Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PwwDg6JFUZecfIheOVnuTRFFJrY.roa
File: PwwDg6JFUZecfIheOVnuTRFFJrY.roa (raw, json)
Hash identifier: JxK6UX4JGHTxH6JFCD63BNTXj/3nug3j+oYzvaLkEP0=
Subject key identifier: 3F:0C:03:83:A2:45:51:97:9C:7C:88:5E:39:59:EE:4D:11:45:26:B6
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0AC2
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PwwDg6JFUZecfIheOVnuTRFFJrY.roa
Signing time: Sun 07 Feb 2021 12:38:01 +0000
ROA not before: Sun 07 Feb 2021 12:38:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2754 (0xac2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 12:38:01 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3F0C0383A24551979C7C885E3959EE4D114526B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:8b:50:23:f0:22:d9:d0:0c:5e:8e:47:07:
70:da:07:3a:2d:8c:07:71:08:ba:f9:5e:6b:be:72:
ef:1a:24:be:ad:59:24:69:5a:a9:59:58:bc:8d:a5:
e9:8f:25:ac:d9:49:25:a2:69:8f:39:a9:d2:9d:53:
e5:c1:c0:42:82:2a:e9:e0:fc:8e:ef:21:ee:91:8e:
5a:b7:c7:9c:43:ed:01:dc:23:b7:97:f5:ea:43:f3:
46:d5:23:9c:94:89:85:5a:44:8f:c1:ff:87:47:85:
86:79:f4:1f:f1:44:bd:e6:2b:12:65:2c:c2:53:0e:
1c:96:3d:8d:48:61:f3:fb:d4:66:ba:b3:c5:4d:51:
ae:19:94:3b:80:e7:c5:a5:61:c6:c9:5e:06:47:ba:
77:07:cb:d7:63:c7:98:b6:74:3f:24:fa:e3:f9:88:
33:e3:a5:46:43:5f:8e:19:5b:0d:8b:01:2a:53:d4:
bf:f7:2a:83:be:0a:36:75:ad:8f:7d:c5:13:0b:f0:
c7:1d:4f:7e:ae:f5:60:b3:7a:04:a0:ac:e3:ed:0f:
7f:8b:64:2d:3f:1c:9e:08:91:3a:60:30:17:79:0e:
ca:5b:0b:10:fb:4a:14:00:63:bb:04:f9:1c:41:1e:
9b:e5:40:0c:3c:68:be:4e:0a:66:ce:c2:fe:65:ae:
3f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0C:03:83:A2:45:51:97:9C:7C:88:5E:39:59:EE:4D:11:45:26:B6
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PwwDg6JFUZecfIheOVnuTRFFJrY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.83.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c4:0e:98:f7:a4:0b:9c:69:38:59:08:54:68:11:80:ee:10:
ce:49:55:96:da:b1:57:00:f7:1c:ff:0c:81:90:dd:30:d4:7c:
a4:8d:30:09:9f:d9:c3:47:85:fa:b7:f0:ec:52:9e:33:65:dd:
25:ad:6b:55:93:2e:0d:40:29:4b:a0:9d:ef:fc:ee:47:2b:b6:
3c:c6:30:a0:a6:42:ad:8d:40:4a:13:fd:d2:ce:7d:2a:36:3a:
41:c4:b5:df:f6:52:2f:51:a1:ec:c0:41:8f:6e:4f:be:c1:50:
8a:1d:f0:c3:0d:37:25:0f:13:7e:46:ad:08:db:cd:91:db:61:
4d:cf:0c:58:24:e8:a0:da:bf:86:45:10:63:6c:1e:05:13:85:
09:a1:20:34:76:31:28:4a:f8:ed:bb:e5:40:0a:9a:1d:6a:bc:
e3:31:fb:73:b8:f6:75:04:9b:63:62:1a:4b:e9:4a:c3:49:9f:
60:f2:8f:a4:3f:3f:94:f2:1e:97:c2:1e:3d:4a:7d:56:12:a7:
c9:3b:f6:6d:ce:97:18:8f:cb:bc:03:ae:ac:1b:61:0c:f0:61:
f5:67:be:6a:3a:c3:98:4b:4e:c4:17:01:ce:91:b5:ee:92:2c:
1d:2f:da:1a:0b:6b:4a:7c:79:f2:89:16:cc:c7:d5:c4:38:40:
f5:01:42:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org