Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Pk5rYzpDqHTDNGAIAos4wJ_5ViM.roa
File: Pk5rYzpDqHTDNGAIAos4wJ_5ViM.roa (raw, json)
Hash identifier: qg0PBua+jDtWKvClbzZWJMFzqC3lELIcfEPY1BYeBYI=
Subject key identifier: 3E:4E:6B:63:3A:43:A8:74:C3:34:60:08:02:8B:38:C0:9F:F9:56:23
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0A9A
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Pk5rYzpDqHTDNGAIAos4wJ_5ViM.roa
Signing time: Sun 07 Feb 2021 11:50:36 +0000
ROA not before: Sun 07 Feb 2021 11:50:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 10085
IP address blocks: 150.117.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2714 (0xa9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:50:36 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3E4E6B633A43A874C3346008028B38C09FF95623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:43:af:9c:08:33:4b:07:33:dc:e7:c9:d4:
36:a7:4c:70:bd:41:80:77:53:24:74:82:b5:12:09:
35:8b:2b:5d:9f:f2:ac:df:97:7e:80:31:a5:5e:37:
7f:35:d6:42:d2:fb:31:35:46:0a:d9:1c:16:98:12:
12:19:f8:fd:90:21:c3:f1:5d:75:de:a3:cb:cc:b9:
3b:48:91:ac:64:b9:88:ca:c2:5f:04:71:e0:7e:8d:
ff:c4:9a:3b:8c:93:2f:1b:d6:91:22:03:74:e2:8a:
f7:ea:6f:ce:dc:cc:09:09:07:ca:ed:4a:e9:45:d5:
3c:63:9e:09:4d:5c:a7:6e:d2:e5:45:1b:03:e5:c3:
c2:1d:42:19:89:8f:1d:d9:c8:74:df:66:41:b9:97:
e5:c1:07:fc:8c:aa:57:29:5a:da:ee:43:a3:61:6d:
b0:ea:8a:4c:e0:ca:3c:ac:4f:ba:ad:2e:44:30:b5:
1d:cd:9d:e3:38:fe:cb:13:21:5e:93:8d:e0:51:14:
0c:94:8a:6f:a8:9d:b6:3d:54:cc:a6:60:02:d5:7a:
40:5d:93:1a:8f:7d:ca:28:df:70:e9:33:eb:92:46:
24:b4:ae:0c:bc:01:77:da:3c:7d:f6:f0:4f:56:02:
88:73:68:61:7c:0e:66:cd:d2:d5:a3:a5:5b:78:8c:
06:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4E:6B:63:3A:43:A8:74:C3:34:60:08:02:8B:38:C0:9F:F9:56:23
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Pk5rYzpDqHTDNGAIAos4wJ_5ViM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.96.0/21
Signature Algorithm: sha256WithRSAEncryption
47:98:fb:3c:7e:a2:7b:19:4b:d4:5b:dc:d7:d5:81:7e:0d:a5:
d9:97:4b:e9:fe:7c:c6:1f:56:97:18:9d:59:d0:b3:75:e1:dc:
cf:52:ee:3e:38:44:19:71:61:1a:78:25:41:c7:60:3f:94:52:
32:f8:ee:df:72:38:73:f1:33:b7:36:74:a7:6c:94:e4:7a:ef:
7c:5e:8a:0d:01:40:5d:c7:d1:ee:cd:f3:12:92:38:e9:9c:75:
fd:92:30:24:f5:0d:20:e4:2f:3a:d4:f7:f5:7a:35:12:a1:2c:
1f:77:d5:fd:ef:e6:1a:46:07:5d:0b:c6:8d:9b:a1:0c:05:b1:
dd:bd:4d:9e:40:9e:cb:df:92:46:1c:cc:f8:0e:05:f5:92:26:
00:ec:35:a2:9c:91:e6:97:b0:cf:35:4e:da:19:19:2c:1d:f5:
56:ce:85:12:bd:a5:6e:3a:d3:29:b8:1a:5a:42:25:ff:48:29:
d0:99:24:bf:03:ef:4b:a8:22:2d:0a:db:27:23:bb:3b:c8:fe:
4f:81:b5:0d:1e:f2:61:9b:d6:b0:38:4c:57:2a:15:e7:b5:9e:
57:eb:52:e2:54:0a:f8:ee:b3:10:5d:7b:e1:1c:d2:49:9f:58:
86:a2:30:4d:34:16:62:46:6b:7a:50:d5:ea:6d:4f:89:8c:ac:
0a:be:40:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org