Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TRPV9fLsw00d1oXANpiQB52iL5g.roa
File: TRPV9fLsw00d1oXANpiQB52iL5g.roa (raw, json)
Hash identifier: kWCHhTqlms9QqIPHzz5FR+yASKT0wMLVw4+wy2qCbLU=
Subject key identifier: 4D:13:D5:F5:F2:EC:C3:4D:1D:D6:85:C0:36:98:90:07:9D:A2:2F:98
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0A98
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TRPV9fLsw00d1oXANpiQB52iL5g.roa
Signing time: Sun 07 Feb 2021 11:50:35 +0000
ROA not before: Sun 07 Feb 2021 11:50:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131607
IP address blocks: 150.117.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2712 (0xa98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:50:35 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4D13D5F5F2ECC34D1DD685C0369890079DA22F98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ae:38:a3:44:cd:94:ae:57:80:10:e5:72:8c:
7f:f7:b0:97:21:86:91:db:63:ff:4c:e9:fa:af:a0:
57:40:92:9b:d4:59:2e:f1:41:91:4e:50:7b:e6:6e:
03:42:c0:52:3a:8c:e5:0a:e3:31:e1:0d:93:88:1f:
0d:b1:1d:f4:05:a2:60:0a:17:41:29:d8:dc:5e:20:
69:82:c9:45:70:02:2d:c5:c7:84:3f:37:f2:5b:16:
14:29:84:9b:4f:23:e1:61:02:0f:73:8f:e5:40:ae:
38:97:e9:4d:a2:d9:bd:31:92:29:2c:3b:8b:6d:1f:
e9:0e:5a:26:3c:95:c9:3e:94:b4:fc:3b:f9:19:de:
c8:00:92:1b:8a:ca:9d:6b:f3:fc:a5:1e:ab:5d:71:
0d:bb:70:e5:14:c6:80:3d:bd:ea:e5:69:c9:8f:00:
d1:1a:d6:d6:4d:61:27:eb:61:fb:cb:71:05:69:72:
fa:b1:f3:9e:a1:df:c2:c7:7d:59:19:93:dd:4e:f5:
61:f2:8c:33:3b:66:05:59:b1:03:62:ab:03:90:16:
c9:bd:9a:e4:b3:3e:7e:45:b1:60:db:d2:a2:26:0a:
a2:22:d3:a8:2a:60:b7:36:14:7a:e9:fe:32:1c:aa:
4d:bf:f1:ea:a5:33:97:f1:d8:77:bf:2b:d5:c2:89:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:13:D5:F5:F2:EC:C3:4D:1D:D6:85:C0:36:98:90:07:9D:A2:2F:98
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TRPV9fLsw00d1oXANpiQB52iL5g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:2c:c3:84:2d:a7:82:b3:8d:f9:9a:65:bf:c4:49:b7:b3:86:
3a:2b:17:87:66:cf:0c:b8:fe:09:af:f3:65:a5:66:db:15:94:
92:4f:43:8c:26:73:74:00:2f:ef:ee:84:60:7e:15:69:dc:dd:
cc:41:cc:b7:b2:55:f2:cb:b5:0c:7f:32:e9:6c:cb:60:51:58:
ad:c4:8d:f6:43:f1:85:28:3d:25:e1:5c:52:16:6f:01:ae:a0:
41:7d:f3:48:34:bc:df:21:a4:a9:65:e9:32:22:17:53:0a:36:
09:66:93:fe:e4:6c:02:7c:79:37:2e:b5:f1:b5:98:c6:38:ed:
21:2a:ee:fb:a2:e1:1a:d5:b7:50:22:0b:e8:9c:6c:66:f7:f5:
2b:ae:9a:ed:cf:04:c9:ec:e2:8e:24:ec:da:00:ff:12:1b:8f:
32:ad:a7:b6:23:58:4f:f7:37:28:db:eb:dc:6d:03:20:22:7d:
c1:66:3f:e8:ed:07:f7:18:67:e1:1e:6f:4e:7d:59:08:45:fc:
b8:50:0e:c7:9a:48:77:1a:a4:0e:4d:13:75:94:5e:fe:c0:f3:
57:5a:3b:d9:50:b5:88:ae:82:2e:12:7f:61:61:44:d8:46:8a:
12:eb:d3:48:44:f7:e1:a7:b5:94:fe:b1:80:2a:65:11:db:95:
10:f6:c9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org