Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/kIfrWcb_U5b2UTla91wp5FiFsYY.roa
File: kIfrWcb_U5b2UTla91wp5FiFsYY.roa (raw, json)
Hash identifier: bO7AElgCoHkJJ1wj7YssOB5xnSDBBlzSIeq/zKkGi8U=
Subject key identifier: 90:87:EB:59:C6:FF:53:96:F6:51:39:5A:F7:5C:29:E4:58:85:B1:86
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/kIfrWcb_U5b2UTla91wp5FiFsYY.roa
Signing time: Thu 15 Sep 2022 02:38:59 +0000
ROA not before: Thu 15 Sep 2022 02:38:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 118.150.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:38:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9087EB59C6FF5396F651395AF75C29E45885B186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:b5:e1:04:12:13:42:0a:ff:ca:14:a0:ce:
7f:76:4b:da:8a:58:e4:98:a9:6b:59:72:66:2a:de:
84:d0:45:aa:76:92:0e:98:2b:18:14:54:36:5f:a3:
98:0d:64:b2:4f:f7:6b:06:ca:4e:98:80:64:8d:2f:
56:b2:75:ac:04:10:28:70:65:b5:96:7c:66:96:71:
0f:b9:77:2e:92:04:6c:95:e3:eb:08:42:01:6a:3e:
1e:4c:41:69:82:8a:02:36:3e:07:a6:bc:78:1f:9b:
42:62:e4:2a:a1:de:d9:d5:5e:e6:59:29:5a:f0:f9:
b9:85:e2:c4:8c:a3:20:9d:93:13:67:a7:57:6f:48:
25:4b:14:54:d7:96:36:0a:e8:cd:a7:4e:5f:22:92:
29:60:c4:f8:71:24:b0:6d:dd:26:d0:b3:d0:ac:f3:
b3:7e:9f:d3:0a:c0:0c:94:a8:bf:af:ee:31:2b:9b:
f6:8f:38:65:33:d2:06:1b:69:d7:62:b5:97:2f:5b:
b8:7c:b0:a0:5c:a7:f0:38:b3:91:8b:f7:94:20:7b:
f7:c0:ac:95:7f:25:73:e0:7c:0b:b1:d5:55:9f:8a:
4e:b4:cd:5f:1f:5b:9e:c0:65:8d:db:6f:51:48:6a:
49:5a:45:fe:a3:b4:bd:12:bc:7d:ac:8d:42:20:9a:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:87:EB:59:C6:FF:53:96:F6:51:39:5A:F7:5C:29:E4:58:85:B1:86
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/kIfrWcb_U5b2UTla91wp5FiFsYY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:4d:9c:86:9d:68:27:6c:ce:b6:ae:41:79:86:9e:b2:b2:65:
21:01:4c:8b:75:c6:ce:40:30:71:4b:2b:51:3c:54:98:5d:5f:
b8:7e:ea:86:b9:6e:2c:90:47:a5:01:9e:44:db:61:7c:36:0f:
d1:61:ab:cf:38:2c:a3:dc:c6:95:09:3b:60:20:d9:97:7e:99:
dc:8f:a7:b2:6e:48:39:f0:d1:3e:c5:af:a2:04:32:4a:0c:11:
63:a2:ab:44:9f:d4:f2:37:94:38:f0:e5:f8:fc:99:08:62:d3:
1a:71:9a:9d:26:51:4c:43:ea:aa:5f:91:36:0f:f5:05:aa:eb:
de:1a:bf:cf:02:82:77:b9:35:4c:e1:01:1b:b5:bb:f6:49:b3:
8b:1c:2e:22:04:c3:30:cb:11:a5:6d:ac:93:dd:d7:a1:eb:3c:
12:9f:80:03:75:3e:1f:71:41:e0:98:83:9f:cf:4f:2c:ae:01:
92:e2:51:65:9c:67:fc:b0:58:9a:53:c9:18:11:0c:09:ac:7a:
7d:d5:5b:5d:8e:c7:ff:ef:46:a5:9f:d2:8b:75:75:8f:cc:53:
e1:18:fb:37:55:f6:5b:eb:ab:2c:3a:59:89:1e:3a:25:27:20:
62:c3:80:8e:fc:22:30:d0:00:a3:3b:1d:41:45:0c:cc:60:19:
ea:45:5b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org