Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VXPVYWMn9AhGDwCvzIOREl11vPA.roa
File: VXPVYWMn9AhGDwCvzIOREl11vPA.roa (raw, json)
Hash identifier: IUPeRhLKBjESt2NutY3NY9IrLNItyAn3qiUByOLfVW4=
Subject key identifier: 55:73:D5:61:63:27:F4:08:46:0F:00:AF:CC:83:91:12:5D:75:BC:F0
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0FA3
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VXPVYWMn9AhGDwCvzIOREl11vPA.roa
Signing time: Fri 01 Sep 2023 08:29:22 +0000
ROA not before: Fri 01 Sep 2023 08:29:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17408
IP address blocks: 223.26.68.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4003 (0xfa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5573D5616327F408460F00AFCC8391125D75BCF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:17:ce:2a:58:26:a4:b7:dc:a6:b2:a6:c1:
91:40:d5:72:9f:19:86:f3:6b:32:53:cf:74:06:6e:
32:3b:81:a7:3e:73:98:93:15:30:36:4d:b5:76:c9:
1e:9b:6a:23:f7:4f:8b:ba:00:ec:26:3c:22:07:7f:
45:b6:57:d2:bf:b5:c0:7e:6b:be:84:9b:c4:94:db:
35:18:d9:70:bd:80:31:d6:71:77:26:70:16:2f:cc:
ea:87:c1:7a:79:50:c2:3e:92:09:6b:f9:74:dc:39:
ea:34:2a:8d:a2:32:c2:26:48:5e:ec:1e:c2:01:41:
9c:78:80:ea:d6:2b:a1:49:d7:6c:5c:b0:b5:02:9e:
8b:a4:b7:3c:57:de:22:f7:1f:a9:b6:f3:b5:10:b6:
dc:9d:b1:82:41:92:bc:ed:69:ab:37:dc:71:60:43:
90:19:ee:75:30:21:ae:ab:d8:71:16:37:f3:23:15:
29:5e:e4:bb:62:14:9d:ab:87:6e:44:df:b4:5e:73:
7c:db:f6:71:aa:8e:c7:b0:bd:68:45:88:c9:3c:1c:
13:69:9b:60:ab:c2:db:ac:ff:3e:0d:6c:2f:5d:43:
d7:41:f9:72:a5:f6:54:47:8c:ca:4d:88:45:f7:f4:
d5:07:b1:a7:82:e1:0a:89:4c:eb:2e:52:d0:3d:1d:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:73:D5:61:63:27:F4:08:46:0F:00:AF:CC:83:91:12:5D:75:BC:F0
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VXPVYWMn9AhGDwCvzIOREl11vPA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.68.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:6e:9f:8a:77:16:e1:40:3d:ed:26:d4:94:8d:88:c9:fc:8b:
d6:bb:66:f3:7e:52:1e:56:73:e1:6e:9e:37:ac:3e:c4:6b:d9:
55:ad:f8:80:67:37:94:6f:bf:2e:ad:9f:00:75:f4:0c:5a:47:
73:89:84:dc:47:61:00:bb:1b:36:2c:25:1f:38:82:65:86:93:
22:10:48:26:76:c9:da:4d:6e:dd:05:8d:e4:12:08:2e:1a:7b:
a8:91:30:05:5a:e4:40:7b:69:3b:5f:72:a4:91:39:cb:45:82:
5a:15:3f:8d:f3:e9:0a:24:19:23:77:9f:5d:59:dc:ea:ce:d4:
ea:48:09:3e:9e:bb:16:1d:d3:a7:30:44:a2:7a:cc:17:88:10:
3a:68:1e:a2:9e:d1:79:60:38:7d:0f:ae:6c:f2:81:f4:62:4e:
69:29:8e:79:73:63:0e:84:99:03:e6:44:04:69:ee:b4:0a:58:
2f:9a:96:61:08:31:92:ff:02:d1:db:63:44:b7:40:17:1b:71:
7f:16:1c:07:a5:90:8e:cb:79:e3:05:19:a5:08:15:56:3b:ca:
a0:17:f2:0d:df:7a:7d:b0:f7:44:c7:f1:a5:0c:f9:84:21:47:
4a:cb:f7:8e:c4:91:4a:4d:8c:ec:3f:b7:ec:c0:22:e4:5b:e3:
de:17:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:01 2025 by rpki-client