Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OwzgPNr8VEuO7fqAVsP0KDpwTwQ.roa
File: OwzgPNr8VEuO7fqAVsP0KDpwTwQ.roa (raw, json)
Hash identifier: WB2l6+oa0B8PJXtnOw6M6PIZvMS3F5LoTh8QVQHV4go=
Subject key identifier: 3B:0C:E0:3C:DA:FC:54:4B:8E:ED:FA:80:56:C3:F4:28:3A:70:4F:04
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OwzgPNr8VEuO7fqAVsP0KDpwTwQ.roa
Signing time: Thu 15 Sep 2022 02:39:26 +0000
ROA not before: Thu 15 Sep 2022 02:39:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 63199
IP address blocks: 150.116.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3B0CE03CDAFC544B8EEDFA8056C3F4283A704F04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:49:f3:eb:3a:41:43:32:d0:76:94:45:d4:
65:ed:17:94:8f:aa:aa:6c:b9:93:4d:1c:23:92:66:
c9:28:61:4b:34:bc:98:28:ac:b1:c3:04:17:b7:e0:
8d:1f:59:2e:cf:bc:43:0e:d9:dd:bd:7b:25:c0:5f:
1d:ac:aa:ce:57:29:7b:39:76:a0:e1:41:b5:34:38:
a8:bd:c4:d2:1c:c5:86:fe:cb:7a:56:ea:74:46:1e:
0f:38:e8:1e:5e:7f:45:d1:71:37:c0:a7:ca:a7:c6:
9d:75:14:9e:26:b1:7b:78:cc:14:2b:ce:d0:93:4b:
a8:9e:4c:c9:54:9e:61:4d:ee:73:26:2e:d3:58:c8:
09:68:89:c1:69:96:b4:ce:b1:c8:66:d8:4f:ed:cb:
73:b6:75:17:fb:50:d9:54:04:af:da:c2:aa:14:1f:
39:77:01:28:c0:2b:bf:d1:18:a1:6f:2d:c9:e0:4d:
b8:7f:66:95:4b:86:7b:94:97:6c:ec:7c:c9:da:45:
78:72:07:aa:2f:72:d9:ba:3e:fd:12:51:c6:8b:b4:
20:54:0b:83:d7:99:f8:9a:0e:b3:b8:9e:dc:c3:53:
c8:5a:49:2f:17:dd:34:4d:de:67:27:0d:c2:40:c4:
5f:88:6a:d0:ba:08:8e:e4:17:03:29:68:00:26:70:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0C:E0:3C:DA:FC:54:4B:8E:ED:FA:80:56:C3:F4:28:3A:70:4F:04
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OwzgPNr8VEuO7fqAVsP0KDpwTwQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.82.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:1f:0b:ea:6a:91:26:8c:a6:64:dd:5b:04:20:ba:4d:0f:fe:
87:cd:e8:02:4b:ea:b7:67:f7:0e:f9:ab:c3:f8:7d:23:62:60:
f4:14:09:75:e0:0f:27:4f:dd:29:de:af:8e:2f:fd:9c:7b:c4:
8d:f1:81:ab:3a:65:4c:cc:c7:40:af:e1:ed:cf:f9:a9:42:8c:
1a:ba:05:df:db:f5:73:90:a1:7c:87:26:54:fc:1c:47:bb:0b:
cd:92:26:a2:e1:25:97:c6:6f:9d:5c:d3:1e:75:6a:f7:b4:7c:
77:fa:43:61:3b:2c:57:09:62:36:02:da:f4:ad:69:a2:5a:2a:
ed:c7:b1:b3:b1:95:dd:90:f7:d9:06:56:05:bb:93:50:b8:be:
19:3e:65:24:00:18:df:a1:28:89:80:28:71:01:70:70:58:0a:
83:18:b3:52:cb:93:b9:5a:33:8b:4b:c4:db:ea:ef:45:91:98:
62:5f:6b:13:bf:53:d0:97:04:70:75:32:85:fd:15:a3:fa:14:
4f:c0:16:ca:ed:09:df:08:21:7f:d2:8f:5e:ed:ef:f6:bc:e9:
35:a3:17:90:ff:ff:69:0c:51:f4:84:e9:6f:09:d4:d6:49:62:
c4:e1:c5:a4:62:34:db:e5:07:7e:f4:2c:2f:84:40:77:91:32:
b2:b2:30:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org