Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Rg8lHU7-IoT0drNlZ0wSjXZL7tQ.roa
File: Rg8lHU7-IoT0drNlZ0wSjXZL7tQ.roa (raw, json)
Hash identifier: deAMMSgo4uh6YkpSCw/BVWmwqGOEbZIaaFYTTq2kYCs=
Subject key identifier: 46:0F:25:1D:4E:FE:22:84:F4:76:B3:65:67:4C:12:8D:76:4B:EE:D4
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DCF
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Rg8lHU7-IoT0drNlZ0wSjXZL7tQ.roa
Signing time: Thu 29 Dec 2022 09:31:53 +0000
ROA not before: Thu 29 Dec 2022 09:31:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7532
IP address blocks: 150.116.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3535 (0xdcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:31:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=460F251D4EFE2284F476B365674C128D764BEED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:b4:b1:ae:32:4b:cb:0c:d4:36:f4:83:9e:
b3:f4:f0:16:03:cc:cf:bd:87:22:67:3e:3a:43:02:
fa:83:c5:8b:ac:db:ac:b0:dc:ae:51:f3:3e:e1:74:
98:88:67:ba:be:cc:a3:0a:7f:d2:42:d3:79:98:9d:
1e:37:25:f9:99:56:2a:92:b2:d4:a4:a0:0f:19:9a:
c0:f6:5a:df:80:94:7d:0b:36:ec:87:dc:4a:1a:8d:
23:60:88:35:a7:21:ce:d1:d6:ac:98:d2:40:c9:47:
54:de:a4:9a:f2:fe:f5:63:c9:36:7b:3c:3a:5e:14:
77:54:21:d3:8b:ce:49:3f:65:59:61:e3:ed:e1:9a:
47:f5:80:fe:f8:da:52:ca:c3:9d:1b:35:54:9d:ac:
ca:75:1b:31:01:2f:3a:0f:64:58:a5:84:4b:b8:3c:
5d:9c:2e:2b:5c:34:63:c1:ce:35:c2:40:60:85:f7:
bd:03:1a:70:e8:17:ec:2e:6f:fa:51:0c:63:b9:45:
da:07:27:63:13:1a:f2:37:6b:bf:f6:b0:63:61:ff:
10:5b:43:44:c7:24:48:2e:14:65:f2:b2:85:f5:f5:
cc:ea:63:2a:8a:a0:86:6a:dd:03:89:c3:14:45:43:
26:97:62:7f:f4:22:7e:ac:d6:32:35:8f:34:77:36:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0F:25:1D:4E:FE:22:84:F4:76:B3:65:67:4C:12:8D:76:4B:EE:D4
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Rg8lHU7-IoT0drNlZ0wSjXZL7tQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.56.0/21
Signature Algorithm: sha256WithRSAEncryption
95:ea:0e:92:c5:a2:86:9c:90:d8:3e:48:0c:97:05:13:d8:4e:
43:17:64:17:55:27:20:be:f3:6b:12:dc:fb:cb:f0:bc:0e:69:
82:ad:08:a1:2e:ef:c4:cc:50:81:17:48:47:91:f4:c1:e9:1b:
b8:cf:73:ce:50:b8:20:2a:32:b1:a0:68:cf:1c:83:d1:ed:28:
b5:1b:13:4c:c1:9b:03:95:f3:f7:e1:56:c6:71:23:83:03:44:
e3:3f:6e:de:f5:2d:cc:44:df:aa:c7:0b:16:0d:f3:25:a1:d1:
ef:bb:dc:d6:20:b6:1f:67:89:a0:91:2c:5d:1a:50:d1:30:1d:
e5:e0:18:bf:be:ce:54:0f:b7:82:de:35:23:72:23:24:77:f6:
13:d2:fd:66:ed:a9:a1:d1:71:58:79:9b:e4:0f:cc:80:d0:02:
f3:13:46:28:1c:c5:5b:4d:e1:f1:a7:0f:ad:3b:e2:d8:7f:90:
45:15:7f:44:92:9f:d3:44:77:9e:9f:91:4b:2e:5e:df:3f:be:
b5:dc:30:b1:e6:5b:27:d9:22:11:77:c0:10:43:48:e5:d5:42:
0c:9c:72:29:b2:58:41:cc:2c:18:13:e4:e4:ac:4f:d6:97:e4:
27:e1:6b:4f:4a:14:8a:1d:3f:d0:1b:b8:00:94:90:d2:dc:6c:
45:ff:77:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org