Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cHcBcoYNJXw9Ou8OW_sWfVpe6z0.roa
File: cHcBcoYNJXw9Ou8OW_sWfVpe6z0.roa (raw, json)
Hash identifier: obHGz7i6nqubeXNA5g+E0rOdTJXUyP7J+hIxoJEYQqc=
Subject key identifier: 70:77:01:72:86:0D:25:7C:3D:3A:EF:0E:5B:FB:16:7D:5A:5E:EB:3D
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C1F
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cHcBcoYNJXw9Ou8OW_sWfVpe6z0.roa
Signing time: Wed 29 Sep 2021 02:39:03 +0000
ROA not before: Wed 29 Sep 2021 02:39:03 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131607
IP address blocks: 150.117.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3103 (0xc1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:39:03 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=70770172860D257C3D3AEF0E5BFB167D5A5EEB3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:da:e4:ce:b7:88:32:f4:32:37:08:97:49:
47:54:d1:70:ee:3c:3e:73:3c:d8:9c:76:2f:2b:52:
1a:c3:29:64:f6:28:e2:1f:f4:de:c0:f7:6c:49:5c:
3a:71:b7:c3:50:e0:20:d5:84:49:e2:fa:73:f8:13:
88:57:04:d3:8f:86:95:bb:22:3b:7c:3b:41:1f:71:
13:92:35:cf:e6:f3:9b:c4:9c:19:3c:d4:dc:53:7c:
d2:8a:15:bf:3a:ea:45:de:17:e2:e8:c7:cf:b4:e5:
8a:e8:2d:55:4c:df:4a:2f:be:0f:fc:07:6f:b9:7b:
4a:a3:d3:28:e5:81:8e:2d:58:ba:88:82:42:61:b5:
62:31:80:d8:fe:a0:8a:15:91:e3:b8:d9:f1:b0:0d:
87:86:75:00:de:a7:5e:00:55:7e:d2:28:cc:11:27:
79:20:b9:fe:1d:60:15:93:17:34:46:00:e8:7d:74:
6a:f9:a9:d8:04:ca:4b:1f:2e:e3:21:f4:24:a0:c3:
56:51:f5:7f:5c:70:59:74:43:cd:69:f9:27:7a:7f:
13:4a:85:45:78:90:42:ea:a3:19:dd:83:8c:84:48:
21:d2:4c:05:83:bd:92:b4:40:a0:7d:e2:e0:9f:be:
ee:05:dc:30:37:f7:30:1b:8d:80:43:be:7f:96:a6:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:77:01:72:86:0D:25:7C:3D:3A:EF:0E:5B:FB:16:7D:5A:5E:EB:3D
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cHcBcoYNJXw9Ou8OW_sWfVpe6z0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:98:13:e4:5f:bb:5b:86:7d:0f:d7:6a:49:2c:7a:80:f3:7b:
f0:3a:57:25:d9:e2:3c:80:91:bc:83:ba:59:a9:35:a8:91:14:
df:01:a4:a2:90:0d:47:0d:3b:7f:41:3c:e6:38:d1:1e:85:a1:
98:fc:06:a0:84:9c:cc:bc:4f:43:91:09:66:ca:ab:2d:c2:1b:
87:05:88:8e:d0:f5:b6:bf:15:83:ce:48:ba:bf:ab:2c:8c:0d:
dd:95:45:e2:d7:cf:7c:98:fc:ea:17:a7:87:e2:ba:e6:d9:e7:
38:9c:96:31:81:22:b9:b9:58:34:03:25:d5:b7:fc:5b:b8:61:
a6:f4:3c:56:26:6a:f8:59:a9:c5:e8:36:d0:8f:25:f6:c4:1c:
15:b9:a4:25:50:88:a4:f3:09:92:b8:1a:09:bd:41:87:48:3a:
e0:5e:8a:7a:83:ee:64:82:a8:f5:89:3f:29:ae:4e:72:de:19:
3e:ee:68:58:fb:1e:6f:ef:4d:04:31:51:1c:36:c1:49:e2:11:
72:69:2a:f3:e7:26:fd:40:8a:85:a3:75:e5:4b:69:4f:04:2d:
fd:b6:9d:77:4e:7a:74:c0:f5:9a:00:a4:d1:ea:ea:27:b2:05:
9f:cd:60:e1:a4:7c:1a:08:00:42:92:e9:52:ab:9d:7c:0b:11:
e9:6f:f9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org