Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fKckx9Ul1GJYqAUvzrhfJeFwmVo.roa
File: fKckx9Ul1GJYqAUvzrhfJeFwmVo.roa (raw, json)
Hash identifier: NZmHUYQXUfQsUmkKVgEAE8W3Dj/s1n9hGo6eCX6y0Xo=
Subject key identifier: 7C:A7:24:C7:D5:25:D4:62:58:A8:05:2F:CE:B8:5F:25:E1:70:99:5A
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E1B
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fKckx9Ul1GJYqAUvzrhfJeFwmVo.roa
Signing time: Thu 29 Dec 2022 09:32:15 +0000
ROA not before: Thu 29 Dec 2022 09:32:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 223.26.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3611 (0xe1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7CA724C7D525D46258A8052FCEB85F25E170995A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ce:9f:ca:30:e1:3e:31:64:74:4b:58:65:0a:
7f:c8:0a:cb:fc:75:6b:fe:1a:91:64:2b:ad:5c:49:
70:37:ab:09:1f:ac:d8:d5:e9:c2:54:e0:88:9a:b5:
b7:c6:8d:f0:05:ec:66:39:84:2a:72:8e:17:4e:5b:
85:7f:c9:e6:8f:0b:86:8f:0a:89:77:f0:97:16:ec:
6a:1d:7f:3f:ab:4f:26:3e:21:4e:45:0a:0b:26:a0:
c3:46:eb:5d:f9:6c:47:f9:89:8a:70:c8:2f:33:68:
65:95:84:25:78:69:40:a6:00:09:7a:ba:52:46:7d:
15:d7:ba:1d:8d:4a:59:96:01:13:30:85:91:f6:21:
0e:89:01:94:af:b3:a5:8c:2e:3c:98:50:28:b7:71:
41:a7:88:e8:35:1c:ed:18:91:fa:eb:bb:24:6b:b3:
43:97:c9:92:69:d5:0e:4a:24:d2:c4:54:ff:96:66:
88:b0:8c:7b:67:f9:4f:cd:9b:79:6e:06:6f:aa:45:
e5:db:1b:45:f3:2f:3e:02:46:c4:5d:18:f7:0b:36:
1f:50:1d:14:c9:53:ff:c5:82:d1:5f:25:4b:67:ba:
3c:b2:2e:cf:b3:a7:f1:93:fe:8f:ff:d3:cc:89:9c:
09:1f:7f:15:5c:3c:d3:88:da:7a:a4:b7:77:8e:69:
dd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A7:24:C7:D5:25:D4:62:58:A8:05:2F:CE:B8:5F:25:E1:70:99:5A
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fKckx9Ul1GJYqAUvzrhfJeFwmVo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.80.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:72:eb:b5:a7:68:50:44:cc:2f:6a:99:b2:e0:1a:0e:1c:62:
8b:74:da:ef:1d:b2:a2:7c:bf:de:73:83:f0:66:b7:9f:cd:68:
25:f2:30:ff:4d:2f:bd:cc:2f:87:59:8a:13:bb:cd:d5:e0:45:
c9:1a:8c:e5:3d:b5:45:1d:42:31:b9:c3:c3:6a:9a:95:b0:04:
6a:e8:4a:d8:6d:e4:25:56:73:dc:86:b5:6e:64:d5:f0:7b:dd:
22:eb:1c:2c:c7:64:05:45:43:5b:ad:1f:16:d4:10:10:04:d4:
ac:a0:c5:d1:6f:04:1d:4f:36:79:ff:79:74:09:42:71:d3:a3:
68:d2:af:7f:44:a4:40:cb:70:7e:1b:25:f3:69:df:57:61:6c:
d2:0d:d7:b2:3e:d8:ea:9f:71:96:67:ec:da:b0:d9:71:ee:f0:
cb:41:26:31:ff:bf:00:23:82:d6:cc:1a:ea:ff:25:35:24:93:
7c:c5:a2:8e:2a:63:67:1e:07:94:56:e5:bd:6c:d2:95:c7:d6:
65:e6:97:01:de:e2:8e:7c:53:e8:d3:08:73:67:32:fc:02:98:
ce:82:31:8d:f3:26:a9:81:93:41:84:83:e0:b6:6c:ac:61:8d:
74:63:b7:66:8a:4f:da:d0:2a:da:51:06:3b:f1:6c:53:55:18:
0e:15:d7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:54 2025 by rpki-client