Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iOynbanDNhv6N0JK52VrwLema9Y.roa
File: iOynbanDNhv6N0JK52VrwLema9Y.roa (raw, json)
Hash identifier: Ox7jxjk+cFHdqw53Utovjjxws/ROFqnde/33rEhWBzg=
Subject key identifier: 88:EC:A7:6D:A9:C3:36:1B:FA:37:42:4A:E7:65:6B:C0:B7:A6:6B:D6
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C0A
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iOynbanDNhv6N0JK52VrwLema9Y.roa
Signing time: Wed 29 Sep 2021 02:38:58 +0000
ROA not before: Wed 29 Sep 2021 02:38:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 150.116.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3082 (0xc0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=88ECA76DA9C3361BFA37424AE7656BC0B7A66BD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e5:65:50:4d:3a:2c:2c:75:b8:77:c4:9d:af:
25:76:56:e8:22:d7:ca:f6:84:22:aa:3c:29:6a:0e:
e8:71:e9:82:74:dc:d9:cc:9c:36:a9:f7:36:0f:c8:
de:35:4d:c5:38:6e:3d:52:2a:f9:f8:53:f0:8e:75:
97:7e:2e:b0:bd:ca:b9:fb:ac:cb:e8:fc:03:35:c7:
97:4f:a3:44:c4:01:79:e5:d7:0b:97:df:45:5c:fb:
04:95:3f:4f:15:f6:2d:03:7c:2c:8e:6b:3a:97:07:
41:4d:e5:c7:53:b5:b9:c1:3d:80:8b:4f:c6:a0:73:
03:b7:51:bb:a5:a0:f5:33:82:a4:a7:91:a2:7c:d3:
ef:62:a2:57:12:10:59:ed:2c:8f:6e:dc:f0:04:3c:
4a:96:0f:9a:bd:40:99:67:01:e6:c7:b3:35:e4:69:
b2:68:96:bf:ed:85:dc:8c:b3:ff:c4:bf:95:01:12:
50:10:df:64:18:90:53:e3:53:09:fa:a6:16:ea:17:
fb:9a:14:70:06:9d:5f:55:4f:a8:7e:c6:4e:a3:3e:
8a:06:54:8c:e1:90:f2:6c:89:c0:ac:47:76:c4:1f:
ac:b5:3d:e9:be:2d:c1:ec:0c:40:90:1e:b1:44:89:
be:a7:ba:0b:90:8f:f8:85:be:80:88:fe:b6:02:5b:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EC:A7:6D:A9:C3:36:1B:FA:37:42:4A:E7:65:6B:C0:B7:A6:6B:D6
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iOynbanDNhv6N0JK52VrwLema9Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.64.0/20
Signature Algorithm: sha256WithRSAEncryption
08:2a:22:ff:49:70:7b:57:00:f0:3a:1f:95:84:e5:79:3e:ea:
df:c0:a5:ee:d7:6c:e6:ca:69:38:a6:86:49:10:cb:f9:ab:be:
65:50:de:b5:f4:08:66:40:52:58:24:64:3d:70:6b:70:6a:6d:
68:53:e1:5f:72:5f:a7:eb:ac:2a:89:7d:53:14:e6:96:ae:c6:
fa:ed:d5:4f:7f:94:da:cb:23:83:32:95:a4:85:09:ab:e7:62:
80:51:2e:e4:74:6f:60:8e:c4:bb:da:b5:e7:a4:18:29:f2:5d:
c6:e0:98:a8:d5:13:93:94:eb:65:4d:b2:e9:61:23:f9:87:38:
dc:a4:08:d1:6e:43:88:4d:80:55:df:3e:31:7c:13:e5:3f:6d:
bb:7c:d6:01:d8:31:52:d3:2b:5b:b2:49:79:08:4f:61:cd:47:
16:61:82:63:08:20:5f:87:e5:f2:fc:b9:c7:26:1a:a7:50:33:
3e:8c:c3:36:10:a7:bc:31:cb:e1:e2:24:9f:3b:8b:fe:4e:a4:
5e:c4:70:65:bc:a1:0c:3a:5f:64:98:11:d9:0a:e8:8c:41:6b:
0b:7e:e6:a3:b9:3f:7f:dd:8d:ef:b1:7d:43:d9:c2:5a:6f:80:
60:ac:48:87:91:b4:ee:8a:45:2d:91:04:dd:9c:e3:a8:b6:f6:
d6:b2:6b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org