Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/SYc__thEHcYRjxp05mjKogTbGcI.roa
File: SYc__thEHcYRjxp05mjKogTbGcI.roa (raw, json)
Hash identifier: BZfD9r1HvUv/tZre7tUhCYeZZ9uOpRpvptqzYRjJ2N8=
Subject key identifier: 49:87:3F:FE:D8:44:1D:C6:11:8F:1A:74:E6:68:CA:A2:04:DB:19:C2
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0B16
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/SYc__thEHcYRjxp05mjKogTbGcI.roa
Signing time: Sun 07 Feb 2021 13:04:24 +0000
ROA not before: Sun 07 Feb 2021 13:04:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 138915
IP address blocks: 150.116.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2838 (0xb16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 13:04:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=49873FFED8441DC6118F1A74E668CAA204DB19C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:84:45:0b:d8:b7:f3:0e:92:cf:22:64:a4:
7f:ac:73:61:00:93:95:20:01:be:64:5f:e9:ff:08:
83:e1:a3:21:06:2d:23:e0:0a:25:4b:ee:05:90:df:
94:6b:75:3f:61:ee:6f:ea:ef:2e:e7:8c:fd:e4:c6:
81:a5:26:db:f5:d6:86:6a:73:7c:9c:1d:34:a5:ae:
78:3b:61:69:f1:f3:7c:c2:c6:eb:1c:2d:ad:0a:4b:
1b:a3:7a:c6:78:b9:c3:18:0e:18:a7:a8:42:aa:23:
55:5b:40:f4:9f:55:2c:12:2d:b7:31:47:17:35:44:
a0:91:c2:58:51:3d:6b:f9:a4:2a:d5:4d:4f:81:cd:
06:3c:9b:a2:74:92:be:5f:4a:7b:4a:78:7e:fa:d5:
5b:df:34:a6:98:98:85:00:eb:dc:4b:4c:00:c0:36:
78:a6:3e:5e:a2:4e:04:1f:89:91:55:5d:44:fb:e3:
66:76:c4:d0:5c:88:46:23:06:93:94:08:ce:f6:9a:
aa:08:2e:7b:e5:a8:41:d5:61:53:e9:5e:da:3e:82:
1c:fe:d1:39:3d:3a:87:12:9b:91:47:a1:4b:83:a2:
14:0e:b3:bd:98:17:bb:44:d6:72:a5:d9:4e:d5:02:
6c:5a:de:14:e7:24:66:49:f3:3d:b8:3d:81:73:06:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:87:3F:FE:D8:44:1D:C6:11:8F:1A:74:E6:68:CA:A2:04:DB:19:C2
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/SYc__thEHcYRjxp05mjKogTbGcI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.52.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d0:e5:88:da:41:76:d0:c2:bf:53:d2:2d:56:26:36:e3:e1:
05:9f:d8:d3:8a:25:ec:da:fe:5f:e4:6d:ca:1a:07:2a:e7:e6:
20:a4:fe:47:27:41:e5:ef:d4:c9:93:10:b8:7c:9d:af:23:d7:
5f:28:0f:24:cf:a4:31:f6:dd:a6:f2:bd:38:46:fd:eb:81:83:
18:ad:85:d3:34:6a:21:79:97:77:5f:3e:d1:e2:44:3e:fb:e0:
c5:d7:fa:bb:47:d1:2f:9e:7a:cf:69:d0:9d:8d:b5:d8:c9:dd:
0e:bf:9c:58:4d:0e:be:77:02:1c:14:5b:ea:ed:01:17:dc:e1:
bf:73:58:87:51:3d:0f:dd:78:9f:b2:e5:d5:30:6d:a9:0d:84:
2e:c6:dd:8a:74:53:72:98:6a:4b:39:00:42:50:5b:e7:e0:c5:
de:82:07:75:ac:4b:7c:c9:07:69:51:79:ab:7d:d7:77:1b:40:
cd:3c:5b:1f:3f:e9:28:0f:4e:a7:1b:d3:f3:c3:cf:3d:d4:41:
dd:cc:e5:e4:02:e2:5c:94:4d:58:fa:6d:25:31:16:ca:65:7c:
ae:48:53:9b:08:5a:ae:9f:b3:3b:a3:e4:bf:b5:a8:4c:22:27:
14:83:a9:49:6e:73:6a:36:bf:3a:32:34:e5:00:56:97:fd:1b:
1d:83:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org