Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Q5Kl1cz5docjv3nW-X8FsAFYUT8.roa
File: Q5Kl1cz5docjv3nW-X8FsAFYUT8.roa (raw, json)
Hash identifier: Znzmu56okE6sE2yZUwWwJCe9nrbQXuTsl522X4wfWh8=
Subject key identifier: 43:92:A5:D5:CC:F9:76:87:23:BF:79:D6:F9:7F:05:B0:01:58:51:3F
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0ADE
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Q5Kl1cz5docjv3nW-X8FsAFYUT8.roa
Signing time: Sun 07 Feb 2021 12:43:09 +0000
ROA not before: Sun 07 Feb 2021 12:43:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.140.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2782 (0xade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 12:43:09 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4392A5D5CCF9768723BF79D6F97F05B00158513F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:8c:1b:ba:84:71:75:29:ad:eb:59:a1:d5:
31:c2:a7:6f:16:a4:ae:1b:e6:49:44:79:46:e4:c3:
c8:68:f2:d6:cf:55:e3:9d:2f:b6:40:a8:3c:1a:95:
fa:d6:8d:17:6d:e8:6b:86:9c:aa:a8:09:00:9a:f3:
f2:69:77:e3:3c:73:ba:d9:f0:bc:aa:9a:22:f9:45:
19:1e:24:1c:9d:18:6c:28:84:9d:15:48:ad:22:0c:
6e:12:e5:06:84:91:95:21:c0:9b:bf:eb:03:e8:79:
cb:8f:ef:29:4f:52:c8:d6:8a:f6:6f:17:16:73:96:
92:2f:fd:cd:f1:83:24:d5:87:d9:91:d5:53:80:64:
4e:29:a0:51:64:7a:76:17:d4:ad:70:66:5a:ec:de:
4d:ea:43:c8:de:77:6e:e7:3d:da:7d:41:c2:34:84:
64:6c:b6:63:0b:65:ee:79:1d:61:d0:3d:6d:48:f2:
ca:73:1c:21:8b:6b:20:68:c6:fb:7a:cd:b0:57:52:
9d:9d:e0:8b:13:e2:ce:79:8d:2a:ff:84:e4:67:70:
19:80:fc:df:0c:f2:01:94:84:64:53:88:e1:60:80:
4a:41:78:f8:4d:66:a1:11:82:18:6a:d2:17:0b:91:
1b:c3:d0:2e:10:7b:61:cc:13:96:3e:c2:b1:aa:62:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:92:A5:D5:CC:F9:76:87:23:BF:79:D6:F9:7F:05:B0:01:58:51:3F
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Q5Kl1cz5docjv3nW-X8FsAFYUT8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.140.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:17:99:4a:a0:89:4d:97:a2:fd:e1:e8:4f:a3:67:16:94:eb:
77:f5:aa:7f:ae:0b:8d:54:b8:a9:4c:a0:cb:06:2d:ee:cd:6c:
23:1a:21:74:29:55:7e:c5:82:c9:0d:cf:1c:d9:08:07:a9:c4:
5a:8d:44:45:a5:f9:29:e3:97:03:d9:53:e1:67:87:4c:70:55:
dd:0a:e9:8f:50:65:2c:86:70:73:bf:c4:5f:f2:38:18:10:59:
d6:3c:02:c8:51:6e:66:bf:b0:aa:c6:41:89:fb:71:8d:fb:6a:
06:0c:7c:e8:a1:b5:64:13:83:51:96:00:f2:3d:c6:75:43:19:
0a:3b:47:a3:e6:49:ff:de:32:bb:84:2f:30:4c:e9:1a:25:fe:
50:34:91:1a:08:68:a1:34:c4:59:7f:3b:d5:11:0f:d1:2f:e7:
05:27:91:09:94:55:31:32:e2:a4:3c:3e:49:5e:ae:af:2e:14:
d9:4c:bf:3b:9c:e8:d8:52:ac:b8:4e:63:50:d7:c8:b1:1f:d3:
0a:62:68:b9:48:66:1c:12:3c:72:8f:89:da:a8:f6:bc:1b:1c:
04:bc:5f:62:c9:c7:82:1c:0b:2a:b3:36:ab:20:21:ed:5d:b0:
89:eb:d0:d2:08:68:61:66:4e:04:51:0a:43:81:5d:0a:ee:bc:
c9:6a:1b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org