Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dIZyfqcs3q1Ur_C0R4rntweSOVA.roa
File: dIZyfqcs3q1Ur_C0R4rntweSOVA.roa (raw, json)
Hash identifier: 1fvP+ozINxwuvRrWTZwGWLEcCMs7GJhvnXTv9zSqNRU=
Subject key identifier: 74:86:72:7E:A7:2C:DE:AD:54:AF:F0:B4:47:8A:E7:B7:07:92:39:50
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DFB
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dIZyfqcs3q1Ur_C0R4rntweSOVA.roa
Signing time: Thu 29 Dec 2022 09:32:06 +0000
ROA not before: Thu 29 Dec 2022 09:32:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 223.26.68.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3579 (0xdfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7486727EA72CDEAD54AFF0B4478AE7B707923950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7b:74:a8:e8:ab:18:ae:ba:c7:6a:00:3a:bf:
13:a3:e6:c2:a3:27:88:e6:0f:19:49:75:2e:9c:66:
57:0b:f4:e5:ef:9f:5b:30:72:6f:5e:31:16:a2:ed:
29:7d:db:5f:0c:1e:7e:33:8d:7a:a1:d4:ea:54:c8:
75:f4:ed:db:02:a9:0a:e0:cc:fa:8c:01:22:93:17:
76:0f:1a:5d:fc:db:47:63:63:10:e8:03:75:eb:b0:
af:d3:81:ca:68:bf:62:0f:9e:85:62:bc:b1:99:63:
02:d7:20:3e:8c:77:9c:ae:c8:fd:8b:3e:00:e1:0f:
e3:2e:6c:a0:52:7a:a1:0a:28:dd:b3:7d:2e:07:c1:
5a:0c:4b:e2:b7:91:91:15:eb:e9:3f:61:12:d8:e1:
f8:c2:3f:ef:2c:1b:99:bc:14:f3:df:5e:b6:31:5e:
52:93:07:e8:63:fd:6c:c3:d6:89:5c:bb:05:78:b7:
f0:0a:c1:a8:7f:0f:d5:8e:1f:1f:c0:c1:f2:54:46:
91:52:03:50:a1:a5:55:49:2b:ce:d5:88:76:1b:bb:
70:59:ee:42:63:62:b4:b9:d4:c3:b0:ae:7b:4f:1f:
09:68:8d:3c:07:4b:e8:f8:31:33:ae:3c:dc:b0:bc:
10:cb:b4:12:3b:21:61:b4:82:2d:4b:9d:9a:a9:6e:
b5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:86:72:7E:A7:2C:DE:AD:54:AF:F0:B4:47:8A:E7:B7:07:92:39:50
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dIZyfqcs3q1Ur_C0R4rntweSOVA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.68.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:f7:06:ef:c6:31:ea:9a:bf:26:c9:67:70:cb:d5:a8:44:fa:
8e:1c:82:ca:e4:62:cf:e5:8c:ff:58:7b:48:2c:35:76:c3:37:
67:8e:a7:b8:38:26:50:fb:96:6a:7d:04:9a:f3:e0:f3:32:8c:
e2:3b:8a:0e:ec:53:ac:33:54:38:c3:18:57:b6:0c:7e:74:24:
b1:6a:09:63:05:98:d8:5b:67:1f:ae:b0:c6:4e:e0:ba:49:83:
6f:80:5d:cd:a0:17:29:ec:a3:d4:86:79:d5:6a:94:bb:d2:f9:
a7:a6:52:84:b3:66:c5:4d:b4:1b:b6:7c:38:35:aa:fe:60:f6:
a0:29:b3:b5:de:f0:20:6a:83:b1:40:26:55:1c:2b:eb:ba:97:
14:0a:14:6a:74:18:b8:e1:34:71:b6:8d:36:4a:33:e7:5b:78:
ba:e9:ef:9f:27:3a:99:d2:47:56:2b:95:4f:63:da:8a:3a:8e:
9c:46:04:ed:54:74:bb:9a:70:06:fe:62:f1:e6:b9:de:6a:4b:
4a:ff:89:92:5f:1f:79:d7:c3:64:e6:76:26:2a:c0:7b:26:aa:
70:79:c3:45:05:01:df:f0:8b:d4:c6:67:25:c5:46:66:79:4b:
70:c5:f8:6e:74:f6:e1:cc:b1:0e:cc:6d:91:b3:b6:b6:6b:97:
53:a3:b5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org