Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/jNAxqZQRK7fIeHURwOwDt8QZ6AU.roa
File: jNAxqZQRK7fIeHURwOwDt8QZ6AU.roa (raw, json)
Hash identifier: Bay1Ohc4jOc6qW+/+nivSHu0KVkz7YqkYHSRDJn725E=
Subject key identifier: 8C:D0:31:A9:94:11:2B:B7:C8:78:75:11:C0:EC:03:B7:C4:19:E8:05
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C10
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/jNAxqZQRK7fIeHURwOwDt8QZ6AU.roa
Signing time: Wed 29 Sep 2021 02:38:59 +0000
ROA not before: Wed 29 Sep 2021 02:38:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17408
IP address blocks: 113.21.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3088 (0xc10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8CD031A994112BB7C8787511C0EC03B7C419E805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:27:6b:ec:22:ba:77:40:d2:4d:d8:51:ef:
70:e5:20:80:67:96:e5:d9:02:29:50:c2:0e:51:03:
ed:13:a9:c6:31:0b:c9:be:e2:4c:9e:60:c7:72:98:
db:89:de:e7:ce:c0:b8:67:fd:dd:be:8a:8d:10:f3:
e4:c8:e7:ef:61:8e:86:3d:23:7b:53:d4:69:24:d6:
a8:f9:23:c6:cf:ab:3e:d6:7d:e2:ea:9b:a0:65:52:
fd:84:ee:6e:47:fc:41:76:05:c2:81:9a:e3:97:93:
19:90:7e:67:79:64:40:80:0f:b8:0b:1b:25:b1:c3:
fb:14:83:0b:ae:40:3d:ec:98:68:68:fc:f9:e3:d0:
cf:c9:63:05:d8:0d:60:10:11:05:6f:92:55:e4:ac:
65:0f:cc:c3:7d:57:68:ab:74:2c:02:50:f4:5d:f8:
80:8a:a9:f6:26:6f:d1:4f:dc:93:2b:1d:4c:cc:0b:
1f:54:11:89:79:1e:fc:cd:02:db:c7:31:ef:41:1a:
49:d3:12:13:93:9e:91:be:cb:87:b4:8d:a9:43:9a:
f0:c7:1c:8c:37:53:68:6a:ac:00:a6:7f:fe:9d:ab:
84:ff:15:5d:fd:81:56:22:bc:72:74:7b:95:3c:9d:
3f:71:ba:7c:48:ca:e3:04:aa:7b:cb:99:c3:24:d4:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D0:31:A9:94:11:2B:B7:C8:78:75:11:C0:EC:03:B7:C4:19:E8:05
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/jNAxqZQRK7fIeHURwOwDt8QZ6AU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:3e:bf:84:40:db:45:7a:43:c5:8f:35:e9:4b:5a:b6:04:35:
d1:b1:14:c2:09:17:7c:bd:6d:06:b9:59:33:c5:31:74:16:b9:
92:f8:ee:9d:e9:32:7c:cf:0a:a5:92:49:b0:f7:d9:a9:a6:f1:
34:e3:f5:13:0a:d7:13:51:07:96:ab:9c:1f:e2:94:98:e4:0f:
6c:34:07:80:61:94:22:49:65:d2:e6:2b:ec:15:b7:17:df:5e:
20:8b:a0:c2:22:97:5f:ab:57:2e:65:92:57:89:b5:4c:53:30:
85:5b:28:9a:a3:5b:91:ec:ac:bf:1f:ef:cd:21:fe:87:23:84:
45:cf:44:86:78:8d:30:aa:65:fd:07:68:d3:31:f7:1a:08:ea:
cc:b2:6a:19:b4:94:ab:fd:3d:00:88:4a:b0:2c:e9:80:41:36:
54:40:0e:77:06:76:0c:0c:db:a7:26:43:84:db:86:59:84:73:
7c:2f:36:b8:0e:af:61:3e:62:af:cd:e1:37:5c:61:fd:81:51:
5a:ab:b4:90:96:4f:21:ad:06:15:93:ea:fe:15:e1:12:29:4d:
47:6f:bf:ab:24:60:4c:c1:2b:14:60:43:0f:2d:2d:f5:b0:0f:
a6:d4:31:7f:a2:02:90:6e:9c:4e:c9:0c:47:6f:ca:26:9f:8f:
fa:b5:20:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org