Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/gJEyqCBCjmogMbsN6dd0KgZqWio.roa
File: gJEyqCBCjmogMbsN6dd0KgZqWio.roa (raw, json)
Hash identifier: R6pU2u1ro2bSj52GCmwYe8PuAoh2ai7cPG8zchS/0ds=
Subject key identifier: 80:91:32:A8:20:42:8E:6A:20:31:BB:0D:E9:D7:74:2A:06:6A:5A:2A
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0ABE
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/gJEyqCBCjmogMbsN6dd0KgZqWio.roa
Signing time: Sun 07 Feb 2021 11:52:40 +0000
ROA not before: Sun 07 Feb 2021 11:52:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17408
IP address blocks: 113.21.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2750 (0xabe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:52:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=809132A820428E6A2031BB0DE9D7742A066A5A2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:6b:bf:af:44:4b:b0:c1:e4:e6:90:79:db:
1f:01:66:41:61:cb:31:ca:83:94:50:d3:32:72:90:
f5:63:7c:ab:cf:0b:89:eb:e5:14:c3:6d:72:82:ae:
59:68:55:2b:4f:3e:91:a8:03:b0:9b:9c:d8:61:12:
af:35:9e:d8:ad:c4:1e:9c:27:eb:b3:b0:60:9c:a8:
18:1a:59:de:b1:a6:39:d0:9e:d8:8b:27:73:6f:51:
1b:21:46:66:9e:1d:24:eb:fd:6c:98:fb:59:93:34:
f3:62:1a:3d:c3:0c:34:9d:da:ed:50:1d:7d:05:20:
f1:5a:59:22:f6:40:d6:16:be:39:72:e4:47:a6:21:
dc:98:29:b3:74:79:3f:ab:56:9c:3c:dd:9c:fe:fc:
45:9e:47:56:39:78:66:d0:f8:06:68:09:2a:d7:3e:
97:0f:2e:5e:c0:c2:9d:d9:d0:11:89:b4:29:48:5f:
1e:05:7b:c8:a2:32:5a:5b:0b:91:d6:5c:75:1b:7b:
0b:ff:9a:b4:b1:69:ce:ea:f2:63:42:65:7f:d5:b3:
e3:2b:dd:8a:fe:b0:d7:92:cf:c3:7a:d1:00:5c:49:
12:e9:04:4a:db:4b:34:71:cf:33:b7:d2:25:ba:6f:
d2:c6:3d:bf:54:73:42:17:63:b0:b6:55:8a:e6:e3:
15:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:91:32:A8:20:42:8E:6A:20:31:BB:0D:E9:D7:74:2A:06:6A:5A:2A
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/gJEyqCBCjmogMbsN6dd0KgZqWio.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.88.0/21
Signature Algorithm: sha256WithRSAEncryption
52:12:af:13:83:3f:6a:58:9a:56:65:f9:f3:be:db:d5:c8:37:
1d:c5:73:c0:5a:21:00:47:fd:29:6b:e0:a7:58:ba:02:ff:7f:
60:b2:06:9b:3f:5f:e2:d7:f2:06:9e:eb:af:67:e9:5f:bd:9b:
18:56:af:ee:73:30:d4:96:e9:ca:ba:e0:81:7a:bb:c7:70:c0:
55:ee:fe:f2:0a:78:68:56:f2:d4:02:02:27:05:ca:8c:05:a4:
b6:37:bb:08:3c:b9:66:cc:fe:db:4e:9d:e2:a0:25:75:ca:b9:
d8:71:48:dd:81:30:ca:9f:3d:4f:8a:d0:e6:68:89:fb:77:e8:
e2:c9:be:11:9a:51:54:20:89:c2:e8:66:1e:7a:7d:c6:0d:ca:
c7:83:e9:95:45:45:66:5b:53:8c:64:6f:2f:01:a8:72:c2:1d:
f8:ff:11:e1:38:47:8b:af:08:c4:2b:cd:8f:06:d8:01:4b:9a:
b0:62:6e:45:ae:1a:11:08:dc:54:ee:76:89:8c:a4:dc:fc:9d:
35:4f:68:52:eb:75:53:df:ec:a8:bf:16:46:65:c3:5a:50:4c:
2a:f8:2e:f2:db:69:a0:4d:c5:e6:dd:da:6c:bb:3f:c3:be:b2:
05:81:38:d1:ed:61:e9:7e:f3:cd:39:37:6a:28:fc:97:db:d2:
08:f5:fe:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org