Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eSf7HhjXJa808XzcTQ3Mq_joGXQ.roa
File: eSf7HhjXJa808XzcTQ3Mq_joGXQ.roa (raw, json)
Hash identifier: pDmH58x9TJe6pb95Q+HUuWyGjXSelXL/4SXA7U5uBE8=
Subject key identifier: 79:27:FB:1E:18:D7:25:AF:34:F1:7C:DC:4D:0D:CC:AB:F8:E8:19:74
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0AF6
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eSf7HhjXJa808XzcTQ3Mq_joGXQ.roa
Signing time: Sun 07 Feb 2021 12:59:13 +0000
ROA not before: Sun 07 Feb 2021 12:59:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 137263
IP address blocks: 113.21.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2806 (0xaf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 12:59:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7927FB1E18D725AF34F17CDC4D0DCCABF8E81974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:ce:52:e1:54:8b:a1:2d:0f:a1:79:ce:65:
87:50:83:86:98:2f:0e:0b:9d:16:3b:0a:a9:af:2d:
30:fb:5b:3b:56:be:58:4b:93:0f:1f:28:02:45:90:
ca:8b:d5:68:97:a9:21:5c:b9:51:4c:9d:d7:f7:7e:
3b:db:4a:ee:f3:38:65:1e:64:ac:dd:3e:55:41:a6:
04:c4:d0:88:72:21:76:9c:7b:b3:1e:41:d4:b2:5a:
a4:af:81:2d:01:7a:e8:9c:9b:ea:c6:82:d9:2f:57:
4a:4a:f1:98:e5:ae:03:11:62:fd:4a:3a:15:d9:d1:
d9:1b:e1:80:d5:38:6c:26:d8:81:15:41:5c:50:d5:
a5:93:14:f4:91:5b:a8:da:e4:09:37:25:f3:e3:bb:
4c:d4:cb:a7:7b:e5:bb:8f:93:f4:b5:eb:c2:89:39:
49:20:40:95:c0:c5:aa:8c:f0:ce:80:f9:d7:ca:68:
a8:59:13:a4:1e:4a:d5:44:55:74:02:cd:a8:14:9a:
87:d8:97:e0:d1:99:44:99:85:2b:cf:0b:43:cd:7d:
a0:f7:1b:6f:e2:84:71:bb:77:06:3b:04:1d:2a:1e:
fd:09:ac:2b:96:73:2c:79:7f:45:33:d7:b9:f6:81:
c3:2f:88:97:f2:85:be:fd:59:b5:6d:4b:2f:21:e9:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:27:FB:1E:18:D7:25:AF:34:F1:7C:DC:4D:0D:CC:AB:F8:E8:19:74
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eSf7HhjXJa808XzcTQ3Mq_joGXQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.92.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:93:3a:c8:dc:99:2f:be:66:b5:43:dd:bf:ee:0e:9c:a0:4f:
b9:52:0a:49:8b:04:03:15:fc:1c:b8:94:00:81:aa:ca:76:96:
b8:90:9b:fa:69:cd:94:af:bb:10:a7:24:4d:68:5c:e2:23:cf:
fc:0c:5d:3d:68:07:2d:a7:9f:df:2d:c4:c5:34:c6:02:1f:db:
b0:74:92:10:f2:e0:4e:95:d1:34:fa:b4:90:ba:b4:3f:bf:c0:
a1:25:53:db:89:53:6e:71:df:3c:9a:24:8e:da:11:79:b2:86:
52:92:eb:9b:0b:2f:93:99:5d:24:e3:66:3a:c7:5b:14:5d:15:
a2:4c:9d:35:ce:ec:22:a5:0b:1f:b3:8b:40:23:0a:60:8c:4b:
a8:65:5e:b0:45:92:44:9a:f8:f2:78:24:95:d2:61:8d:8c:04:
09:2a:64:02:4c:dd:39:f7:37:c8:12:00:29:48:ef:6d:44:df:
3a:96:32:81:80:bb:df:bc:2b:39:84:9c:a2:ef:19:ad:ee:e7:
b5:f6:30:83:35:5c:8a:f1:8a:26:55:12:75:8c:c1:f9:88:f1:
0a:f2:b8:9a:52:6f:75:82:ec:f5:7a:6d:46:8a:2d:ca:c3:68:
50:00:45:b2:5c:33:58:12:24:7b:e7:f8:7c:9e:c4:4d:78:41:
76:b4:22:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org