Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fv-_tVkZF-29MNWxsA4AzqSwXyI.roa
File: fv-_tVkZF-29MNWxsA4AzqSwXyI.roa (raw, json)
Hash identifier: BHDy1LMIa4tgBcKlgP0hYncvHCrc48fK12XBMasVPW4=
Subject key identifier: 7E:FF:BF:B5:59:19:17:ED:BD:30:D5:B1:B0:0E:00:CE:A4:B0:5F:22
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0A68
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fv-_tVkZF-29MNWxsA4AzqSwXyI.roa
Signing time: Sun 07 Feb 2021 11:49:41 +0000
ROA not before: Sun 07 Feb 2021 11:49:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131600
IP address blocks: 113.21.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2664 (0xa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:49:41 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7EFFBFB5591917EDBD30D5B1B00E00CEA4B05F22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:2e:97:7b:ef:b1:4a:f2:7c:7a:b7:d8:14:
52:52:35:a6:9a:f7:a8:83:f4:ec:e0:03:4d:9f:3f:
a3:24:85:4f:12:8f:7a:ec:d2:27:43:3b:a7:e2:62:
e7:91:b6:58:05:de:c8:14:e0:e2:01:ad:96:8a:49:
64:bd:f9:a9:7d:51:65:bd:0d:ed:9a:1e:f6:6d:3e:
e6:49:78:d0:9f:8a:33:bb:f7:cc:38:88:bb:c7:d9:
bd:6d:86:56:4c:2d:18:12:73:d4:d2:ec:b1:7b:57:
06:fc:41:71:70:aa:0e:74:02:cf:9f:b3:45:dc:b1:
99:69:08:c7:77:9b:db:e4:62:85:bf:a9:fa:e0:df:
16:b5:5f:6f:c5:7b:57:bb:ab:4b:52:fc:1b:be:b8:
06:ac:9a:3d:39:6f:59:da:94:1e:9f:fa:b4:03:47:
a3:e2:f7:63:b1:74:2a:b8:79:c8:71:ce:dc:79:7d:
d0:53:eb:25:0b:1d:c5:39:c1:44:7b:e9:77:44:d0:
ec:2e:27:db:d2:1f:9e:05:a7:d9:2f:1f:1a:8c:a8:
88:e6:33:6e:ba:11:fd:4b:89:3f:ad:b7:c6:6a:74:
33:86:11:22:58:95:80:8a:13:a9:0a:c6:91:12:4e:
29:c8:ca:c5:7a:50:ed:78:12:43:65:cd:6f:ac:9c:
a7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FF:BF:B5:59:19:17:ED:BD:30:D5:B1:B0:0E:00:CE:A4:B0:5F:22
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fv-_tVkZF-29MNWxsA4AzqSwXyI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.94.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1d:56:90:c1:de:41:94:bf:34:ee:d0:a7:7c:7a:23:4e:32:
80:b8:8d:eb:52:03:5a:78:d8:80:b8:39:52:d6:39:14:19:36:
cc:03:ae:92:d2:3e:46:33:64:70:2a:39:39:da:cd:70:38:87:
33:0e:2f:9a:77:a0:ad:a6:91:8d:de:a2:bd:4f:9d:de:6b:2d:
aa:e5:fa:0a:9d:7b:48:28:05:8f:4e:21:b9:b1:ca:35:b5:f6:
7b:3b:2d:d9:57:fe:95:39:6a:0e:a0:5d:47:c2:7d:05:3c:68:
54:b3:9b:b7:1e:d0:af:9a:da:b9:93:b3:70:6b:8f:78:fb:06:
df:89:2d:8c:99:cb:22:d9:f0:39:36:d1:ee:43:ba:cd:c1:21:
43:cc:e6:fa:a8:93:4e:b3:8c:2f:73:2e:b9:04:fe:c6:8b:56:
30:f4:d0:d0:2e:13:68:e4:98:c1:42:44:1a:30:87:02:ef:01:
41:76:91:c6:83:ca:4d:e0:88:75:93:aa:a8:5b:3a:f3:ef:28:
e2:fb:44:a0:65:53:4f:5c:f0:ef:d6:2e:cf:38:05:31:15:4f:
bd:57:35:f5:06:51:32:f7:aa:87:f1:2a:2a:a8:c0:b4:df:29:
c5:a8:af:8d:27:aa:cb:2e:cb:70:d0:e3:7f:db:8f:9f:4a:7b:
3a:a3:ba:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:53 2025 by rpki-client