Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/YpCq6t7zbmhuO3M6k18keZXy1Bc.roa
File: YpCq6t7zbmhuO3M6k18keZXy1Bc.roa (raw, json)
Hash identifier: z/u30N1v1BdKo+FPQaQFc6GKL/DWGtrlKleHEXWVtmE=
Subject key identifier: 62:90:AA:EA:DE:F3:6E:68:6E:3B:73:3A:93:5F:24:79:95:F2:D4:17
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0A84
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/YpCq6t7zbmhuO3M6k18keZXy1Bc.roa
Signing time: Sun 07 Feb 2021 11:49:59 +0000
ROA not before: Sun 07 Feb 2021 11:49:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2692 (0xa84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:49:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6290AAEADEF36E686E3B733A935F247995F2D417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:3c:93:f6:e4:d3:7e:32:f2:33:e1:43:92:
a3:a5:f0:1a:80:75:40:90:d7:0f:b3:97:55:81:21:
11:37:8d:e5:cc:d5:86:ae:4c:97:a3:da:6b:93:97:
8b:ed:d6:72:d2:62:62:f6:9e:b1:bc:5c:51:bf:3c:
27:40:e0:ad:ce:c7:c4:c3:57:6e:c0:61:ed:30:69:
9a:0d:6a:b6:cb:de:6b:55:18:1c:86:1d:31:31:bb:
b4:a5:3d:51:27:6f:77:6f:c6:99:6f:4a:d0:89:5e:
fc:a2:dc:3b:8b:7a:09:30:a0:65:3e:81:54:cf:a9:
58:e6:c6:df:00:6b:dd:9a:9b:e4:4d:ab:4a:9b:75:
59:82:05:bd:90:cd:fc:5e:b7:56:80:d2:36:f4:81:
ab:25:37:31:2b:ae:ad:b3:f0:42:1d:ce:1c:06:8b:
73:83:96:ef:bb:a1:7a:eb:86:00:55:7c:02:99:3b:
c5:14:0a:3e:20:07:b0:40:02:91:a2:ff:96:7d:44:
0f:32:7c:13:78:eb:ad:cd:d3:21:59:4a:b5:48:3d:
1e:26:ac:b1:fd:29:14:7c:e7:3f:fb:9a:53:20:1b:
e5:09:b5:40:a1:7f:45:7f:f3:93:b2:a9:91:ea:64:
9d:f8:f3:07:4f:98:b1:3c:f7:3a:78:90:b4:a1:16:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:90:AA:EA:DE:F3:6E:68:6E:3B:73:3A:93:5F:24:79:95:F2:D4:17
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/YpCq6t7zbmhuO3M6k18keZXy1Bc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.232.0/22
Signature Algorithm: sha256WithRSAEncryption
21:03:ea:09:87:92:01:2c:3c:56:b7:63:4c:4e:fc:76:9e:bc:
92:c1:e4:04:37:3c:5d:d5:ff:1d:1f:96:62:8e:d7:62:1c:ea:
d6:ac:a7:70:4f:c2:c1:4e:a7:fa:26:3b:1a:5c:91:e8:c9:b8:
8b:52:11:48:10:67:5e:91:b0:ed:37:0b:eb:e9:28:d3:33:f6:
1c:47:98:25:e4:0f:a6:5b:76:01:a2:e2:d7:3d:b4:16:7b:a7:
90:0b:b6:fd:0b:63:ff:c2:ee:fd:1e:b0:41:ee:18:9b:b0:84:
65:7c:88:7b:f8:1d:73:c2:7d:22:6f:1f:5d:50:36:a1:7e:4b:
4d:cd:b8:53:6c:03:b2:4e:c7:b3:ce:e4:67:20:31:50:9c:2c:
1a:4b:07:57:b8:a1:6e:df:5d:82:c2:c5:15:4c:8a:af:76:f9:
3c:1a:66:7b:03:87:c6:65:fd:48:5e:45:bc:b3:a0:3f:5c:2f:
1e:55:1c:c3:5c:6d:c0:4e:34:6c:13:6d:14:83:e2:f1:17:e1:
9c:ce:a5:f4:25:02:ed:f9:67:47:93:c1:b5:b0:ce:4f:f0:3b:
0a:85:9b:d7:65:8b:26:2c:69:41:37:68:e4:0a:e9:fb:c0:a4:
b3:ea:e0:15:c3:ae:44:84:50:e8:8b:03:c9:38:10:14:3e:42:
fd:21:55:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:52 2025 by rpki-client