Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/W0y-CQtGR1isQL2rpYiCO5FZGv8.roa
File: W0y-CQtGR1isQL2rpYiCO5FZGv8.roa (raw, json)
Hash identifier: odkMeHXZO70nZ5pizy2jf5ewrV67ix02RqxJts52kXw=
Subject key identifier: 5B:4C:BE:09:0B:46:47:58:AC:40:BD:AB:A5:88:82:3B:91:59:1A:FF
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0A7A
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/W0y-CQtGR1isQL2rpYiCO5FZGv8.roa
Signing time: Sun 07 Feb 2021 11:49:53 +0000
ROA not before: Sun 07 Feb 2021 11:49:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.170.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2682 (0xa7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:49:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5B4CBE090B464758AC40BDABA588823B91591AFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:10:0c:0d:2d:1b:3e:25:26:38:21:47:38:
e6:44:f2:7f:d4:c2:00:d7:f2:64:33:80:2a:54:77:
dc:31:8f:26:62:70:18:a6:f3:53:dc:32:46:46:59:
6f:43:a8:91:ff:01:09:df:62:60:52:25:d8:81:95:
85:7a:56:a9:02:16:b2:af:95:6c:29:1c:48:fc:b1:
4b:cd:f7:b7:1f:a3:7c:47:ec:f7:f2:12:49:53:c2:
02:df:08:35:3d:2f:20:e6:f2:ed:8e:fe:d3:23:b8:
af:ff:37:de:c7:b1:76:1c:ab:0a:f8:0a:64:b6:67:
ab:bc:9e:32:99:b0:dd:4e:60:ef:79:6d:9e:f6:06:
b3:21:0a:c6:4c:3c:be:83:5e:99:11:bc:ec:c9:80:
9a:6b:e6:3d:30:76:16:50:b2:22:71:35:fa:f2:40:
79:61:87:92:24:7d:5c:c5:60:c8:e5:46:9c:fe:e4:
c2:ae:10:5b:bd:3a:80:ca:52:7f:f7:c4:f0:43:9e:
fc:a8:3b:23:dd:51:b5:8d:66:2f:c5:94:42:0f:a9:
ae:b2:38:31:45:26:62:57:9d:39:3d:21:8e:a5:08:
4e:50:d7:a5:09:03:b4:3f:87:dd:74:d7:5e:2f:87:
0f:fd:21:57:41:44:8d:c0:da:9d:ba:5e:b0:17:95:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4C:BE:09:0B:46:47:58:AC:40:BD:AB:A5:88:82:3B:91:59:1A:FF
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/W0y-CQtGR1isQL2rpYiCO5FZGv8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.170.0/23
Signature Algorithm: sha256WithRSAEncryption
03:7e:7d:8c:34:e4:2e:48:f4:ad:43:41:c0:c6:dd:f3:01:78:
c7:43:af:68:4e:69:4d:cf:20:63:ac:be:45:8d:bf:cb:d4:ed:
db:2f:5d:d8:ca:79:7d:fe:d5:ed:ba:da:a8:78:03:72:6d:2d:
f1:68:fa:44:9e:2c:6c:fd:34:b2:16:66:ae:e1:9d:20:19:1b:
19:34:3f:ba:13:e2:bc:14:99:3b:19:89:48:bc:e0:37:37:6a:
16:ba:48:04:aa:8f:a0:a6:2a:ee:19:da:1b:22:c5:ec:50:f7:
3f:62:77:cc:d8:d4:37:43:8b:1a:9f:0b:25:02:93:94:df:c8:
d8:0d:0b:c6:cb:47:ac:76:d0:d3:99:9c:03:2c:7a:e7:e3:a3:
c1:1f:a0:65:a7:1d:d0:10:4b:25:64:47:4a:0c:79:f2:25:ce:
6a:00:1c:3b:bf:58:6d:cc:67:79:34:98:39:da:7c:7e:41:72:
c3:d7:32:6b:1d:6a:d4:dd:d0:6f:dd:d5:4d:6c:66:9e:cc:4e:
90:d0:e3:32:2b:64:b6:ea:a8:0b:f1:05:ed:35:b9:ff:ce:f2:
ac:2e:0e:b3:9e:4c:a6:a0:27:ad:d3:96:7f:22:d8:6c:4a:6e:
2e:a6:e0:56:d7:b0:75:8a:01:9b:18:94:cd:87:2d:17:a1:57:
f7:01:36:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org