Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/WsXWCcyNa1xKHZjqaCz1ClTO4TQ.roa
File: WsXWCcyNa1xKHZjqaCz1ClTO4TQ.roa (raw, json)
Hash identifier: UOv0jBXx2oT4Y38ftFMaxn+GB5vWlDthQSc9ZMRRB5o=
Subject key identifier: 5A:C5:D6:09:CC:8D:6B:5C:4A:1D:98:EA:68:2C:F5:0A:54:CE:E1:34
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0888
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/WsXWCcyNa1xKHZjqaCz1ClTO4TQ.roa
Signing time: Tue 29 Sep 2020 10:02:35 +0000
ROA not before: Tue 29 Sep 2020 10:02:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18419
IP address blocks: 118.150.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2184 (0x888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:35 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5AC5D609CC8D6B5C4A1D98EA682CF50A54CEE134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:49:af:92:d4:89:b8:31:d9:fd:ec:d3:ca:
1b:63:63:b9:af:91:2e:21:18:c5:36:74:be:81:0c:
ff:2c:65:c4:60:ea:d6:c8:ed:3c:64:69:0b:b0:19:
9e:80:38:1b:d7:dc:3b:43:47:58:b7:1e:65:ad:13:
e3:af:5e:df:7b:61:10:38:0d:2e:8a:e4:f0:d7:21:
fd:ed:ad:c1:26:82:5a:a2:e7:7a:1b:e5:bc:22:c0:
b9:98:f1:1b:06:ab:d9:e8:ba:77:42:c9:30:0f:68:
29:d7:ae:c4:9b:c4:0a:68:a4:dc:2d:67:9f:a5:fe:
9b:fc:aa:90:c2:ec:16:90:d6:3b:86:09:22:c1:ea:
57:cc:e3:44:af:7a:2b:ac:81:be:6b:42:e6:80:79:
96:46:41:83:45:05:64:a6:2c:cf:ca:bb:f4:fe:a5:
4a:13:83:55:8a:7e:81:6e:fe:82:32:26:97:d4:2a:
6f:b0:ab:8e:cf:bf:e4:7a:4d:95:1d:72:18:bf:db:
f7:b6:8f:f8:92:82:9d:3a:6d:db:fb:0f:fd:98:86:
bf:db:b4:3d:ce:53:77:a7:97:1f:ea:0e:cf:06:89:
43:82:1e:4a:1d:35:da:68:29:c3:a2:f9:e3:47:20:
7d:d6:2f:0d:cc:16:37:22:ed:c4:c8:91:20:1c:87:
54:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C5:D6:09:CC:8D:6B:5C:4A:1D:98:EA:68:2C:F5:0A:54:CE:E1:34
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/WsXWCcyNa1xKHZjqaCz1ClTO4TQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.232.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:d2:11:e1:75:d6:ef:fc:9a:c5:80:22:44:4c:c9:f4:d9:fc:
1f:27:ea:87:ff:dd:61:9e:7e:c5:3e:ae:72:00:66:96:ef:a8:
0e:80:48:31:85:56:1e:c3:7a:9e:45:5c:e3:01:6d:15:fd:30:
5f:be:de:0f:3a:88:28:e8:9e:35:1e:0c:de:c7:88:a9:6a:ba:
7a:08:2e:66:47:f5:be:b3:24:0c:95:f1:9c:90:00:6c:d4:65:
60:0f:4d:1a:6d:a7:58:db:43:c4:94:79:90:4a:bc:a1:5d:5f:
36:79:f6:31:25:03:a1:a8:49:5b:2c:3b:32:c1:25:ef:f2:cd:
87:04:27:b5:a5:ef:bc:aa:2d:22:0c:ab:51:20:94:dc:49:63:
36:1c:95:0c:81:a1:c3:21:93:f9:7c:c8:1a:c9:f1:9b:94:e0:
f9:5a:e4:74:71:d0:04:88:a8:8b:0f:64:a7:98:c3:2c:7f:5c:
29:36:d8:df:d2:8b:a5:a5:c2:fb:40:d7:01:49:6f:0d:92:71:
1b:59:2b:24:97:ab:17:72:d3:07:01:ab:4b:6c:98:fa:58:48:
d1:b3:e4:fb:6c:3e:36:6d:6a:97:5c:b8:95:d6:3d:fa:b4:74:
a9:32:3b:b4:3d:be:f3:50:a0:4c:4f:47:ea:ea:dc:4f:d2:45:
e9:fe:e8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org