Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cJ1yvD-L6pzBo0WFdaWBqtrjEzU.roa
File: cJ1yvD-L6pzBo0WFdaWBqtrjEzU.roa (raw, json)
Hash identifier: IME6GGPScSIqHAQ44IhKotm7GR8LyzjQFlAytfmCc1I=
Subject key identifier: 70:9D:72:BC:3F:8B:EA:9C:C1:A3:45:85:75:A5:81:AA:DA:E3:13:35
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cJ1yvD-L6pzBo0WFdaWBqtrjEzU.roa
Signing time: Thu 15 Sep 2022 02:39:08 +0000
ROA not before: Thu 15 Sep 2022 02:39:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 150.117.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=709D72BC3F8BEA9CC1A3458575A581AADAE31335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:09:06:41:f2:0b:82:b6:df:d0:9c:2b:c1:
dc:16:fa:e4:87:a7:71:16:42:33:6b:20:b0:84:96:
44:ef:ec:e1:06:98:ca:2f:09:4e:c5:e0:2f:d5:27:
25:d7:d6:be:5a:32:54:a6:3a:17:0d:91:ae:b5:18:
d3:47:99:23:33:0a:ac:74:68:1b:82:de:8c:1f:b7:
7e:c4:b8:9c:79:2c:5b:e6:5d:a4:a6:66:f1:4f:d4:
e9:61:6e:bd:a2:76:57:5e:a6:37:a9:66:bc:32:bc:
06:7d:6e:dc:3e:69:6f:7e:c5:3c:4f:47:6e:5c:ca:
f6:5f:85:ef:7f:32:5d:2f:4a:47:77:e0:77:f9:03:
87:2d:8b:06:17:eb:33:00:b7:7e:80:80:03:e9:5c:
a5:ae:5c:a8:72:3d:91:fe:af:5a:59:1b:fd:d9:2b:
84:1c:40:43:2a:54:d0:88:bc:38:2d:92:74:f3:77:
67:65:3e:ce:29:51:40:21:0e:1c:cc:0e:55:b0:61:
9b:84:be:61:53:cd:d4:4e:03:27:2b:22:39:1b:d1:
e6:c3:0d:b2:f5:54:0f:f5:88:56:45:be:17:40:f1:
2d:8e:61:b0:9f:dd:44:c4:31:bd:14:94:62:40:1f:
2c:b8:1a:df:ba:89:76:35:ee:2d:3f:ed:fe:e0:16:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9D:72:BC:3F:8B:EA:9C:C1:A3:45:85:75:A5:81:AA:DA:E3:13:35
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cJ1yvD-L6pzBo0WFdaWBqtrjEzU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.232.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:3f:b2:56:5c:78:e9:d7:ef:a1:a2:d3:96:41:f2:8d:2d:8a:
4e:fd:d0:e0:4a:a7:3b:8c:47:cd:a4:0b:a7:57:dc:0f:f9:8c:
6a:86:4e:c6:75:29:50:be:b6:39:ee:ab:f9:26:c9:3e:9b:2a:
c6:4d:c4:70:a3:0c:4b:40:28:35:46:84:b9:af:71:3a:bf:ac:
0d:4d:45:a8:51:ee:c7:00:cd:b5:af:45:d9:c4:e8:b8:c3:6e:
b9:33:46:ca:4b:b7:84:0a:ae:e7:54:fc:e0:4b:f8:a5:e4:30:
89:38:72:0f:fc:5c:44:f0:fe:50:b0:e9:7f:a5:98:79:0a:12:
aa:4c:50:46:f5:db:60:47:d4:2b:3d:bd:1f:0f:47:bf:56:19:
d7:72:50:2e:98:85:fa:12:c3:78:97:58:2b:2c:ea:2b:bd:1b:
86:60:29:1e:19:08:da:1b:63:72:f4:54:27:b6:6d:5a:79:9b:
0c:db:f9:9e:40:2c:d8:ae:3a:c4:f7:35:df:29:57:dd:3b:ae:
8e:f3:cb:1c:98:cf:c7:54:72:39:2a:ec:7a:40:9d:a6:f9:b5:
03:6e:a5:e5:92:76:6b:3d:71:d2:e3:1d:4d:4c:70:78:0a:cb:
c6:82:f3:da:07:ae:9b:9b:61:2f:f4:f5:c3:4c:96:b0:15:a2:
44:fd:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org