Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/g0ncg2vajGQG7mSoSs0FtqWPUYk.roa
File: g0ncg2vajGQG7mSoSs0FtqWPUYk.roa (raw, json)
Hash identifier: B0uIm0uMpcvv2Z03pUfHB/BPHBjmVoRKsNkMgRYo6hE=
Subject key identifier: 83:49:DC:83:6B:DA:8C:64:06:EE:64:A8:4A:CD:05:B6:A5:8F:51:89
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/g0ncg2vajGQG7mSoSs0FtqWPUYk.roa
Signing time: Thu 15 Sep 2022 02:39:05 +0000
ROA not before: Thu 15 Sep 2022 02:39:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 150.116.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8349DC836BDA8C6406EE64A84ACD05B6A58F5189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:5c:1c:bd:10:aa:22:00:6d:57:fa:9c:7b:
65:55:a8:c8:b1:f1:8f:59:d8:b7:51:54:bf:45:83:
41:2f:9b:4b:2d:c0:9c:74:f7:a5:d0:d5:14:fa:ea:
1b:eb:36:a5:42:d3:20:cd:e6:06:5d:49:a4:b1:e1:
d7:56:fe:3e:fd:f5:9e:4a:d2:ce:65:36:e7:c4:da:
48:b4:6d:32:a6:95:3a:8d:7e:7b:09:6d:ce:d7:c4:
28:98:67:76:50:45:4a:55:fa:ff:a7:1d:3d:4a:eb:
50:35:d6:30:bb:a0:c1:83:19:92:0c:81:8a:73:b7:
d5:3b:b6:15:a2:f6:19:f3:5a:1a:d9:04:2b:6b:15:
c1:3d:d1:be:48:af:be:8b:95:2e:4d:6a:b0:66:dd:
b9:39:80:dd:a8:e8:c8:df:86:47:fb:25:9a:e9:50:
a6:1e:89:ff:c0:7f:26:e0:be:63:d5:df:92:a0:90:
d9:05:b7:83:50:0d:96:0e:a8:a9:4a:46:63:15:09:
4f:89:e1:88:b8:0e:02:94:35:d5:fd:32:4b:b3:a9:
d3:e3:c1:a3:89:bb:1c:9e:f6:f7:ec:81:df:a2:86:
51:91:ac:a2:48:b6:2b:af:fa:33:01:8f:c9:25:80:
56:ae:b0:c0:d7:c8:58:e6:de:ae:f3:23:17:12:4f:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:49:DC:83:6B:DA:8C:64:06:EE:64:A8:4A:CD:05:B6:A5:8F:51:89
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/g0ncg2vajGQG7mSoSs0FtqWPUYk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.160.0/19
Signature Algorithm: sha256WithRSAEncryption
80:b9:26:53:37:3c:a0:9f:83:b7:93:38:30:99:24:78:7a:cc:
5e:3d:12:5a:26:21:c8:86:f6:6a:86:fb:a8:af:0d:7f:ce:e1:
14:19:b3:6e:60:34:3e:c6:bd:38:59:56:2a:8a:10:3e:fa:b9:
80:95:b9:f0:d7:cb:f8:97:e5:e6:df:ef:80:36:b3:76:26:82:
83:5b:10:07:34:22:0e:7b:8b:6b:49:65:de:4e:42:2c:72:67:
7b:e3:6d:c4:f6:b0:0f:08:a0:b2:54:9e:cc:53:2c:09:00:f4:
c0:96:26:a3:1a:bc:05:0b:4e:72:88:0a:af:5b:be:ce:0a:06:
37:c3:ae:04:ff:a2:d5:da:14:23:87:e7:65:56:21:27:df:df:
5b:e4:b6:ee:60:b9:d5:a7:a4:2e:c6:2a:05:39:5e:85:8c:24:
80:29:3f:57:93:d5:e5:b9:89:4e:4d:3e:4e:d5:73:a0:94:0f:
5e:4a:8a:4b:35:37:e1:c4:93:da:f1:bd:8a:d7:ef:5d:44:2a:
4c:bb:8e:28:20:9f:9c:77:ee:99:fb:10:59:68:bc:21:48:3c:
a7:df:ee:84:05:c1:72:b9:a3:70:17:63:4a:11:b1:25:49:24:
24:ca:c4:89:a4:88:9e:7e:f9:ce:99:41:9e:29:05:43:60:c0:
20:16:92:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:01 2025 by rpki-client