Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/V25ShcY7M6DDUfspb4ZUtuTZf50.roa
File: V25ShcY7M6DDUfspb4ZUtuTZf50.roa (raw, json)
Hash identifier: 4WXoY7WOHUMrIP8Bb2XxZ7ETPt0MTJkQaFQYV2SBY74=
Subject key identifier: 57:6E:52:85:C6:3B:33:A0:C3:51:FB:29:6F:86:54:B6:E4:D9:7F:9D
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0FC4
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/V25ShcY7M6DDUfspb4ZUtuTZf50.roa
Signing time: Fri 01 Sep 2023 08:29:31 +0000
ROA not before: Fri 01 Sep 2023 08:29:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17651
IP address blocks: 150.116.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=576E5285C63B33A0C351FB296F8654B6E4D97F9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:66:ec:8d:13:2a:5e:9a:d1:2f:07:a7:c3:50:
50:6f:ba:32:7e:bf:dd:a5:3b:08:b7:e0:a8:d6:46:
64:32:cf:eb:1b:12:35:3b:8e:10:3e:2d:03:9a:71:
2e:42:57:1f:73:97:11:37:fc:b8:fc:f9:68:b7:03:
e1:e1:e7:3a:5a:64:dc:83:61:fb:79:5c:8c:4e:16:
8f:e0:2a:9e:7d:44:ba:7f:a7:10:30:87:89:a9:ea:
6e:fd:b5:8e:83:3f:a9:22:f1:4c:04:e8:a6:91:b6:
c1:1a:26:b9:41:6e:1c:0e:52:a9:fb:3b:d4:38:3e:
a4:e3:a3:0b:8b:f9:0f:97:7b:79:71:ce:71:15:41:
01:6b:42:90:c6:00:94:fd:eb:4f:7b:24:11:d7:82:
b1:8e:ab:af:84:41:7f:c7:12:0a:b6:a5:91:0f:ce:
01:99:fc:ce:64:1a:42:5d:57:13:af:5b:ed:26:3f:
45:05:3b:0a:b7:cb:49:19:2c:8f:62:4b:ff:93:11:
7c:ef:f1:50:27:3d:f9:71:0c:a3:64:46:85:a9:0e:
cb:43:8c:a4:39:9b:e2:10:7d:fb:ea:04:e9:ba:d2:
cc:38:d8:b3:43:bd:c1:20:84:c8:62:94:f5:19:30:
88:08:bd:e3:3f:2e:47:09:cf:d4:c7:f4:2f:68:de:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6E:52:85:C6:3B:33:A0:C3:51:FB:29:6F:86:54:B6:E4:D9:7F:9D
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/V25ShcY7M6DDUfspb4ZUtuTZf50.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.52.0/24
Signature Algorithm: sha256WithRSAEncryption
36:9e:44:a6:93:ac:0c:0e:89:a0:b2:fb:3e:b4:aa:c3:35:9c:
43:58:31:31:f8:89:3c:da:47:7a:8c:20:fb:7e:e1:e0:d1:e4:
c2:fe:fc:a7:85:d7:ab:ef:19:87:86:b3:d7:a5:8d:2a:95:ea:
ef:79:e3:de:6d:c3:16:05:08:6f:73:18:4a:69:1d:1c:2d:58:
c2:e2:a1:a1:1a:f4:04:74:32:2b:39:4f:a2:34:d1:65:45:6c:
cd:c6:4b:0e:63:7a:6c:0a:28:00:a2:c5:b7:23:86:da:8d:08:
6a:76:8d:d3:82:16:dd:88:e7:f9:74:e9:8f:9e:0f:af:8f:44:
e7:33:78:e1:21:dc:5d:36:c5:48:ab:b9:0c:c8:eb:df:bc:54:
d9:f2:da:a4:7d:81:86:d6:4c:16:e2:b0:40:73:b8:ef:02:cd:
f6:a2:05:6a:93:26:75:56:32:73:18:2e:62:0a:d1:7b:1f:f6:
b6:1f:b6:76:4b:a8:db:9d:b8:dc:fe:91:1c:76:03:0a:29:84:
6a:06:2e:93:7a:ee:a7:fd:c8:47:06:e4:81:75:29:c5:e6:b6:
be:b6:00:0b:45:8a:d3:c5:f4:e9:25:55:1e:15:f5:33:12:54:
c7:f4:0b:5e:00:f6:bc:12:cc:a6:38:a2:fe:75:e8:1b:29:d0:
d5:17:78:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:30 2025 by rpki-client