Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eE4zw1AVPFdnL02ysB23nknokLc.roa
File: eE4zw1AVPFdnL02ysB23nknokLc.roa (raw, json)
Hash identifier: xqXaM5oPxWu+k+UPtEoj78He21YkHmzK/6hgd+FJ0bM=
Subject key identifier: 78:4E:33:C3:50:15:3C:57:67:2F:4D:B2:B0:1D:B7:9E:49:E8:90:B7
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eE4zw1AVPFdnL02ysB23nknokLc.roa
Signing time: Thu 15 Sep 2022 02:39:02 +0000
ROA not before: Thu 15 Sep 2022 02:39:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131636
IP address blocks: 150.116.6.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=784E33C350153C57672F4DB2B01DB79E49E890B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:80:b0:e3:69:77:83:7a:13:00:70:a9:3d:b9:
67:15:23:86:12:79:d7:17:90:62:96:29:06:03:0a:
e7:a6:85:9b:b6:cf:45:0f:1f:c1:31:1f:15:d0:ea:
8c:dd:e1:3f:5e:ec:47:6a:22:b7:cc:82:25:d6:cf:
5f:27:43:05:8f:78:54:39:22:2b:c2:9f:92:6c:95:
0d:b9:a1:20:55:48:66:26:97:65:f8:83:79:8a:55:
8d:87:37:36:d4:5d:cf:a4:31:0b:b3:1b:b9:28:bb:
55:53:e1:29:83:36:60:36:04:25:26:2a:e9:81:49:
9d:00:1d:22:53:77:7a:c9:6a:6e:3a:2d:61:c3:8a:
1f:a7:9f:7d:09:7f:22:f2:95:0d:1c:79:bd:ac:ff:
f1:ac:ed:9b:5b:ce:12:96:c3:7a:1c:da:59:a1:c8:
eb:c8:96:f0:dd:f9:ff:70:78:cd:9f:c3:05:b0:2a:
65:d7:8e:3e:93:cb:3d:fe:77:81:a7:30:e5:c5:3c:
8d:0d:4e:ea:fb:8c:2f:ad:24:b8:cf:d9:09:3e:8b:
9e:f3:25:9c:cc:cb:dc:6d:21:85:4a:17:ed:1a:95:
87:d4:96:41:ec:43:fd:40:41:c7:c1:58:92:8e:80:
36:02:e4:84:79:9d:4b:ef:f5:7b:f3:b3:f1:a8:ce:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4E:33:C3:50:15:3C:57:67:2F:4D:B2:B0:1D:B7:9E:49:E8:90:B7
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eE4zw1AVPFdnL02ysB23nknokLc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.6.0/23
Signature Algorithm: sha256WithRSAEncryption
86:7f:08:9a:2d:77:a5:c2:8d:e7:26:f0:f6:e1:c3:9d:b8:24:
55:67:f6:bc:17:18:97:54:16:2a:8a:87:aa:1b:75:0e:ce:be:
e2:93:4e:2e:98:69:3c:a3:0b:df:07:a6:f2:77:65:8a:0b:bb:
dd:26:d6:c9:c0:10:8a:51:db:71:f4:aa:a5:1d:17:42:df:5e:
20:42:9a:48:26:02:4d:89:4a:38:3c:68:05:93:74:92:ad:c1:
91:b4:5c:4e:88:45:ea:99:02:93:d5:2b:4b:0f:95:02:5a:30:
41:c4:78:8f:c4:70:72:5f:a7:09:b2:5d:4c:bb:8d:85:0d:33:
26:21:e9:8c:57:33:86:a7:62:55:b7:01:1f:35:cd:27:5a:db:
1d:c4:95:75:cc:b8:c8:12:b0:72:22:c0:63:53:c5:2d:b2:db:
a6:dc:75:ce:8b:6f:0c:16:d2:79:65:24:bd:1c:36:d7:71:6f:
79:df:60:12:0e:21:a1:43:d3:6b:fc:95:36:68:5a:e1:50:28:
42:c9:9e:44:82:c5:8f:3f:d8:45:7d:63:d9:c9:40:ba:71:1e:
27:5a:07:5f:94:b9:c4:cc:a2:28:a1:6c:2e:b8:6f:aa:e5:00:
b8:ba:fa:2c:7f:1b:aa:22:2d:5a:64:f9:ab:9c:35:cb:37:45:
c7:3c:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org