Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/bOM2P9q5rEWQQfdLZsUW_dFlzOo.roa
File: bOM2P9q5rEWQQfdLZsUW_dFlzOo.roa (raw, json)
Hash identifier: 9Q1xT8dlA+bkY/QuqkLpHsfXoCsaxSgvtZCmbtonO8Y=
Subject key identifier: 6C:E3:36:3F:DA:B9:AC:45:90:41:F7:4B:66:C5:16:FD:D1:65:CC:EA
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E0D
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/bOM2P9q5rEWQQfdLZsUW_dFlzOo.roa
Signing time: Thu 29 Dec 2022 09:32:10 +0000
ROA not before: Thu 29 Dec 2022 09:32:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131273
IP address blocks: 150.116.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3597 (0xe0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6CE3363FDAB9AC459041F74B66C516FDD165CCEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:18:0f:cd:1e:ab:ca:01:a5:dc:95:e4:88:
2f:b2:b5:58:fe:74:eb:8f:03:12:f8:59:8b:63:9e:
41:05:2e:99:37:e2:63:21:cd:00:8b:ca:da:89:c3:
34:52:24:92:eb:f8:55:b7:27:a3:31:4e:01:e9:7f:
71:33:70:b1:e7:1f:a1:69:8f:f7:08:83:41:dc:ab:
53:c2:a0:78:a3:1b:82:ba:0a:81:f9:ba:b6:de:75:
57:c0:05:c5:43:31:a9:ed:7a:1d:42:96:9b:1e:e4:
de:62:f1:db:8c:91:e6:5f:86:57:f9:58:82:c2:b0:
6a:ed:7e:ee:80:84:b0:e2:37:27:f2:04:4e:1c:12:
99:20:c4:7c:f2:b5:ce:fb:46:57:4e:83:45:04:f4:
b3:be:a2:94:92:29:54:66:0c:e9:13:5f:b2:21:a2:
44:6f:5b:37:67:ea:df:73:b4:ce:ce:64:95:29:13:
ea:2a:a5:db:bc:22:2a:af:a8:4d:50:9f:cd:df:53:
fa:dc:64:be:54:37:07:69:b5:e3:3a:8f:6c:10:4c:
1e:6d:d7:c2:e6:32:87:f8:a8:cd:81:33:b8:6c:32:
41:ea:7e:6c:55:63:eb:af:d8:0e:d9:bd:03:aa:22:
32:61:53:73:fc:b7:c1:ac:39:f1:3d:d0:60:85:a9:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E3:36:3F:DA:B9:AC:45:90:41:F7:4B:66:C5:16:FD:D1:65:CC:EA
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/bOM2P9q5rEWQQfdLZsUW_dFlzOo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.80.0/24
Signature Algorithm: sha256WithRSAEncryption
42:52:df:57:ac:67:51:4d:2f:6c:da:8d:38:bf:59:89:d6:51:
f1:e0:c4:d7:3a:e2:9f:2c:82:a0:57:34:73:47:03:f8:ad:2b:
89:58:95:db:28:ba:7c:2d:93:d3:a6:dd:1f:06:ae:26:f6:dc:
23:c9:f1:df:62:6f:68:5e:5c:52:d4:78:19:3f:fd:80:ce:3c:
33:c3:59:2c:07:c2:62:93:5c:cb:5c:77:d8:e5:55:36:97:a3:
3e:2d:0e:9f:3b:a4:ec:22:83:bb:7d:11:45:b4:b0:3e:ac:f1:
2c:4f:11:3a:0f:14:b1:50:01:6a:90:5b:d0:14:3e:c8:9a:a8:
dc:9c:8c:2c:f6:03:39:6d:43:e4:21:1f:94:34:0c:d3:5c:fd:
0b:cf:36:5d:39:a7:23:cc:bf:4b:95:9e:84:c5:5a:d1:d7:2d:
4b:c3:ee:1b:25:a4:7f:64:d2:be:a4:c4:fe:cd:66:0b:cd:2b:
3c:e5:26:c5:87:ef:52:a9:62:5a:73:e1:7c:26:a5:38:6c:60:
fb:18:f7:67:fc:9c:ea:aa:b5:bd:17:bd:5e:4d:12:a6:a9:e5:
b5:8c:5f:c2:21:41:cf:5a:93:1b:2d:6e:80:6c:15:02:34:e2:
71:96:bc:58:c3:3f:39:4c:c4:38:79:2f:ad:af:bb:9b:ba:65:
1a:c4:4c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org