Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eKdJr_eocY9B6Dxmo-Tnk3in-s0.roa
File: eKdJr_eocY9B6Dxmo-Tnk3in-s0.roa (raw, json)
Hash identifier: YAf5DNklqDePWZOMXqsd8/J5mNaVdEYtJhuCKJ40VBI=
Subject key identifier: 78:A7:49:AF:F7:A8:71:8F:41:E8:3C:66:A3:E4:E7:93:78:A7:FA:CD
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0877
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eKdJr_eocY9B6Dxmo-Tnk3in-s0.roa
Signing time: Tue 29 Sep 2020 10:02:29 +0000
ROA not before: Tue 29 Sep 2020 10:02:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 63199
IP address blocks: 150.116.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2167 (0x877)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:29 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=78A749AFF7A8718F41E83C66A3E4E79378A7FACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:7f:a7:62:e2:c5:05:c5:94:51:8d:6b:57:
7d:d2:1b:33:15:bf:f7:ad:e2:fa:5b:76:e1:e9:39:
c8:aa:f0:75:01:7e:7a:69:3a:df:08:78:e1:5c:93:
ba:79:01:6e:ec:d3:ae:82:43:ed:10:f5:46:24:5e:
c9:ed:1b:62:65:0d:92:92:b6:5a:24:9b:fa:e8:29:
af:d9:6b:17:9e:8e:fd:9c:e6:13:fd:ad:2f:96:ac:
f0:85:50:a8:1f:1f:65:f5:9e:c3:5e:f4:78:b5:e0:
cd:60:d1:08:3b:df:25:3d:81:99:de:a1:ad:4c:29:
9e:4b:6b:40:26:e5:91:b9:a2:98:4a:9c:37:99:2b:
05:e5:fa:76:4d:85:b3:42:f7:07:ae:08:0d:d0:e2:
4a:b9:2d:c4:ea:66:7e:11:ef:64:e8:76:bc:9a:70:
19:fd:a6:a2:8a:79:39:b7:77:49:5b:71:1e:63:d3:
69:85:f2:2c:87:a9:d9:91:1b:3a:00:4f:8d:df:42:
e0:51:a7:a0:41:09:bd:dc:30:f6:27:73:7a:bf:4c:
5c:78:51:a1:34:42:3b:d3:7b:95:a6:8b:c9:0b:58:
7f:d5:6b:4c:49:e2:fd:e8:b6:51:78:ac:67:8f:8c:
a4:b1:22:3f:89:c7:8d:4e:0a:ed:2b:03:71:de:c0:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A7:49:AF:F7:A8:71:8F:41:E8:3C:66:A3:E4:E7:93:78:A7:FA:CD
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eKdJr_eocY9B6Dxmo-Tnk3in-s0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:e5:f6:9a:53:68:d0:b8:61:43:3d:88:2a:08:bf:07:67:86:
91:8b:ff:ea:3f:49:a8:07:4b:20:eb:d4:99:98:38:e2:60:1f:
65:4b:e1:63:5f:01:b3:6c:7d:5e:b9:9d:7d:c6:67:22:ea:33:
b3:84:1f:51:04:e0:b3:03:59:ea:29:e3:79:23:92:52:c1:83:
11:6e:43:e4:da:f9:1b:e4:eb:ca:b1:bd:8f:fe:dc:d1:59:56:
ba:8f:7c:1e:a7:ba:e8:3b:93:ca:56:b8:04:58:c9:bf:7f:ca:
69:c2:de:9b:3c:f6:81:c1:87:f1:f6:4a:41:6a:19:3e:8f:18:
02:00:7e:7b:db:bb:63:2d:bd:e4:3f:4a:72:e1:96:a4:48:3a:
e8:58:e9:27:75:82:72:52:11:e8:9b:ac:39:bc:a8:c2:cf:03:
d3:52:f0:30:9d:ab:af:0d:c7:6c:22:b6:46:af:48:2b:58:07:
be:32:db:1b:11:12:f6:4a:78:fa:25:23:73:62:2f:bb:57:96:
86:97:ff:00:c5:ce:0c:6f:8b:98:29:d6:15:ff:22:5f:18:c6:
4e:ae:2d:93:b9:c6:78:6d:61:9d:45:d6:37:0c:32:1e:e8:76:
0c:03:7b:82:41:0f:8f:6a:0a:69:b4:2b:2c:71:e2:03:5c:bf:
18:e9:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org