Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/T83CTPcIt-AakxRA2gqitYCQn6s.roa
File: T83CTPcIt-AakxRA2gqitYCQn6s.roa (raw, json)
Hash identifier: uoFchzEPz6wSOKoMPRMUwmm2J5ydw9Sd6fKw1SZdqwo=
Subject key identifier: 4F:CD:C2:4C:F7:08:B7:E0:1A:93:14:40:DA:0A:A2:B5:80:90:9F:AB
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/T83CTPcIt-AakxRA2gqitYCQn6s.roa
Signing time: Thu 15 Sep 2022 02:39:20 +0000
ROA not before: Thu 15 Sep 2022 02:39:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10085
IP address blocks: 203.163.202.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4FCDC24CF708B7E01A931440DA0AA2B580909FAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:44:05:a9:6b:90:3b:f6:de:41:a8:94:4d:
33:1b:df:7f:f0:f9:a6:ca:cb:e7:9d:59:cd:cc:4c:
be:f9:ac:36:f8:94:23:31:b0:cb:42:39:67:8f:1a:
c7:63:83:19:c0:95:7e:67:67:5e:4b:2f:ce:3d:74:
66:8d:72:47:a0:a2:79:d3:86:12:2e:2a:9c:29:9e:
7b:94:cc:d6:7c:e1:8d:81:4b:ce:48:00:bf:24:68:
f9:a7:2b:03:86:26:a0:88:a6:4a:2d:fa:8a:3a:09:
72:7f:2c:72:b4:90:04:47:89:1b:e1:3c:4f:54:c8:
a0:3a:08:32:45:e6:55:e9:a0:96:b4:2a:3e:8d:fc:
1a:0f:33:f1:56:59:20:31:f3:f7:38:ad:7c:47:c2:
5e:ad:cf:3a:2e:3e:10:30:82:d7:b3:b1:61:8d:91:
f7:9d:97:6e:a1:a7:63:fc:26:cf:fc:6f:43:30:93:
6d:e8:02:41:c0:b3:28:87:1f:a6:66:05:15:50:35:
2e:07:19:5b:d0:12:3f:be:17:0d:30:b3:31:20:3c:
93:91:96:bd:5b:55:ac:48:a7:3e:2f:f1:df:e4:8e:
03:0b:1f:b0:b0:4f:a0:6a:c3:29:9c:2a:eb:fc:af:
98:95:05:03:db:fa:c0:6c:bd:15:8e:93:16:c6:4d:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CD:C2:4C:F7:08:B7:E0:1A:93:14:40:DA:0A:A2:B5:80:90:9F:AB
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/T83CTPcIt-AakxRA2gqitYCQn6s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.202.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:1a:f7:5e:8b:36:ad:2c:8f:40:04:fd:7a:94:6b:9c:76:be:
4e:fa:dd:95:6e:1c:16:cf:f2:20:99:f0:e1:f7:d4:c6:80:6f:
93:b8:e5:b1:25:57:8a:67:bd:8b:95:89:4f:0f:cb:ef:b1:e2:
0a:cf:d9:be:d2:ef:d2:20:df:d0:2f:0e:de:a2:44:fd:18:82:
2b:6e:00:db:de:69:95:7a:b7:af:e1:af:ef:3f:c8:a3:0a:d0:
ea:ef:26:a6:fc:bc:f8:38:95:45:bc:0c:08:4b:2c:ba:cb:35:
3b:50:46:22:f2:49:74:c4:be:07:7f:59:c0:69:0b:3b:8b:d7:
67:eb:47:76:cd:7b:89:dc:e2:01:9e:00:8f:ae:04:47:39:31:
0e:f9:15:04:a5:72:6e:01:15:27:03:fa:ef:d9:17:af:53:75:
45:10:57:e4:10:a3:d4:d2:44:66:3b:72:aa:9a:ff:60:a2:81:
6c:6c:6c:f1:94:28:d4:e0:78:f3:3d:07:63:88:97:66:2c:ca:
4f:03:e7:34:45:60:9b:db:3c:10:16:d6:a9:5e:23:d1:a2:35:
0f:25:59:fd:65:0c:2f:ad:a9:28:5a:c4:e8:09:11:32:21:87:
34:a6:2b:25:e9:a3:ee:aa:86:eb:b9:5b:dc:93:d4:27:60:ba:
53:f6:3b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org