Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PC5eqE6NC3iuaWerdhgFBNJ-oRg.roa
File: PC5eqE6NC3iuaWerdhgFBNJ-oRg.roa (raw, json)
Hash identifier: BRJgUPqefJ7F0BFJC3pGrPs1E0V5afDWi2J6X6Wdfxk=
Subject key identifier: 3C:2E:5E:A8:4E:8D:0B:78:AE:69:67:AB:76:18:05:04:D2:7E:A1:18
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 086B
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PC5eqE6NC3iuaWerdhgFBNJ-oRg.roa
Signing time: Tue 29 Sep 2020 10:02:27 +0000
ROA not before: Tue 29 Sep 2020 10:02:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 223.26.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2155 (0x86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:27 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3C2E5EA84E8D0B78AE6967AB76180504D27EA118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:41:a0:b3:a0:c1:41:d2:71:4e:b3:5a:77:
95:c0:f9:12:8c:c2:22:09:cb:5f:77:5d:33:eb:b1:
e7:ae:1c:99:9a:22:40:d6:5e:5e:37:fa:37:f2:5c:
30:4b:4f:30:3c:21:cd:cc:98:af:63:44:69:13:f3:
a8:6d:2a:49:32:ad:5c:1c:59:03:20:85:6e:47:ae:
4a:1f:17:7e:82:e1:1f:6b:c8:80:3d:3e:a5:7e:a1:
52:b4:48:45:af:2b:0f:4f:fe:d1:a8:e9:a3:b2:1e:
8b:aa:3f:ee:01:bc:92:94:95:ac:8a:97:ff:95:55:
8e:ba:6a:b1:e0:26:2e:7f:34:2c:7a:6f:36:a6:e5:
e7:92:95:6c:29:e1:f1:42:2b:e4:ea:2f:e1:ec:af:
b3:22:5a:0d:68:63:1c:57:cf:a4:cb:57:b2:67:9e:
ae:31:d1:34:58:b6:0c:04:8f:da:f1:8c:35:46:ec:
13:7f:51:80:9c:e0:53:45:db:5a:c5:eb:3c:21:9d:
f3:65:e8:76:ed:62:f8:28:bb:05:ec:bd:7f:ee:ac:
e7:bf:9e:ac:6d:cb:b8:69:e0:04:0d:cf:43:93:47:
f4:68:08:b2:94:aa:20:dd:9f:0b:5e:52:64:dd:9e:
f2:4e:0e:f5:0e:12:1a:b6:a9:6c:f3:54:f5:10:7a:
f3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2E:5E:A8:4E:8D:0B:78:AE:69:67:AB:76:18:05:04:D2:7E:A1:18
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PC5eqE6NC3iuaWerdhgFBNJ-oRg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.84.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:cb:0f:b7:c7:43:58:17:d9:4a:47:fb:18:82:d8:67:b1:0c:
48:44:70:33:f6:52:0d:99:d8:25:25:e5:dd:99:d6:3a:84:25:
56:07:91:ba:bf:e8:a6:dd:70:b1:f7:af:a8:c2:8d:39:d2:9b:
ab:1a:55:97:ef:40:69:c7:b4:65:98:31:a7:3e:3b:e3:35:e8:
76:3c:ee:8d:fd:a3:b7:9a:27:19:f2:e5:06:95:08:f7:00:0e:
4b:d3:b0:a3:6b:bd:46:66:aa:d6:cf:a0:72:2b:95:37:cb:40:
f7:37:15:71:11:e2:b9:61:eb:2e:c1:e0:24:66:86:e1:96:33:
a8:4e:a8:f2:be:5c:c1:53:a0:17:05:93:78:54:7a:4b:c5:4b:
cf:de:6c:f2:f1:bb:48:22:c7:7d:f4:6e:8d:8a:7f:53:34:a8:
92:f2:d7:ab:7e:f4:ed:0d:90:ce:d8:ff:59:1b:de:d5:8a:32:
17:54:de:bf:5c:73:71:26:4c:0c:72:af:95:c6:81:cf:ba:fa:
e9:d0:3b:88:26:6e:4f:4d:44:6f:6b:91:38:9f:6e:f2:cf:ec:
45:05:24:48:ee:df:d9:03:5c:0b:4a:5a:29:05:3f:7f:7a:8a:
5c:26:e1:9f:18:c0:f4:d2:c9:4e:47:f1:97:5e:16:e2:e0:cc:
1e:70:f3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:30 2025 by rpki-client