Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VwFn38s_5077A7iGnUo5xS9fjbM.roa
File: VwFn38s_5077A7iGnUo5xS9fjbM.roa (raw, json)
Hash identifier: /FXPuHj2lKVqQicQ3x7kNY6uaq23FA3U10PEgYX+3xY=
Subject key identifier: 57:01:67:DF:CB:3F:E7:4E:FB:03:B8:86:9D:4A:39:C5:2F:5F:8D:B3
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C3A
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VwFn38s_5077A7iGnUo5xS9fjbM.roa
Signing time: Wed 29 Sep 2021 02:39:11 +0000
ROA not before: Wed 29 Sep 2021 02:39:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131636
IP address blocks: 150.116.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3130 (0xc3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:39:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=570167DFCB3FE74EFB03B8869D4A39C52F5F8DB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:c1:a7:9c:9c:93:34:63:f2:66:ab:59:6d:
9f:82:89:ec:b2:24:8c:2d:7a:47:b8:9c:0e:96:96:
24:f1:ee:de:21:d2:94:8e:8a:b5:ea:59:5f:57:87:
25:6c:c3:02:a2:fc:8e:eb:2e:0b:f7:30:41:a4:a9:
78:ac:54:c7:40:d1:91:ef:bc:6b:b3:f9:f7:04:6e:
9b:bc:a1:e6:d7:c8:62:9d:16:47:79:9f:01:5c:d6:
8f:53:d8:10:8b:cb:e5:ae:fc:61:f5:0d:e6:0f:72:
4a:9a:ae:96:07:4b:2a:83:7c:4b:0b:cc:3e:90:98:
4a:ac:27:5c:8b:a2:75:5a:6d:e1:d0:65:df:ac:94:
8a:0d:ca:58:af:e6:c4:6c:62:40:e8:e8:0f:7e:90:
6c:87:dd:dc:65:43:86:5b:2a:64:f9:be:6b:a2:98:
b6:46:2b:5b:3c:49:13:90:82:d8:d4:4e:a8:b1:ed:
f3:c6:8c:09:3d:ad:b6:7b:2a:4b:81:80:26:f7:12:
c8:82:98:1b:0d:55:54:47:a1:b5:7a:89:bc:d9:8d:
7e:03:ca:a5:6c:3d:60:05:72:81:c7:e3:5b:ed:3e:
94:19:15:64:19:18:87:1a:49:4e:cc:31:95:89:37:
63:d5:f4:c1:31:1f:4d:e9:51:c1:c2:1d:0e:e5:db:
59:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:01:67:DF:CB:3F:E7:4E:FB:03:B8:86:9D:4A:39:C5:2F:5F:8D:B3
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VwFn38s_5077A7iGnUo5xS9fjbM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.55.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3d:e6:a1:34:2d:97:5d:33:22:91:a1:e7:f9:0b:c8:a3:4a:
88:0b:fe:ed:da:28:13:24:2b:c4:55:4f:f0:34:43:2f:c4:26:
34:fb:11:2e:fd:48:52:3d:45:96:87:45:db:0e:5d:5c:45:fd:
6f:66:c7:62:52:83:00:59:07:9e:f6:17:0b:55:a4:e5:f7:ec:
d0:f0:d1:89:2a:78:02:59:a7:93:cf:c0:64:41:4d:4e:1a:dd:
eb:11:3a:58:f5:9d:f5:8e:05:10:ee:7b:b1:1d:29:db:ba:88:
c4:f1:96:5d:e8:38:20:da:3d:20:e0:36:91:70:d9:27:db:37:
b8:83:7d:02:97:58:7f:90:d7:93:61:00:78:56:2a:9a:37:cf:
af:23:d0:9f:f9:38:5c:6c:95:62:90:54:37:e7:06:0c:3b:57:
05:41:21:06:c3:3f:53:37:ad:32:69:01:3a:6a:fb:fc:30:f5:
e7:1d:f1:9b:ea:db:ec:63:d5:85:f0:a4:59:51:12:5e:55:e7:
6d:30:b6:bb:2d:4c:76:84:b7:d9:1f:11:45:4e:80:8d:a9:aa:
c8:b6:62:74:e5:aa:8a:9a:e8:e5:5e:06:c7:1c:b0:39:a4:4b:
03:51:c1:33:4f:c8:cd:9c:80:2a:f9:61:84:8d:fe:7f:81:1b:
27:51:85:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:10:44 2025 by rpki-client