Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/P6ptJYHWJrEoT3b40whCeNpJr7k.roa
File: P6ptJYHWJrEoT3b40whCeNpJr7k.roa (raw, json)
Hash identifier: mUm6QQv5uMV9276LKaunWNEKlFSU/YOqSRjE+2O0kHQ=
Subject key identifier: 3F:AA:6D:25:81:D6:26:B1:28:4F:76:F8:D3:08:42:78:DA:49:AF:B9
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BE9
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/P6ptJYHWJrEoT3b40whCeNpJr7k.roa
Signing time: Wed 29 Sep 2021 02:38:50 +0000
ROA not before: Wed 29 Sep 2021 02:38:50 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 150.116.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3049 (0xbe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:50 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3FAA6D2581D626B1284F76F8D3084278DA49AFB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:91:77:6b:f1:21:d1:a3:97:c9:07:97:f1:
98:76:57:2d:30:31:de:75:4e:3e:63:a0:0a:18:3b:
ea:0f:8e:35:2d:ef:05:07:b2:35:04:ca:9f:48:bd:
34:a2:43:45:7f:55:4e:e0:b2:4a:fb:1b:dd:7c:9d:
cd:da:62:be:13:7f:93:5b:1f:17:0f:22:61:6c:6f:
5a:83:4d:06:44:41:e0:f7:fc:73:be:43:06:6e:6a:
d0:71:55:2f:fd:7e:bc:1c:ca:4b:07:f9:d5:5c:3b:
b1:de:98:98:22:d4:8c:f4:d6:98:07:9f:90:7e:ce:
d4:af:9c:50:e9:7d:d6:03:3d:6d:83:ff:0f:8e:38:
4e:be:a9:a7:ef:08:f6:5f:bc:3a:f0:f3:e7:0d:b1:
a8:a6:2a:a0:85:5e:83:18:58:4f:88:88:f3:bc:a9:
36:46:d9:ff:cc:bc:88:f5:75:53:80:06:e6:5b:2d:
01:5d:64:0d:bb:42:9d:d9:57:e2:de:b6:7d:d8:62:
36:bc:e4:04:a1:92:9b:dd:a9:51:33:18:6e:39:f9:
3d:25:80:eb:8d:04:5b:f8:9f:e3:93:82:6e:e2:2c:
b6:63:b3:d3:30:d2:29:44:f0:fa:8d:fd:eb:23:83:
21:5d:20:2e:ab:7c:10:fa:5d:a4:0d:18:97:23:9a:
5a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AA:6D:25:81:D6:26:B1:28:4F:76:F8:D3:08:42:78:DA:49:AF:B9
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/P6ptJYHWJrEoT3b40whCeNpJr7k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.240.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:42:e0:af:24:ed:76:ee:16:d1:2e:24:29:74:29:4e:42:56:
72:0d:b4:2a:52:c2:29:3e:b3:76:58:57:ef:1e:33:b2:a1:d7:
ae:ab:ac:23:b0:16:c6:73:78:95:34:7e:7e:33:70:5d:cf:0e:
9d:e8:ed:f9:b0:a6:fa:cf:6a:88:a5:4a:ef:cf:93:21:38:1f:
b0:c9:b7:40:5d:e4:e6:19:a1:23:20:8e:73:d2:7e:ad:f1:1f:
52:59:82:63:e8:23:02:28:81:b0:ba:5e:de:45:46:2a:eb:85:
42:dd:0f:c5:45:94:36:ff:f9:2e:eb:65:94:65:6c:66:af:ad:
be:39:32:9f:30:27:64:6b:a5:d8:11:6c:10:8a:34:04:35:08:
61:24:9d:37:45:56:fc:7f:95:70:f1:c1:cb:45:64:33:ef:40:
20:14:1d:35:12:58:37:74:47:a1:10:8e:30:fa:c7:51:a7:6d:
29:9d:27:5c:f2:f9:9c:c0:4f:7f:03:51:72:02:1c:a1:27:57:
50:6b:9c:8d:de:b0:0b:8c:37:1b:dc:e3:72:76:c3:cd:ba:95:
df:34:c7:2d:34:81:1b:03:2c:e7:a5:aa:99:31:62:4c:11:17:
fc:11:87:25:93:63:cc:37:bf:91:be:19:a8:54:6b:60:e2:6b:
f1:de:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:53 2025 by rpki-client