Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ewFnLmJqC8WtXbL85QNfhJjparA.roa
File: ewFnLmJqC8WtXbL85QNfhJjparA.roa (raw, json)
Hash identifier: O/ptk+lizv3TLvo/7nhotmhWzU8ocicUOzurOiiddm8=
Subject key identifier: 7B:01:67:2E:62:6A:0B:C5:AD:5D:B2:FC:E5:03:5F:84:98:E9:6A:B0
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 087F
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ewFnLmJqC8WtXbL85QNfhJjparA.roa
Signing time: Tue 29 Sep 2020 10:02:31 +0000
ROA not before: Tue 29 Sep 2020 10:02:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175 (0x87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7B01672E626A0BC5AD5DB2FCE5035F8498E96AB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:24:6f:be:53:15:a2:4a:3f:6c:41:6a:af:9c:
44:f9:77:b6:93:86:90:bb:cf:19:2b:c2:d1:9b:19:
80:c7:dd:27:3e:bd:92:51:bd:41:0b:cb:0c:d1:40:
54:4a:c6:d1:dc:c4:b6:11:91:bc:c7:e0:93:20:94:
ec:f9:54:32:26:f4:81:5c:4d:ae:65:06:4d:56:5f:
b9:fb:cb:00:57:fb:63:75:b1:47:47:89:27:9c:d3:
d9:78:04:2c:01:7f:76:c3:32:e3:58:a9:95:63:04:
9a:25:2a:87:36:5e:5c:e5:3f:06:12:bf:37:31:92:
fb:7c:e8:03:72:25:63:2e:21:e7:5a:b8:ab:ff:f4:
77:88:8c:04:30:97:16:af:e7:ee:62:37:3f:cd:da:
cf:9b:3c:4a:16:8c:22:17:eb:8d:e4:2b:79:af:fa:
3f:84:37:40:98:db:1d:ce:40:46:8f:6e:3b:fb:c5:
94:4a:c9:d2:9c:d6:2c:9f:9a:fe:c5:38:6e:e6:cf:
80:c5:61:42:7a:6a:29:b5:62:c6:04:8b:28:ab:13:
26:82:c1:f3:46:64:4b:bd:51:82:b6:d8:a5:46:d7:
79:4b:12:18:60:98:e8:91:78:fe:1f:ca:52:e6:08:
d4:4d:4c:b5:39:d9:3d:f0:ff:40:30:cb:6d:c5:3b:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:01:67:2E:62:6A:0B:C5:AD:5D:B2:FC:E5:03:5F:84:98:E9:6A:B0
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ewFnLmJqC8WtXbL85QNfhJjparA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.64.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:c3:d0:8a:8e:01:f2:73:e9:18:77:67:c9:4a:da:f2:7a:e0:
b4:4d:85:8d:5b:5a:2c:cf:2a:69:f4:b3:70:86:30:50:f6:87:
a8:96:3c:34:5a:0b:9a:cc:4a:1c:71:65:34:32:56:ff:6e:c1:
33:55:f4:8a:7f:b7:38:62:50:9a:50:aa:d7:79:a2:1a:7e:37:
a0:39:9c:98:72:04:aa:3c:32:1d:ca:f8:e3:9f:d2:0f:ed:73:
71:3f:ea:4d:0d:b1:4d:53:c0:36:97:68:b0:9e:78:79:b6:b2:
1a:2b:79:65:8d:47:95:30:68:c9:96:d7:b9:da:03:0d:a4:d9:
6a:6f:2e:2f:64:ef:9a:2d:7f:db:d2:13:ed:8d:a4:b3:f7:5b:
f9:fc:8b:d2:d5:e9:36:dc:ee:5c:1f:60:dc:43:be:f2:99:8f:
4f:cf:0f:85:17:b1:1d:07:ae:ad:f6:65:c6:69:79:fb:72:db:
7f:db:e8:e2:9f:fa:a3:b0:b3:3f:9d:70:24:f6:9b:ac:74:0b:
0c:57:1c:bb:0b:35:6b:01:30:0a:21:15:53:d8:ea:66:aa:1c:
d9:21:88:f9:7e:d0:6f:87:be:73:59:81:a5:32:46:dd:a4:ce:
2b:58:3b:be:74:e2:1b:72:f7:be:fa:a9:64:c7:00:be:e3:36:
05:6d:e1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:45 2025 by rpki-client