Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PMwBGEb-w-12jEX1OmsYxdVGgsE.roa
File: PMwBGEb-w-12jEX1OmsYxdVGgsE.roa (raw, json)
Hash identifier: 2s5IzWDQ+acKvzNqVyVAQgE+WGZfsPl3DHL+TizNHjI=
Subject key identifier: 3C:CC:01:18:46:FE:C3:ED:76:8C:45:F5:3A:6B:18:C5:D5:46:82:C1
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BDF
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PMwBGEb-w-12jEX1OmsYxdVGgsE.roa
Signing time: Wed 29 Sep 2021 02:38:47 +0000
ROA not before: Wed 29 Sep 2021 02:38:47 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 150.116.104.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3039 (0xbdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:47 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3CCC011846FEC3ED768C45F53A6B18C5D54682C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:0f:7e:1a:73:f8:23:6b:30:84:53:c1:b1:
a5:c7:8d:c4:3a:1c:a7:46:65:80:2d:0f:5c:f2:b8:
fe:27:6c:83:91:0e:18:53:9a:ee:9c:85:d9:a9:66:
44:05:8f:5e:b6:14:b6:43:71:91:7d:d4:ec:83:5e:
42:7b:03:a9:d5:13:33:34:4a:f3:90:e8:22:7e:1f:
b6:f0:31:a4:91:6f:8c:8f:1b:69:c4:d5:45:f5:0d:
41:be:3a:04:10:1c:d4:1a:04:92:94:d5:b5:16:00:
03:86:f4:60:70:e8:fa:a7:9a:17:5c:ea:7a:5c:24:
21:23:e9:10:48:04:84:cb:b3:07:4c:d7:fe:21:42:
46:2f:7a:47:b0:e8:68:45:2d:9a:9c:c1:b1:85:a4:
23:58:61:01:b5:14:f1:11:f8:53:cc:8c:48:ec:c8:
84:55:52:04:c1:2b:48:49:27:07:4a:4f:97:28:88:
53:03:24:0d:6f:9a:9e:4a:3f:e1:b0:d9:e8:ea:7d:
9a:24:80:fa:49:b2:54:cd:63:96:a5:51:fb:f1:28:
51:fb:40:ba:cf:b6:05:b3:21:99:f1:1a:fa:9a:49:
e6:68:90:e4:6c:87:38:79:13:90:39:fb:07:46:6d:
a0:b2:03:41:8a:0c:17:a9:9e:05:0f:0e:b7:26:e4:
df:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CC:01:18:46:FE:C3:ED:76:8C:45:F5:3A:6B:18:C5:D5:46:82:C1
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PMwBGEb-w-12jEX1OmsYxdVGgsE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.104.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:c0:81:6c:9d:7c:0a:ba:e7:32:6f:b1:0a:ef:20:f0:a2:13:
7d:39:74:6c:7a:28:a7:83:7b:9c:25:14:3a:f2:11:f5:b7:1a:
6b:19:77:95:91:00:7d:89:93:9c:fa:43:a9:03:51:9b:05:28:
18:c1:b3:84:19:33:68:23:53:e5:12:f4:4a:6f:39:e7:fb:f7:
5c:fb:8b:a8:31:b9:26:6a:99:79:75:dd:e6:bc:00:c7:3a:cb:
d8:63:57:59:c0:ba:e6:ea:0e:71:bd:19:69:c7:65:f1:b1:34:
3f:23:5f:9c:92:12:e3:c3:2b:09:7c:40:1b:90:68:64:3d:67:
ab:e2:68:5f:3c:41:da:75:a6:32:df:1c:46:14:03:31:5e:af:
b8:17:4f:c2:3c:6f:30:84:5f:a2:f6:4a:56:8a:15:ae:7c:17:
19:92:e3:e4:20:97:dc:a7:89:83:c2:c1:0c:45:cc:11:42:0d:
aa:ac:dd:a3:76:40:10:6c:5c:3d:c9:aa:b0:55:b9:10:a8:36:
5e:1f:a9:82:89:88:0a:a2:ed:f0:e3:41:41:00:42:52:e0:fa:
94:be:8f:96:a1:65:df:61:55:21:c7:aa:d4:3f:10:39:e4:73:
fb:a5:03:55:36:3f:44:f1:be:7d:d9:a2:ba:5c:9d:69:0e:6b:
02:42:94:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org