Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/WqzBJ0jwqW6i0_jmkbmRW-BBbbI.roa
File: WqzBJ0jwqW6i0_jmkbmRW-BBbbI.roa (raw, json)
Hash identifier: S8zKhqVCqB//SAhEYhCzAx5RuIa/C3ZT3m3ZSNKm/rs=
Subject key identifier: 5A:AC:C1:27:48:F0:A9:6E:A2:D3:F8:E6:91:B9:91:5B:E0:41:6D:B2
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C2A
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/WqzBJ0jwqW6i0_jmkbmRW-BBbbI.roa
Signing time: Wed 29 Sep 2021 02:39:06 +0000
ROA not before: Wed 29 Sep 2021 02:39:06 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38851
IP address blocks: 223.26.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3114 (0xc2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:39:06 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5AACC12748F0A96EA2D3F8E691B9915BE0416DB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:c8:ca:57:84:34:82:eb:5c:bb:25:e5:76:
0c:45:7f:ce:5b:c9:a3:f0:fe:26:c3:6a:b0:54:ce:
e2:45:49:91:e7:2e:45:92:1d:2a:ed:4a:0c:17:65:
36:da:cb:a7:ce:4e:38:14:fa:ac:bf:f7:81:73:33:
2d:4a:cd:27:05:3a:aa:a5:a0:f7:b4:ea:81:89:ba:
f1:19:ea:77:8d:d2:68:e8:d6:02:3d:09:ab:fa:72:
20:5e:dd:57:74:9c:a5:20:7d:87:6e:80:8c:e9:09:
75:84:89:65:6b:96:1a:c4:4f:9d:b5:2f:0f:a1:fd:
06:c4:f9:f3:65:bf:b6:f1:90:ac:cc:f5:b1:8b:f7:
2a:d3:e0:5c:65:99:8e:18:a1:8f:74:66:89:ef:35:
f5:49:69:8a:c3:c7:69:31:7b:45:34:84:44:2d:13:
2e:a6:24:95:eb:f2:42:03:4b:20:29:1b:90:01:93:
83:f6:4c:e9:9e:87:4f:70:f2:a6:a4:9d:d8:d8:72:
61:4e:f5:3a:05:9a:7c:17:9e:86:3a:58:35:ac:21:
28:c6:da:b5:83:f3:33:9e:5a:9f:e7:fd:fe:9b:38:
38:0e:11:3a:d1:66:49:05:27:3a:9c:22:80:98:7f:
8a:a2:59:40:0f:75:33:57:14:41:23:be:f6:4c:36:
dd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AC:C1:27:48:F0:A9:6E:A2:D3:F8:E6:91:B9:91:5B:E0:41:6D:B2
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/WqzBJ0jwqW6i0_jmkbmRW-BBbbI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.108.0/22
Signature Algorithm: sha256WithRSAEncryption
33:30:27:11:17:77:e7:66:43:06:ed:8b:45:58:7b:7c:99:f5:
79:a4:4c:66:74:58:b2:b6:f7:ce:ae:b9:8a:28:54:12:35:6b:
f1:78:ed:da:75:42:66:07:dd:4e:d3:68:21:9a:e0:dd:c1:7f:
b1:14:44:28:f2:64:93:5a:4f:ed:c0:9f:e7:60:91:d1:d9:e2:
07:7f:b2:47:0c:21:18:4c:53:93:9e:97:85:9a:41:71:16:66:
d0:f9:ac:15:e6:06:d3:06:48:99:18:43:df:e0:90:39:bf:21:
7a:ff:2c:23:87:17:b0:59:2f:4d:59:49:7c:c2:49:ad:55:ac:
aa:f0:e6:f9:23:79:2e:81:4b:9f:a2:d9:42:17:c9:cb:7c:12:
c5:41:88:aa:8c:d6:3a:80:99:40:f0:ec:6e:47:be:23:ae:38:
86:e1:d1:88:79:b1:65:f5:66:a7:e5:21:57:7f:26:50:0e:65:
a1:e1:a3:55:32:50:3b:d9:65:87:90:05:b2:3b:77:36:e8:61:
0f:b9:88:58:d3:73:79:5e:f1:19:d1:0f:76:ea:70:43:a3:73:
53:50:97:86:9d:89:01:56:9f:31:d0:39:ab:b4:b5:be:c8:15:
34:63:e8:62:45:c9:04:a8:06:c1:07:1d:e9:68:e7:cf:2d:e0:
fb:32:e4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org