Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VDQHYhbB3DyDBllRAU25Q26NWR4.roa
File: VDQHYhbB3DyDBllRAU25Q26NWR4.roa (raw, json)
Hash identifier: UAah1Bfedv1+LmMMCoc/XSTdYc6j2FPxIL+Ear1XO6o=
Subject key identifier: 54:34:07:62:16:C1:DC:3C:83:06:59:51:01:4D:B9:43:6E:8D:59:1E
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C28
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VDQHYhbB3DyDBllRAU25Q26NWR4.roa
Signing time: Wed 29 Sep 2021 02:39:06 +0000
ROA not before: Wed 29 Sep 2021 02:39:06 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 137263
IP address blocks: 113.21.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3112 (0xc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:39:06 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5434076216C1DC3C83065951014DB9436E8D591E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:01:b3:76:77:33:c1:0f:44:5a:c7:f1:15:
02:20:6d:c7:c5:f8:d1:8c:f0:a6:31:c5:97:21:a3:
10:61:94:ae:21:6f:5d:e0:c1:5d:aa:1c:d0:71:6f:
06:29:09:da:57:a9:74:55:cb:77:55:6b:70:ca:b5:
b3:aa:36:3f:3b:35:85:e3:5c:02:2d:fa:7c:f6:72:
0f:55:d4:ad:d1:0b:be:fc:fd:8a:78:c2:ce:96:10:
b4:c5:40:e4:6f:d1:3b:a3:2c:44:8d:c6:69:d2:24:
e0:47:2a:51:95:35:39:17:4b:7f:38:3b:74:2f:ba:
86:00:29:90:e4:01:0a:66:5a:c0:cf:ec:ad:75:ee:
96:9e:8c:37:bd:27:5e:2c:1b:99:c5:2a:15:c9:03:
15:9f:64:97:53:a4:a5:b8:f2:42:f4:dd:3c:5f:dd:
8a:c6:fc:73:9b:67:25:1a:32:2c:b4:c5:fb:74:83:
14:3d:76:47:70:24:76:8a:85:b1:79:5f:e1:a2:9d:
e8:cd:cb:c7:e3:55:67:50:44:72:2f:26:de:06:6a:
3e:48:dd:ed:80:4c:d7:7d:4a:04:b0:2d:ab:78:cd:
b9:a4:f1:57:59:e9:40:75:eb:00:f0:55:be:8b:e0:
28:4d:c0:eb:07:58:c0:25:fa:40:2b:7e:76:7a:f4:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:34:07:62:16:C1:DC:3C:83:06:59:51:01:4D:B9:43:6E:8D:59:1E
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VDQHYhbB3DyDBllRAU25Q26NWR4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.92.0/24
Signature Algorithm: sha256WithRSAEncryption
97:2a:3b:aa:8c:56:72:00:96:22:d9:2d:bf:b8:86:0b:0b:d6:
58:4f:80:15:e2:4b:3c:80:31:d2:cd:f3:a8:d3:d0:da:0f:17:
5b:80:c7:90:73:6b:be:c9:44:10:66:c0:de:19:78:47:63:1f:
d6:37:05:50:2e:f7:6e:94:0f:d6:f9:41:7e:8f:d7:b8:51:de:
d2:5a:53:6d:6d:8e:e9:0b:94:e0:9a:31:4a:9c:c7:8b:18:c6:
63:61:7a:f6:3d:f6:9a:5c:87:93:f0:a8:b5:ea:95:77:dc:b0:
3f:b7:0b:87:af:4c:0f:da:34:b3:fd:5c:2b:f3:2e:03:1e:98:
00:8e:61:c0:ee:32:79:a8:4d:53:40:a3:4c:85:40:4f:39:34:
6a:bd:91:4f:d6:5c:a9:a9:1a:28:9b:e1:e4:57:d4:33:07:98:
96:da:a8:6b:0c:9a:5e:69:dc:94:7e:8a:3c:45:8b:b9:a9:ab:
32:f3:c4:bd:80:1c:00:ef:9f:aa:a9:9e:27:31:0f:88:67:36:
e9:08:16:78:6f:8a:e5:57:d4:8a:4e:03:d8:28:5d:de:b0:dc:
f7:3a:51:e0:4c:91:1f:af:19:a4:16:2e:dc:86:cd:af:16:b7:
fd:dc:d9:43:01:30:44:bd:b9:97:9f:77:79:c3:f8:51:b9:20:
d6:86:92:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org