Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/S1w4jlJQj7b8BR50YoVGcLZWKlA.roa
File: S1w4jlJQj7b8BR50YoVGcLZWKlA.roa (raw, json)
Hash identifier: Zxoj9s18lii33FERSwSbz2rd8C0VcrGFSr2WQofqRmA=
Subject key identifier: 4B:5C:38:8E:52:50:8F:B6:FC:05:1E:74:62:85:46:70:B6:56:2A:50
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 089E
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/S1w4jlJQj7b8BR50YoVGcLZWKlA.roa
Signing time: Tue 29 Sep 2020 10:02:42 +0000
ROA not before: Tue 29 Sep 2020 10:02:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131607
IP address blocks: 150.117.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2206 (0x89e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4B5C388E52508FB6FC051E7462854670B6562A50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:1e:70:05:ed:39:3f:95:4a:e5:b7:e4:ae:
65:f6:c8:51:f7:63:63:b5:bc:24:93:4d:79:d1:8e:
6b:0f:35:af:ed:75:66:b2:bf:27:37:30:2a:8a:47:
8e:ee:bd:88:33:cd:fb:a2:f2:51:72:dd:45:4d:24:
c6:bb:71:3d:01:8c:f0:67:55:e5:d7:f1:59:ed:a4:
17:3b:96:8a:40:f9:3e:7f:33:0a:26:e3:de:90:6e:
de:1e:33:c7:62:7f:2f:fa:42:8c:b5:7d:4c:01:75:
cd:52:30:35:fa:9e:df:67:be:10:20:36:70:43:91:
da:a0:77:50:48:6d:4b:1d:be:9e:9e:e0:c3:55:36:
6a:71:f7:ab:b8:2f:e2:88:6e:c3:4b:8a:28:cf:08:
2f:6e:73:9b:ba:fd:85:17:4c:a9:ef:fa:44:0c:80:
3a:9d:a5:8f:a1:57:7b:3a:b8:d4:32:0f:c2:b4:f1:
0e:70:31:90:cc:da:11:82:e3:bc:60:44:b8:9d:26:
48:46:52:a1:13:f1:62:3b:54:e6:22:25:58:a7:c1:
2a:ae:1d:3f:63:76:27:5e:83:80:af:82:e6:d5:38:
31:dc:20:ab:44:cb:59:51:eb:d6:14:e9:6a:f9:86:
16:6b:ef:b4:e6:32:21:2c:64:59:f5:91:de:c8:4a:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5C:38:8E:52:50:8F:B6:FC:05:1E:74:62:85:46:70:B6:56:2A:50
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/S1w4jlJQj7b8BR50YoVGcLZWKlA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.64.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:19:1b:38:c7:a7:c0:b9:5b:38:ab:e3:80:d9:11:27:16:39:
d4:38:dd:f8:54:07:5f:04:41:05:5e:91:cc:4b:26:f3:bb:21:
94:12:c2:d6:56:bc:73:ed:3f:96:1e:05:51:c2:59:1b:c4:f5:
43:29:70:37:bf:1e:89:f8:da:78:59:18:37:f4:54:55:9d:fe:
4f:0e:33:af:5a:6b:70:49:12:59:7b:9f:a2:5d:6a:7f:ca:7d:
24:7d:73:72:d5:49:04:ed:f9:85:ed:82:67:24:c4:b6:7f:47:
1f:88:e1:51:9c:2b:29:64:f6:de:37:d6:63:cb:4c:89:f2:7b:
b8:11:16:31:0f:29:56:09:b7:5c:cf:6e:6a:9e:96:8a:98:eb:
57:a2:b9:d8:ab:ff:bf:f9:9c:2b:20:be:ca:a4:a3:48:0b:03:
17:3e:f4:57:1b:f0:bc:30:f1:50:98:39:dc:16:9a:ff:b0:2d:
68:95:c2:b9:bb:a8:77:06:7e:8c:f3:2f:25:65:e9:cd:6b:86:
1e:49:e0:58:ab:14:77:04:d1:b4:7b:58:d2:31:dd:fe:fa:da:
28:e1:d7:20:6f:d7:06:80:31:7e:2f:a1:ac:e3:19:6c:b3:32:
e3:c5:8f:a7:35:fb:c3:76:44:73:ee:a0:10:48:57:51:84:7b:
24:3f:e2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org