Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Yr8F1YmUxG6nPLGHqTPkTfbhoIk.roa
File: Yr8F1YmUxG6nPLGHqTPkTfbhoIk.roa (raw, json)
Hash identifier: Ih8HC4X8ektUVb2WK5XINt/0Ap8TT3Gm0dzpRn7JYww=
Subject key identifier: 62:BF:05:D5:89:94:C4:6E:A7:3C:B1:87:A9:33:E4:4D:F6:E1:A0:89
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Yr8F1YmUxG6nPLGHqTPkTfbhoIk.roa
Signing time: Thu 15 Sep 2022 02:39:25 +0000
ROA not before: Thu 15 Sep 2022 02:39:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 150.116.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=62BF05D58994C46EA73CB187A933E44DF6E1A089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:93:f4:2a:9a:e0:1c:b8:23:e6:a2:1e:73:
ef:ba:20:3e:f8:93:5b:70:b1:60:fa:07:5c:67:94:
04:12:ef:f7:d8:c2:c5:d2:a0:74:13:a4:e5:05:9d:
d7:a9:5e:d7:a2:17:54:65:d3:42:72:da:4e:f0:1f:
4d:e7:7c:6e:65:11:9d:2c:29:c6:cd:f4:d8:01:6c:
56:e9:fd:08:91:73:ae:d9:ce:93:6e:82:5d:0e:81:
b9:d0:23:67:f7:b0:c5:12:cd:fd:4f:51:69:ee:d7:
b9:65:06:b3:10:bf:9b:df:f0:b7:59:bf:58:3e:37:
e7:83:e7:c9:d5:b4:3b:51:1f:1a:bd:7f:ea:39:3c:
22:76:13:91:17:2b:b7:3a:67:40:e1:a8:72:f2:77:
f1:84:f4:11:23:5e:55:21:d2:ab:3a:4f:74:7e:f7:
75:16:52:aa:b9:6b:20:6e:23:aa:9a:bf:3d:77:a2:
74:7b:24:db:ea:45:d5:57:b1:27:f3:2b:e7:82:24:
96:c0:b0:81:45:2c:43:18:ab:c5:39:64:05:d7:34:
84:73:83:41:31:11:11:79:b2:50:a6:5d:9e:98:8d:
ac:3e:91:1e:2e:70:c8:5f:ee:c9:0a:8a:51:33:4d:
bd:16:d6:83:cf:93:2b:f0:fa:18:1c:18:e6:fa:53:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BF:05:D5:89:94:C4:6E:A7:3C:B1:87:A9:33:E4:4D:F6:E1:A0:89
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Yr8F1YmUxG6nPLGHqTPkTfbhoIk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.160.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:c3:0c:45:ec:8e:79:24:b4:27:0d:c9:55:7b:ac:a1:46:eb:
4d:9d:b8:95:0b:4c:d9:32:19:00:35:bc:f4:fe:22:2c:cc:8f:
e7:e3:7c:91:2d:dc:8e:84:17:5c:f7:d3:a7:5e:ac:41:2e:d7:
c3:a8:02:c5:e4:54:b2:d6:3b:cd:ed:16:2a:c6:50:ff:d0:5c:
c5:ee:22:5b:88:85:4d:db:85:6c:a0:af:81:c2:c0:f6:d3:e5:
62:a6:aa:bf:b7:6e:0a:77:de:32:97:ac:d7:eb:2b:bf:68:40:
ca:ce:43:07:c1:fc:74:64:06:f8:86:09:32:90:a3:4b:fd:01:
40:7a:21:8b:9b:f5:e1:f8:4a:82:92:aa:07:99:ad:53:75:a6:
5e:87:d9:06:18:66:c3:fd:c0:61:47:31:2f:46:7b:ad:c1:32:
e8:91:4f:0d:79:72:1a:98:71:97:a0:37:15:8c:1c:1f:5b:7f:
32:99:cc:b5:5d:d4:47:73:f1:98:3a:5e:65:2f:51:8f:7e:60:
96:88:15:a1:c1:51:73:87:aa:88:b9:b4:90:6a:e3:b7:4c:fb:
67:79:e5:0a:b0:1d:29:70:54:32:ad:5d:92:e1:37:34:bc:61:
30:21:f4:41:3e:7a:47:8e:33:20:8f:a4:2f:09:45:88:dc:82:
3c:4d:51:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org