Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/k_S8lIi9RQyGvqlkfWLO_VkAmu8.roa
File: k_S8lIi9RQyGvqlkfWLO_VkAmu8.roa (raw, json)
Hash identifier: LhbFY5Lnz+g8KrTEIWWXhMY7c4Rbod7dNkIb8ccBzs4=
Subject key identifier: 93:F4:BC:94:88:BD:45:0C:86:BE:A9:64:7D:62:CE:FD:59:00:9A:EF
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0AFE
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/k_S8lIi9RQyGvqlkfWLO_VkAmu8.roa
Signing time: Sun 07 Feb 2021 12:59:32 +0000
ROA not before: Sun 07 Feb 2021 12:59:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9922
IP address blocks: 118.150.240.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2814 (0xafe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 12:59:32 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=93F4BC9488BD450C86BEA9647D62CEFD59009AEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:a2:d2:54:87:eb:c3:63:07:d5:2b:82:30:
06:55:1e:3c:a0:eb:0e:28:1f:b3:b2:5a:f9:53:7a:
f3:df:ca:9d:05:49:f2:a2:36:a2:0c:f9:ea:9f:91:
32:82:b9:ae:42:d6:36:a8:51:00:ec:6f:5c:01:21:
51:97:27:41:84:d7:d5:b1:5b:e2:3a:cd:f9:32:cd:
06:10:78:6f:1b:83:bf:a8:90:c5:61:8a:ff:5e:26:
4c:9e:56:dc:af:da:ea:25:0f:f2:24:93:3d:55:5e:
61:67:19:1a:4c:a4:ad:be:7a:0e:24:a7:fe:87:a8:
03:0f:2c:f9:35:34:2c:3f:c3:f8:6a:46:99:ac:e5:
13:31:d6:63:fa:fa:91:10:b4:db:e6:0c:87:1a:39:
4e:9b:13:9b:66:99:c4:c7:b0:15:81:ea:b2:3e:03:
93:76:2e:56:03:2e:9e:ea:5f:17:59:f6:e7:8b:fb:
0e:7b:29:45:71:11:4a:47:4f:bb:6a:ec:18:43:47:
a5:a2:d4:2f:b3:5b:66:fa:6f:31:39:ca:49:31:f6:
42:fd:0e:ff:e8:b3:5b:79:c2:25:30:42:e6:81:de:
1d:5d:c3:fd:7d:88:d8:82:18:1a:2d:59:1c:57:3d:
a3:a5:df:aa:59:11:5c:b5:ae:74:97:63:09:b8:5e:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F4:BC:94:88:BD:45:0C:86:BE:A9:64:7D:62:CE:FD:59:00:9A:EF
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/k_S8lIi9RQyGvqlkfWLO_VkAmu8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.240.0/21
Signature Algorithm: sha256WithRSAEncryption
79:cf:db:e3:80:fc:64:08:2c:0d:b3:2f:e6:9c:28:c4:6e:c0:
5f:59:b7:06:37:6b:ca:f3:12:f9:bd:6c:2a:de:f0:5f:91:ef:
1f:8c:ba:0f:83:77:ee:31:40:ef:93:31:a4:f0:8b:a9:6f:82:
6c:07:c6:9e:cc:19:c1:bf:e4:64:5d:be:86:16:4c:8a:36:ef:
f3:78:28:55:65:26:29:91:25:6b:65:be:8e:5f:ac:d7:cc:97:
9b:de:8c:cf:6a:1b:3b:55:87:5b:63:bc:70:e7:64:2c:06:fd:
19:83:4c:82:a0:be:a9:e8:8f:8f:6f:73:f3:07:a5:28:c1:42:
16:d7:ad:12:23:30:7d:e7:ac:d8:fa:ae:c8:9a:f7:3d:8e:4a:
7b:07:dc:9a:8a:f9:cc:51:96:b9:7a:ad:a2:a5:5f:9b:21:f0:
b1:fc:c9:f5:af:13:9f:e8:3e:34:a7:37:e5:94:09:85:aa:21:
65:e3:f2:1e:d7:83:8d:ea:a3:04:d5:7d:5e:e3:a8:78:4c:4b:
ca:fd:79:56:15:84:c6:9e:42:44:a3:8f:1a:0f:7d:b1:36:5a:
fe:99:6a:19:72:74:58:3a:20:77:1d:f6:3a:b2:b9:4e:7d:6e:
a9:b7:d4:ed:d6:e4:51:80:1d:6f:38:1f:94:58:bc:3f:d6:d4:
79:f0:2f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org