Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OtDcYKuTPvBmmYMolnBCM-mwo3c.roa
File: OtDcYKuTPvBmmYMolnBCM-mwo3c.roa (raw, json)
Hash identifier: M/jvLFCUkxSgC5OV2xTHv86fnzb4HB9Pw305RzG1DUQ=
Subject key identifier: 3A:D0:DC:60:AB:93:3E:F0:66:99:83:28:96:70:42:33:E9:B0:A3:77
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0AE2
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OtDcYKuTPvBmmYMolnBCM-mwo3c.roa
Signing time: Sun 07 Feb 2021 12:46:39 +0000
ROA not before: Sun 07 Feb 2021 12:46:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 10133
IP address blocks: 203.163.222.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2786 (0xae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 12:46:39 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3AD0DC60AB933EF06699832896704233E9B0A377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:4f:c3:72:e4:73:65:c1:d9:4c:1a:98:01:
81:70:8e:2f:90:79:1d:eb:c8:5b:29:d6:46:da:e4:
3e:58:a5:c7:dd:de:46:d7:bf:61:55:ba:b8:03:b5:
af:89:cf:2d:c6:32:52:8b:3b:67:dd:17:79:ca:ac:
75:95:91:82:7e:ad:0b:87:dc:d7:60:93:f5:97:ed:
e7:a6:c3:39:c7:00:1e:1b:65:db:84:c2:41:31:63:
89:50:80:bc:dc:1d:a2:99:33:73:e8:b5:4a:6d:96:
88:fd:ee:c4:45:44:d5:ff:74:be:70:35:35:b2:c2:
f3:5b:85:0a:e6:bf:bd:b4:40:38:eb:2e:cb:d9:bd:
a0:f3:bc:05:7c:eb:25:bf:e7:5b:45:52:1c:b0:17:
cf:43:a7:45:f0:b6:69:03:4d:0b:01:12:17:f5:c4:
e2:c7:0f:c6:07:66:bb:4f:04:df:74:6a:ab:9d:25:
af:dc:53:8d:c1:1c:af:47:5a:42:eb:9b:32:14:57:
ba:c8:6c:4b:04:86:82:51:3b:e1:b8:b7:5c:b4:29:
05:79:21:ba:0d:8f:87:50:46:cb:55:c3:94:b4:c6:
06:d6:ad:ce:6e:94:5b:af:89:10:d4:cb:aa:c6:cb:
70:4e:9d:13:ea:26:e3:23:38:ae:bb:f2:d3:cb:82:
db:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D0:DC:60:AB:93:3E:F0:66:99:83:28:96:70:42:33:E9:B0:A3:77
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OtDcYKuTPvBmmYMolnBCM-mwo3c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.222.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:17:77:45:7c:58:e1:cf:f6:72:f3:13:46:57:36:81:14:0b:
80:d5:92:b2:52:bc:d7:92:7d:0e:a8:63:96:74:e6:48:b5:1a:
d3:82:38:f7:9f:9f:e7:0f:40:d5:c8:eb:07:f0:a0:64:be:5c:
2f:78:31:ef:64:c6:a7:71:ce:50:e0:73:a5:79:88:64:28:b7:
63:6f:a5:1d:c4:21:8a:b3:92:cc:8f:f3:ec:a8:f4:8d:d4:7e:
ff:c6:25:2e:13:9d:4c:4a:47:d1:6a:06:18:da:df:12:1f:e9:
19:c3:14:d9:fa:30:fc:5a:c3:34:9a:ff:4f:db:21:14:03:ad:
98:5b:33:b0:07:45:dd:62:7d:44:d4:00:85:00:d4:4b:9b:aa:
2c:99:16:20:cf:68:f5:17:97:8d:6a:6d:98:cb:4a:6d:35:95:
02:dc:41:3a:93:e4:e4:80:b7:cd:56:f7:6d:da:32:03:2f:fe:
a9:77:42:55:f3:96:47:38:5f:26:de:c8:f0:df:89:1d:1e:54:
66:f8:35:cb:31:b7:af:5a:91:25:f3:ad:0f:1c:f5:22:51:dd:
ad:aa:0f:c7:ef:dc:85:5e:29:1f:95:18:f3:2c:17:e7:0f:4c:
a4:ac:cb:2c:66:87:d4:28:cb:4a:4a:4f:a4:61:68:33:36:fd:
1c:96:11:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:58 2023 by rpki-client on console-fra.rpki-client.org