Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/bWafrK3bavtUT6hmvRCggBRI29k.roa
File: bWafrK3bavtUT6hmvRCggBRI29k.roa (raw, json)
Hash identifier: zGFJgab4Z2vhsgk+MXqYIgX8W+LjRgsOdIXM5EAuZVY=
Subject key identifier: 6D:66:9F:AC:AD:DB:6A:FB:54:4F:A8:66:BD:10:A0:80:14:48:DB:D9
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0EB3
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/bWafrK3bavtUT6hmvRCggBRI29k.roa
Signing time: Fri 07 Jul 2023 02:25:55 +0000
ROA not before: Fri 07 Jul 2023 02:25:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 63199
IP address blocks: 150.116.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3763 (0xeb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Jul 7 02:25:55 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6D669FACADDB6AFB544FA866BD10A0801448DBD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:cc:0d:ad:e3:18:ec:cb:73:6b:f4:c1:1d:
04:a0:7b:94:bb:a1:c6:ba:e7:11:bb:bf:7f:25:7b:
37:35:12:d1:f9:64:bf:85:78:24:23:ca:83:ac:45:
75:e1:6a:ce:5e:b2:03:5d:df:e9:88:bc:e7:ff:74:
bd:d6:d8:d6:3c:47:5b:91:9b:5e:fd:d4:2f:d2:d7:
36:6e:e4:ae:26:02:1e:5a:5f:0f:50:1d:77:86:0a:
52:c7:0d:e3:a2:a9:b6:4f:1f:6f:db:ed:f6:9f:e9:
cb:f5:45:48:04:9b:88:04:f8:c8:82:25:6b:13:84:
d2:8a:2a:f1:2b:fb:dd:6c:7d:53:ab:37:a3:4b:7a:
71:86:34:b0:59:7e:d3:58:60:cf:62:eb:e8:90:3a:
80:44:44:99:c2:d2:3f:52:e4:f3:c0:b9:69:e9:92:
8e:73:c4:56:e2:e9:dd:93:4d:58:fc:fd:49:60:f5:
e0:68:55:83:37:50:f2:73:74:93:80:63:d2:dc:65:
91:5c:16:63:f6:88:56:fb:9b:bd:1c:48:b5:0e:9d:
24:72:ea:a3:e9:9d:fa:15:5f:1a:11:8a:0c:dd:f4:
a5:5f:d5:ba:32:aa:ac:16:43:9f:b8:a5:fc:2e:d5:
d1:18:da:87:a7:1f:ce:91:50:a8:01:bf:49:3b:57:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:66:9F:AC:AD:DB:6A:FB:54:4F:A8:66:BD:10:A0:80:14:48:DB:D9
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/bWafrK3bavtUT6hmvRCggBRI29k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.1.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1c:f4:99:55:01:14:34:70:41:d3:49:56:f9:42:dc:c0:89:
99:bf:0c:15:db:f4:d6:90:92:c5:02:2d:b9:d2:4b:0c:0a:50:
e6:7f:1c:a3:aa:38:58:49:20:52:5a:da:7b:bc:b1:6c:6e:e8:
ce:c7:48:51:4e:96:b5:79:3a:3c:60:8e:9c:59:00:8e:3f:78:
e1:b1:e6:02:aa:08:e4:63:52:57:31:7c:b0:a1:c2:18:3f:67:
83:54:ea:2f:42:ce:ff:ca:c2:78:cf:31:b3:32:16:aa:f8:a0:
53:1a:e7:03:a7:2c:a8:dd:48:1f:88:84:b1:ec:2b:53:54:d4:
aa:9b:51:c6:23:18:4e:a1:10:22:c6:6d:c4:2f:d1:ba:f4:3b:
7f:9f:2d:78:e3:57:7a:78:ef:3f:f4:b3:42:2b:52:13:d1:64:
52:20:62:45:3c:1c:e3:53:43:5d:45:5b:dd:41:fe:aa:d4:f4:
43:6f:7a:cc:f9:de:73:67:1d:85:ba:d0:01:4f:a7:49:66:36:
55:3d:b3:fa:1d:75:43:0b:1e:75:7d:aa:a2:43:fb:13:06:e1:
a8:15:60:c9:3b:32:c7:75:ae:6f:15:1c:06:55:c8:e2:5e:32:
08:bf:be:8b:d6:05:6d:46:c6:aa:80:43:b7:fa:5c:59:8d:23:
7a:dc:73:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org