Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/aYEG46C4Sr2AwXxAroBGsiGP0eQ.roa
File: aYEG46C4Sr2AwXxAroBGsiGP0eQ.roa (raw, json)
Hash identifier: VRj7OwNCJUPWiJE21NMXjtYyFVf/y+3Rf63L7upPWV8=
Subject key identifier: 69:81:06:E3:A0:B8:4A:BD:80:C1:7C:40:AE:80:46:B2:21:8F:D1:E4
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DB8
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/aYEG46C4Sr2AwXxAroBGsiGP0eQ.roa
Signing time: Thu 29 Dec 2022 09:31:46 +0000
ROA not before: Thu 29 Dec 2022 09:31:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 223.26.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3512 (0xdb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:31:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=698106E3A0B84ABD80C17C40AE8046B2218FD1E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:fb:7f:1e:84:3b:53:17:bb:24:01:8f:c4:
1d:66:52:15:62:e1:14:a0:0c:f3:96:d5:2b:5c:bc:
ba:e1:a7:47:31:3e:e7:13:6a:71:a3:ff:99:9b:62:
69:0d:77:d5:d1:b0:50:17:93:d7:03:f3:ed:48:14:
27:33:b9:7e:e3:f8:90:41:4c:16:45:cd:d2:4a:d6:
8e:b1:55:c6:92:4f:3c:73:27:cf:1f:2a:4f:ea:4e:
ea:13:40:ae:a6:03:87:4b:9f:00:cf:d8:3e:af:82:
62:2a:8d:7a:b2:d2:c1:44:55:1d:1c:3c:5c:b6:3a:
eb:86:50:67:b9:84:d4:85:c4:56:99:d3:63:c5:35:
4a:c9:82:f0:d8:75:a4:8b:c5:42:a5:b4:7d:1d:ff:
49:61:da:29:d0:07:99:9a:13:00:59:94:02:d9:ce:
f9:84:65:c8:1b:d9:0e:28:65:c7:24:da:b7:bb:3e:
bf:4a:a1:62:f5:f7:00:bb:37:e7:e9:a8:4c:8d:80:
a8:19:67:f1:7f:de:50:25:63:f4:5a:50:bc:fc:79:
78:99:42:69:dd:db:c5:3c:5e:bd:01:30:47:5e:c8:
18:8c:41:57:29:55:dd:26:5a:ad:d1:53:5f:9a:0a:
0b:75:d2:fe:f9:89:83:ca:e2:70:86:c7:b1:5f:8c:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:81:06:E3:A0:B8:4A:BD:80:C1:7C:40:AE:80:46:B2:21:8F:D1:E4
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/aYEG46C4Sr2AwXxAroBGsiGP0eQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.108.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:6e:06:5b:f9:08:9a:91:29:29:e1:4c:b6:17:00:d3:ff:0c:
7f:68:62:67:16:cb:d8:ac:4c:f0:0d:55:79:3a:c5:87:df:1b:
6d:50:20:3a:48:09:0d:55:31:17:32:75:7f:e1:74:4b:7a:6d:
4d:b6:fa:21:f7:f1:84:c1:b4:b8:b9:cf:58:7d:c2:0a:ca:1b:
0c:6f:33:16:4b:2e:aa:7b:c8:5f:0e:1b:7c:f1:57:7b:fa:4b:
49:85:cb:44:81:18:49:20:92:82:60:15:44:11:ef:c5:45:4c:
6e:f9:f2:8d:be:32:e7:6e:d7:ac:54:0c:92:a9:ce:47:03:9e:
f6:80:eb:20:10:ef:41:2f:62:92:b4:5b:1d:dc:fc:7f:6c:18:
69:45:7a:97:b8:94:6c:9b:ee:83:d8:9a:f8:40:f8:2c:2f:56:
9b:ec:f9:2f:b2:92:ba:ca:43:57:b7:cb:0b:48:7e:97:57:ca:
69:42:8b:5d:0e:bd:c7:e1:77:35:86:58:09:af:99:6b:0b:a5:
3f:66:54:dc:d4:ab:2a:bc:7a:b0:0c:0f:4e:c5:d8:b2:f3:0c:
06:8a:33:8b:8f:9c:95:5f:e7:c4:c8:18:39:05:fe:76:4a:f7:
86:27:ac:cc:41:ae:a2:48:bb:e2:53:c2:c6:70:d1:33:3a:e6:
01:ca:8f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org