Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ju8LAt7WyKx0bqHuj9Cn6pZrQTE.roa
File: ju8LAt7WyKx0bqHuj9Cn6pZrQTE.roa (raw, json)
Hash identifier: c2eZH5zOH876G+e7H+FeN/1QqO4uZafkSTTqY17cRIo=
Subject key identifier: 8E:EF:0B:02:DE:D6:C8:AC:74:6E:A1:EE:8F:D0:A7:EA:96:6B:41:31
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D7B
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ju8LAt7WyKx0bqHuj9Cn6pZrQTE.roa
Signing time: Wed 19 Oct 2022 03:51:55 +0000
ROA not before: Wed 19 Oct 2022 03:51:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 175.111.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3451 (0xd7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Oct 19 03:51:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8EEF0B02DED6C8AC746EA1EE8FD0A7EA966B4131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:d9:06:8b:3e:d9:1c:ff:e8:b4:ad:c7:c7:
bc:87:95:8f:94:9d:f0:06:4d:88:9a:b6:c8:c5:ac:
b4:3b:93:59:d1:da:a6:45:fc:d9:c2:ea:52:30:c1:
e3:5b:16:47:0c:8a:bc:07:00:36:51:e6:8f:fd:56:
ac:ac:cb:12:f3:09:3a:52:fe:0d:c2:12:72:74:61:
15:c8:e1:b2:37:9a:dc:78:07:16:48:d1:ab:da:46:
aa:ca:9d:fa:d7:c4:a2:8e:d1:7c:d0:36:e0:a9:2c:
c8:98:77:88:99:0b:67:f0:9e:34:aa:35:53:8f:7e:
9b:34:2c:3f:cd:63:3b:c1:19:3a:df:c4:1b:f0:81:
79:3f:cd:d8:26:bb:37:0a:73:a8:0c:36:d7:8e:59:
03:f1:4c:dd:98:e7:b9:0b:6a:a5:33:62:87:8d:7e:
88:6f:7b:88:bd:86:87:89:6b:c9:fc:28:6d:2f:e3:
05:43:c8:7f:7c:e9:3e:65:2a:b6:55:34:99:f3:b0:
20:97:dd:cb:34:8f:90:b2:2f:9f:43:7a:80:fb:e2:
a4:7e:36:69:71:55:99:57:ed:e5:7d:47:a7:55:2b:
b3:1d:2c:d4:e6:50:3e:39:e4:ba:62:49:aa:c0:db:
66:b8:6b:1b:9a:ed:2f:9b:d3:b1:42:07:71:33:21:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EF:0B:02:DE:D6:C8:AC:74:6E:A1:EE:8F:D0:A7:EA:96:6B:41:31
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ju8LAt7WyKx0bqHuj9Cn6pZrQTE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.32.0/19
Signature Algorithm: sha256WithRSAEncryption
37:91:f4:4b:0e:6f:af:97:5d:c7:3a:8f:a9:9e:3d:20:2d:b7:
99:51:ab:f7:1c:4e:e3:81:69:f2:3c:f7:c8:24:f8:0a:a4:d8:
73:d1:59:86:9e:9a:5f:8e:2f:c8:39:d5:5b:24:90:80:84:1b:
98:f2:ed:fe:9c:db:fc:f2:4b:95:77:78:c1:84:d5:55:e4:e1:
2a:9b:a4:17:57:09:cf:20:09:e0:8f:6b:76:99:69:ca:24:0c:
2b:0f:7f:11:fa:31:5a:25:25:8e:40:45:63:e9:ed:6a:09:29:
b2:ef:bb:7c:12:95:97:82:51:6e:fb:41:72:e8:b8:92:03:d0:
2c:0a:c5:60:df:26:f0:e3:05:73:cc:5d:dd:9f:8d:86:8d:33:
71:65:55:fe:90:79:8b:e8:c8:e6:51:f8:4c:2c:b0:4b:b1:13:
a9:b5:0b:e4:b2:57:60:e6:c6:8b:19:6e:6d:85:77:c7:78:a2:
75:4a:ce:58:91:09:d5:d5:a1:e9:01:de:57:21:94:d6:f4:28:
64:7e:78:b7:73:65:6a:2f:07:ba:28:ae:eb:de:a1:56:01:55:
73:21:17:8e:94:ae:ca:07:cf:db:58:a3:2e:28:a4:da:0e:15:
cf:b3:1b:89:2c:57:70:12:88:be:3b:28:5c:2d:34:c6:28:0f:
26:d1:96:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:40 2025 by rpki-client