:bd:48:07:7e:ad:a7:44:7b:
18:5b:81:38:ff:dc:89:91:b8:30:d6:a1:2c:50:51:ed:74:f3:
59:d6:4d:21:6f:9f:aa:24:9d:15:15:d2:75:3d:b4:9b:e2:42:
7d:c7:1e:12:05:ec:b3:53:8f:c3:31:2f:49:e4:2c:03:40:d9:
eb:7d:55:90:77:31:3f:6c:19:a4:28:24:4f:04:25:02:f0:d8:
6b:b5:dc:8d:b6:fe:c9:b2:49:da:b5:7d:69:d9:66:5c:5f:97:
c7:f0:9d:66:70:c8:40:c3:f0:cd:cb:fa:a2:d7:db:ab:5f:a8:
93:09:71:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org