Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dgQHnNtBe9qIerLPb8SkOgoV9XY.roa
File: dgQHnNtBe9qIerLPb8SkOgoV9XY.roa (raw, json)
Hash identifier: 0nFWldcz3vcJpwWj1ssRVbWTBYUymvvJvqF/gP2TFiw=
Subject key identifier: 76:04:07:9C:DB:41:7B:DA:88:7A:B2:CF:6F:C4:A4:3A:0A:15:F5:76
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DD7
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dgQHnNtBe9qIerLPb8SkOgoV9XY.roa
Signing time: Thu 29 Dec 2022 09:31:55 +0000
ROA not before: Thu 29 Dec 2022 09:31:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 150.116.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3543 (0xdd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:31:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7604079CDB417BDA887AB2CF6FC4A43A0A15F576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:64:74:ba:b7:25:b3:49:b4:19:73:fe:09:
d0:67:24:47:f6:7b:9d:4d:44:1e:50:35:2a:fd:a6:
67:b5:3e:1b:64:04:52:92:b4:59:73:68:1c:55:a6:
74:08:ed:aa:b1:56:7b:c3:d0:01:47:ce:6f:02:b5:
45:75:cf:6f:bb:78:78:4f:84:68:7a:ad:5b:3d:6e:
a0:c6:01:d1:fb:b0:08:86:9e:62:a3:a2:b4:c4:25:
3f:06:d4:b8:79:0f:2a:50:ea:7a:3c:8c:53:66:70:
ea:68:17:fc:6e:a3:f1:e0:9b:55:fb:74:65:28:fc:
0f:b1:b2:9f:ed:54:cb:c1:ed:d7:5b:73:6c:3c:76:
6b:d6:c2:95:17:dd:08:f3:9b:ce:55:ef:03:69:e9:
3d:d0:c8:72:1c:0e:3e:d0:0c:b1:4f:f9:e2:f2:f6:
dc:9a:38:c0:95:99:0a:99:62:32:73:9c:0a:6d:1b:
45:61:1e:ba:5b:a5:8e:74:25:3a:3e:1d:c5:85:19:
7b:d3:67:eb:92:14:61:61:71:7f:30:b9:cb:6e:86:
03:30:c5:37:cc:c3:c8:c7:cc:b7:b8:e3:51:8b:87:
3c:90:44:7b:c1:96:55:c4:93:46:c1:fe:26:60:9b:
63:0b:a8:32:f9:00:54:6c:e3:8b:ae:f4:5b:31:ae:
0f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:04:07:9C:DB:41:7B:DA:88:7A:B2:CF:6F:C4:A4:3A:0A:15:F5:76
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dgQHnNtBe9qIerLPb8SkOgoV9XY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.239.0/24
Signature Algorithm: sha256WithRSAEncryption
72:0a:4a:68:a8:98:25:d4:11:70:4d:06:0e:2c:39:87:7f:5d:
22:ed:e1:c0:b7:0f:10:8b:69:83:da:d6:3a:3a:08:bf:71:2e:
d9:e4:eb:02:8c:bc:69:32:d4:d4:63:93:6e:db:26:a9:56:7a:
53:6c:51:04:66:fb:db:8a:86:cb:d0:31:89:91:73:da:13:73:
a4:bf:b7:ad:64:81:6a:46:dd:08:04:fc:24:05:c7:36:01:4c:
b3:78:dc:51:ed:67:92:3f:45:9c:42:c3:1a:fd:c6:29:37:89:
66:a4:c0:80:72:de:94:a0:a6:86:13:b9:02:6c:e7:f9:2c:a8:
61:79:aa:14:dd:5b:f8:3a:f4:c3:68:dd:75:f6:93:82:a6:c3:
e1:f5:65:83:86:99:f6:e5:43:00:7c:dd:49:66:ac:a6:14:bd:
ab:d0:17:25:91:30:31:e7:d8:83:e2:69:21:08:4d:ef:1f:57:
ff:ba:52:0c:ff:93:0f:ff:a2:a4:2e:7e:c6:f4:ba:ba:0c:52:
90:25:69:ce:db:05:69:cb:51:ee:a3:5e:40:0c:2e:e6:aa:19:
4c:96:04:9f:76:c7:6a:d8:55:6e:ea:e8:4d:b5:37:e2:26:46:
0e:98:98:9c:dd:46:3a:d8:e5:af:b0:f8:fe:63:c3:a8:f7:70:
5d:41:66:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org