Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PLKLoyal0bIV-XYJ6P9irx3xZ-0.roa
File: PLKLoyal0bIV-XYJ6P9irx3xZ-0.roa (raw, json)
Hash identifier: FmoiXuf3FDe7SP4pQjsoNA+8jsCYbBcQ3yfS962QyfE=
Subject key identifier: 3C:B2:8B:A3:26:A5:D1:B2:15:F9:76:09:E8:FF:62:AF:1D:F1:67:ED
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PLKLoyal0bIV-XYJ6P9irx3xZ-0.roa
Signing time: Thu 15 Sep 2022 02:39:24 +0000
ROA not before: Thu 15 Sep 2022 02:39:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 223.26.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3CB28BA326A5D1B215F97609E8FF62AF1DF167ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:56:17:64:54:88:83:4d:93:03:1f:c4:f0:
65:e1:bc:b7:e3:4b:a3:68:1b:e5:96:d8:a0:84:d1:
56:5d:94:7a:fc:10:e9:2f:b2:c0:a0:d7:71:84:ee:
ea:bb:6a:5b:cf:d8:30:3f:a6:f5:9b:09:a0:f7:ac:
61:5d:7f:52:9b:05:cb:04:5f:97:11:06:c8:da:2d:
af:84:09:73:56:64:64:9a:ff:1e:00:fd:c2:ac:af:
b7:1e:b4:56:82:dc:2e:5d:d2:d7:44:af:52:8b:fa:
50:e5:7b:ba:79:15:cc:fe:74:5d:b3:e5:00:06:98:
47:8d:5e:87:46:4f:26:43:52:07:1e:9a:f0:5f:b4:
32:06:88:13:60:59:b1:1d:5a:00:ca:f3:80:20:51:
ed:bb:09:d6:11:59:4f:af:9a:bc:03:6b:b6:18:e1:
16:d7:61:3b:98:97:aa:de:ba:2a:22:4d:e0:92:12:
f6:84:23:c8:89:03:86:7f:0c:e4:91:42:6a:ea:02:
a0:ff:0a:37:7d:f7:1f:da:93:ca:eb:dc:ac:f8:ad:
7c:93:16:90:19:d5:92:47:01:3c:ae:3d:86:14:c3:
f4:82:21:fb:93:41:50:30:cb:cc:f1:ff:f9:2c:50:
a5:35:6b:e6:8c:07:84:c7:b7:3d:59:5b:30:96:9c:
3b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B2:8B:A3:26:A5:D1:B2:15:F9:76:09:E8:FF:62:AF:1D:F1:67:ED
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PLKLoyal0bIV-XYJ6P9irx3xZ-0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.80.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:38:ea:df:90:50:dd:02:07:05:8f:c8:a5:1b:24:ba:11:28:
cf:84:8c:11:59:cf:03:fe:42:4e:22:43:f1:09:fb:f3:e5:55:
2e:ff:94:7e:9d:46:ac:87:40:47:eb:42:52:b2:04:8d:26:bf:
f3:44:ee:2c:34:fa:89:2d:6c:85:e0:8c:3a:b1:8f:46:13:2f:
66:56:c2:6c:29:7e:b8:f9:e3:15:c3:bb:db:74:39:fa:e9:e6:
53:e4:cb:d6:82:ef:6a:9e:64:c1:e7:23:fc:fc:68:10:62:68:
a9:8f:29:86:11:5c:48:72:21:c8:be:2a:b3:cd:76:a1:4e:65:
1c:a4:49:2f:70:9f:1a:90:56:a5:5a:ac:15:d5:3f:2f:81:e0:
d4:e2:cf:c3:80:9e:4b:c8:20:cf:1a:75:5b:a7:25:95:50:3b:
2b:2b:51:de:7c:23:66:78:42:b5:0e:8c:2c:08:16:e6:12:10:
ba:3c:56:29:1c:d5:3a:c4:94:49:34:d4:c2:ee:43:81:98:1a:
47:8f:51:68:73:8c:18:09:57:f3:6b:3b:a5:43:1b:31:69:8e:
64:24:f1:04:51:ae:0c:7d:3c:59:69:e7:f7:c1:36:40:00:fc:
fc:af:53:b3:da:12:a9:9f:86:d5:4b:05:e3:cb:48:20:8e:4b:
73:0c:69:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org