Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dy-2HLph1t7Cbd64DPW5XajQ9p0.roa
File: dy-2HLph1t7Cbd64DPW5XajQ9p0.roa (raw, json)
Hash identifier: 5oX0/bQ8SZ6HqfXLy5jzWo63nRhIOEAruqklB4HA+1A=
Subject key identifier: 77:2F:B6:1C:BA:61:D6:DE:C2:6D:DE:B8:0C:F5:B9:5D:A8:D0:F6:9D
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dy-2HLph1t7Cbd64DPW5XajQ9p0.roa
Signing time: Thu 15 Sep 2022 02:39:06 +0000
ROA not before: Thu 15 Sep 2022 02:39:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 113.21.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=772FB61CBA61D6DEC26DDEB80CF5B95DA8D0F69D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:a9:00:c9:0b:57:53:d8:65:b4:ff:3e:de:
5d:32:2e:09:f6:1d:cd:5f:ba:e6:54:25:ac:25:cf:
c0:f5:4d:b2:ca:3d:7e:ca:ff:90:49:6d:52:d4:ff:
60:f2:90:6e:e9:bf:9f:6c:53:cc:6c:4f:62:dd:a3:
c4:d7:49:80:3c:09:a5:dd:4c:64:c8:28:52:88:65:
f3:f2:4d:87:65:39:50:23:4f:8c:12:59:43:53:be:
36:7a:20:15:f8:de:52:df:01:d4:d0:4a:b3:38:b6:
54:e3:e0:2d:37:ce:d8:78:1a:1e:86:bf:a1:31:04:
c8:58:cc:10:e5:aa:69:50:c0:18:a6:8c:34:62:12:
cc:0b:20:0f:7e:81:5f:76:ca:65:02:3f:ac:40:d3:
1b:a8:8d:cb:f8:6c:e0:9d:c3:78:13:bb:18:e7:c9:
e0:fe:fa:df:e5:27:16:a8:9a:d0:38:6c:58:e3:88:
7c:42:dd:39:d5:df:49:3b:20:a3:98:80:e5:46:d8:
f2:7a:c7:69:92:38:76:5e:fc:be:62:95:b2:99:69:
01:ed:1d:22:3a:bd:fd:90:b7:4c:b6:28:56:13:2d:
a8:50:03:14:1b:50:b9:6f:d5:36:c2:88:a7:2a:6f:
43:ac:f4:6b:f2:f9:8f:ef:4c:f4:fa:f1:4d:95:22:
6d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2F:B6:1C:BA:61:D6:DE:C2:6D:DE:B8:0C:F5:B9:5D:A8:D0:F6:9D
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dy-2HLph1t7Cbd64DPW5XajQ9p0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.95.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:3d:bc:d5:76:64:b8:a3:4a:e4:b1:82:cb:2b:93:a5:5b:27:
dd:0c:13:0b:ef:d8:72:dd:4e:2d:de:75:0a:03:bf:cd:42:16:
15:09:76:06:98:bd:3b:3b:6e:07:41:86:22:c1:19:7d:55:54:
ed:9e:46:08:c4:be:18:8c:5b:3f:2b:ac:f8:49:5a:9c:7f:a7:
8f:97:cb:4b:46:17:43:49:25:04:f7:c5:b7:ba:bc:74:8b:2d:
21:1a:a8:02:fb:cd:3b:c2:07:99:67:c3:6f:d7:5b:74:36:71:
75:21:3a:23:1d:91:75:75:97:c7:6f:74:b5:07:9f:42:80:70:
96:24:2e:67:c5:79:50:a4:7d:05:14:8d:b8:19:93:77:2c:06:
25:65:17:b2:6f:ee:2b:8c:e3:a8:29:3e:42:8a:38:06:23:25:
4a:7a:42:a2:ca:de:30:73:6c:08:bf:7f:3a:1b:89:3f:59:81:
68:c3:76:8d:11:67:ee:35:8a:6c:f1:52:15:ee:c8:a0:63:db:
00:ae:07:a5:a9:85:8a:96:91:e5:75:b2:bf:fc:de:40:29:75:
2e:6d:36:ed:a9:b7:94:ef:cc:96:57:8a:87:f4:4d:33:a6:81:
b6:38:14:00:46:d9:f7:3e:4e:80:05:1c:5e:71:03:13:1b:4e:
8f:9d:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org