Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iGfqEryZMP8npmSpzqyHmYzbmGU.roa
File: iGfqEryZMP8npmSpzqyHmYzbmGU.roa (raw, json)
Hash identifier: RIGy0gv6EW3Nd16r6a0s0qsgcxEp4AKBYRAzJwiH1BQ=
Subject key identifier: 88:67:EA:12:BC:99:30:FF:27:A6:64:A9:CE:AC:87:99:8C:DB:98:65
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iGfqEryZMP8npmSpzqyHmYzbmGU.roa
Signing time: Thu 15 Sep 2022 02:39:19 +0000
ROA not before: Thu 15 Sep 2022 02:39:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 203.163.192.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8867EA12BC9930FF27A664A9CEAC87998CDB9865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:70:69:18:5e:89:48:d7:76:d9:6c:18:76:
eb:4c:01:78:02:ba:ca:23:9f:89:64:f5:96:d7:dd:
84:71:4c:da:18:b9:c2:dc:f3:20:d4:aa:c0:2b:49:
14:d5:ab:83:79:6c:2a:72:e1:3f:61:f8:6f:c1:3a:
06:9b:23:f6:d5:e9:cf:d7:87:36:b1:1b:1a:19:f6:
7d:96:c1:b4:d1:69:69:57:bd:e5:26:d2:8f:f0:fb:
be:32:aa:49:88:0e:b1:a3:23:6f:73:43:5d:02:82:
7a:6c:2d:09:2a:f4:f8:99:1e:50:d7:53:3c:cf:1f:
a6:ee:35:93:ba:59:6a:d7:c7:6f:63:c9:a9:65:d7:
78:d8:b8:99:61:7e:11:9e:ee:73:6f:09:56:ab:ec:
b7:44:91:d5:0e:44:89:4f:11:1e:1f:26:ec:b3:03:
11:32:b2:a0:78:35:76:a9:91:fb:44:f2:02:1c:ca:
e3:d0:25:ee:39:ca:d3:45:80:34:06:5a:6d:9c:4a:
84:fc:2a:a1:e0:16:55:41:cd:4e:aa:f8:55:da:6b:
f7:1b:b8:94:23:e4:ae:57:d1:03:14:6e:ad:e4:f5:
76:9f:07:09:ea:8e:73:fb:4c:de:33:3a:96:f9:4b:
b0:b1:de:d0:36:2d:1f:9e:e3:29:69:1a:e5:50:ea:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:67:EA:12:BC:99:30:FF:27:A6:64:A9:CE:AC:87:99:8C:DB:98:65
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iGfqEryZMP8npmSpzqyHmYzbmGU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.192.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:ee:f5:72:c2:25:b7:62:b9:50:36:2d:ee:c8:4c:dd:bf:0b:
f1:0d:65:f9:67:aa:f7:32:75:07:02:78:b0:b0:d5:eb:a9:52:
47:4b:87:ad:e8:89:f7:87:b8:41:88:25:c7:a4:24:8c:0a:50:
fa:a3:7f:4a:c3:d4:14:c2:92:04:75:41:ee:41:59:dd:6c:df:
3a:61:3d:fd:30:a2:f9:e8:6a:18:48:64:ff:cc:a7:3e:b5:ef:
4a:ec:91:ce:a2:0d:8c:0f:e1:76:c4:28:53:43:ef:b6:e2:62:
03:8d:ab:65:e2:6d:dd:17:c9:80:50:b6:c3:46:b5:f5:32:ad:
4c:c9:e4:0d:55:e8:d4:6d:d2:aa:dc:93:28:07:59:db:d7:43:
7b:fe:84:bd:ad:05:36:fb:d7:e8:d7:47:07:44:57:58:46:8d:
ac:64:1c:32:e3:ff:12:d2:90:69:1a:0c:1e:1c:3a:1a:8d:0f:
54:95:72:8c:8c:1f:ef:c3:1f:54:f9:be:2e:77:3b:55:b7:de:
f8:7f:f4:da:46:c2:2f:92:f3:3b:71:fa:1d:53:94:c1:5f:64:
3c:6a:c7:16:6d:39:42:dd:5d:84:19:c8:da:08:9c:b0:67:7b:
94:7a:02:5e:1b:13:68:f9:d3:0c:94:73:c5:0d:16:b9:00:2a:
08:53:95:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:50 2025 by rpki-client