Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/gXvi84PE1GISJ7E9O1u4MehtK3I.roa
File: gXvi84PE1GISJ7E9O1u4MehtK3I.roa (raw, json)
Hash identifier: 1mKAHqCplK/E3U/kI79BGiRLPJOD/tsJgSfFhNJ1zlk=
Subject key identifier: 81:7B:E2:F3:83:C4:D4:62:12:27:B1:3D:3B:5B:B8:31:E8:6D:2B:72
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DE6
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/gXvi84PE1GISJ7E9O1u4MehtK3I.roa
Signing time: Thu 29 Dec 2022 09:31:59 +0000
ROA not before: Thu 29 Dec 2022 09:31:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131607
IP address blocks: 150.117.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3558 (0xde6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:31:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=817BE2F383C4D4621227B13D3B5BB831E86D2B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:b6:07:3d:f3:59:b9:81:47:15:9a:92:ed:
82:7f:a3:cc:a8:ef:df:5d:d9:15:7d:25:38:e6:fa:
28:e7:06:2e:34:52:3b:d8:ff:19:47:d4:5c:f0:0a:
66:1c:da:2d:7d:19:1e:81:4e:ec:1e:a0:db:10:5f:
7a:98:8c:39:0f:b3:6c:7e:87:e0:ee:46:20:24:cf:
67:fa:d5:1b:06:c9:a5:13:6a:0d:3b:33:20:2c:bb:
82:c2:d7:4b:af:4c:a0:77:1e:dc:4f:f7:4f:fd:e9:
49:0b:24:07:cf:90:34:36:df:69:48:5b:75:55:6f:
89:54:ac:1b:6a:6b:e1:64:83:a2:60:23:90:c9:49:
0a:bf:aa:37:ae:b9:75:be:0d:ce:6d:88:ad:73:22:
d2:b6:80:8a:45:42:c6:c0:cc:88:22:38:dd:14:cc:
7c:ed:9f:a2:29:86:f7:60:ee:40:b3:ce:bb:ee:2d:
7c:ba:d9:2e:ae:8e:28:e8:96:68:cb:78:e2:be:b9:
00:9a:d9:20:40:73:4e:3b:8e:1f:46:71:d8:3c:26:
45:83:a3:0f:b8:7b:c8:ce:e0:97:ea:bf:c8:92:95:
51:10:66:36:c5:b1:fb:7b:bc:77:3d:68:fc:4b:59:
8b:bf:52:3e:e7:db:28:86:2c:d9:f7:6f:b1:d6:4a:
f3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7B:E2:F3:83:C4:D4:62:12:27:B1:3D:3B:5B:B8:31:E8:6D:2B:72
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/gXvi84PE1GISJ7E9O1u4MehtK3I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.176.0/20
Signature Algorithm: sha256WithRSAEncryption
38:3c:48:d7:d4:50:06:b2:e4:af:1d:16:db:24:1f:c6:19:b6:
e7:0e:f7:8d:40:97:ac:67:89:00:38:0a:3a:8d:54:45:89:09:
05:a2:52:70:5f:0c:10:e9:85:69:f3:8d:00:5a:82:76:5e:89:
7c:9b:66:64:4f:27:5f:61:87:b8:68:40:2b:05:5a:e8:0d:72:
5f:9d:9d:72:be:38:f2:7f:9b:2f:bf:a9:7f:13:4d:48:aa:72:
4c:15:e5:c9:b6:2f:65:e3:95:5f:3e:9c:79:67:48:8b:cc:b3:
fd:c5:a6:15:0a:7f:23:e8:54:7e:70:08:61:3e:60:bf:17:f5:
9c:13:0f:8c:9a:e8:de:cc:82:0b:73:5c:e2:68:54:9c:fb:76:
f2:90:ab:c1:70:a2:f6:73:93:d7:69:5a:74:09:4e:29:e3:b1:
7d:ff:bb:f0:58:e5:61:68:a1:2c:f5:fc:72:96:f9:bf:e5:87:
2f:c1:27:5c:09:6b:92:77:9d:9e:c4:a3:2d:6f:aa:d2:df:3b:
61:54:c8:3f:3a:7b:47:ec:89:b4:45:3c:50:e2:b7:56:6a:06:
15:6b:40:d5:ee:46:bb:eb:9b:0a:9b:aa:26:78:05:b5:10:db:
86:d0:6f:d7:55:05:04:41:95:23:c5:3e:c7:c9:d7:b4:9f:46:
c3:a7:14:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org