Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fEgv8T02uqY1GoRdCGvlTldW7r8.roa
File: fEgv8T02uqY1GoRdCGvlTldW7r8.roa (raw, json)
Hash identifier: M5w7HoaVuF6ST+k9ugeAfrBCwpi/V0KFcDFU9wW6HkU=
Subject key identifier: 7C:48:2F:F1:3D:36:BA:A6:35:1A:84:5D:08:6B:E5:4E:57:56:EE:BF
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C17
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fEgv8T02uqY1GoRdCGvlTldW7r8.roa
Signing time: Wed 29 Sep 2021 02:39:01 +0000
ROA not before: Wed 29 Sep 2021 02:39:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 150.116.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3095 (0xc17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:39:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7C482FF13D36BAA6351A845D086BE54E5756EEBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:86:57:46:5f:84:85:6f:ff:63:2a:43:3e:
08:9b:c7:45:b2:ba:b0:77:a0:6a:80:8c:07:23:e1:
2e:3a:7c:2f:29:00:29:26:39:ae:c0:71:1d:a7:87:
d7:59:e4:eb:5a:c7:de:59:47:8b:e2:46:4d:e3:eb:
b6:d0:46:64:e2:c4:c2:75:51:f9:12:2b:18:ca:bf:
f8:f0:82:89:9c:f7:dd:30:fd:06:43:cf:5e:f3:56:
d6:53:35:48:6c:01:3a:0e:16:7b:f7:d9:af:7c:92:
27:80:c9:f1:d6:f4:c5:fb:b7:51:89:b4:53:55:d5:
78:4c:88:3d:75:d9:99:8d:41:d4:9d:cb:ff:11:b2:
cd:3d:76:7a:05:da:6f:6e:e3:e1:5d:39:d7:db:7f:
88:03:15:72:37:bf:d7:22:67:ea:91:66:4d:0e:71:
33:ad:d8:cf:92:7e:47:c4:1d:61:73:78:0d:9e:d9:
91:6e:51:9b:44:15:e7:20:73:f4:85:2e:7d:37:5d:
46:ba:3d:e9:9c:92:00:a7:b1:c4:63:fd:25:42:34:
93:1a:5e:fe:fe:b4:9f:bc:44:f2:29:20:0a:6e:22:
30:82:df:8d:ee:cb:ad:b4:f4:31:c3:af:70:f1:30:
bc:c0:f0:a2:2c:84:d7:42:26:e6:04:ca:e9:29:fd:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:48:2F:F1:3D:36:BA:A6:35:1A:84:5D:08:6B:E5:4E:57:56:EE:BF
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fEgv8T02uqY1GoRdCGvlTldW7r8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:a9:65:73:8a:19:3c:0c:e3:0e:cd:42:9d:93:58:99:27:ff:
1e:81:fe:e3:b3:53:61:f9:2e:df:74:86:5b:30:7d:21:fe:2d:
dc:26:d4:5c:74:2f:c9:09:6d:0d:dd:ca:2e:0e:4c:69:ce:27:
eb:ff:7a:86:3c:f9:c0:b1:6c:7e:c3:46:60:19:4d:52:95:c5:
7d:54:4f:53:35:78:48:7e:6a:0b:76:08:5e:e9:8d:1e:28:2c:
ff:89:cf:79:b9:74:b8:1f:1c:7a:e6:90:79:28:f3:b7:94:6d:
67:27:b8:43:0d:12:ea:c1:8a:33:1f:f9:2f:69:85:a6:e3:df:
8a:d5:32:77:e8:b0:ad:14:20:63:78:98:af:dd:25:f5:6a:55:
e3:29:10:75:f7:c5:de:87:f6:ac:0c:fc:28:02:2f:13:c0:ac:
8a:77:b7:f3:8b:f3:06:2e:1c:b6:05:2c:49:e9:9c:63:c7:9b:
59:2d:ce:b2:54:60:31:c5:8e:ea:a8:34:7c:78:ff:19:13:74:
a9:8d:b2:e8:08:ff:8b:a5:ce:19:a3:e7:c6:74:a7:d0:63:b6:
08:84:38:5d:93:f6:a6:ed:f5:e8:65:e7:8f:26:bf:22:1a:3b:
3a:d9:d4:dc:94:e9:4b:42:30:62:71:24:da:ed:a7:6e:7b:5b:
27:9a:bd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:11 2025 by rpki-client