Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/l3Ytiy2YOtaNFYxfBvQtenZMgY8.roa
File: l3Ytiy2YOtaNFYxfBvQtenZMgY8.roa (raw, json)
Hash identifier: +qkBgWM4v/D4kI94Aej1GujLICdZ6FV/S0QVXlQvecY=
Subject key identifier: 97:76:2D:8B:2D:98:3A:D6:8D:15:8C:5F:06:F4:2D:7A:76:4C:81:8F
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/l3Ytiy2YOtaNFYxfBvQtenZMgY8.roa
Signing time: Thu 15 Sep 2022 02:39:24 +0000
ROA not before: Thu 15 Sep 2022 02:39:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 137263
IP address blocks: 113.21.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=97762D8B2D983AD68D158C5F06F42D7A764C818F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:01:6d:6f:77:19:50:49:87:00:8d:55:83:82:
1e:a3:b8:07:76:d6:26:cc:f3:4a:00:f9:8d:0f:ad:
f7:51:15:55:a6:f2:23:b5:f2:53:b4:30:cb:35:36:
ea:6b:8c:84:d3:65:6e:dd:dd:b7:5b:e0:8b:c0:f0:
60:ad:6d:ed:03:9c:a6:c7:5c:3d:f6:6c:1f:9e:84:
40:17:31:d4:11:d6:12:97:b6:b2:2c:87:2e:7e:35:
df:52:13:c1:30:f6:2e:a2:58:70:ba:7a:86:19:c8:
e9:1e:52:b8:09:97:9b:80:2d:05:0f:25:14:51:8a:
d3:ee:02:35:13:6b:0d:26:fa:65:45:b2:9b:36:4b:
33:81:b6:48:23:72:08:c0:a8:1b:0e:24:37:71:4b:
dc:fd:fc:3c:6b:f8:e6:7d:5b:b3:42:0a:2b:d5:86:
2a:c0:a6:fb:c4:c5:5c:48:fd:49:cc:01:52:03:11:
0b:16:05:bd:b6:14:50:66:d8:61:f0:ab:bb:69:e9:
c9:f4:2f:84:a8:92:33:46:da:f1:aa:f2:47:41:58:
89:18:4a:fc:55:03:1f:32:89:91:8a:95:9c:3e:2a:
ce:c3:8f:e0:f2:cc:04:f5:96:79:f0:89:f9:99:5d:
6a:9e:e0:eb:3e:cd:c0:e4:b7:96:bb:47:2a:e5:79:
7d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:76:2D:8B:2D:98:3A:D6:8D:15:8C:5F:06:F4:2D:7A:76:4C:81:8F
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/l3Ytiy2YOtaNFYxfBvQtenZMgY8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.92.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c3:5e:d3:30:5a:d9:81:92:f2:62:1d:b5:6c:3a:48:0d:a0:
8b:49:9f:e0:b3:3e:9c:e2:25:47:00:bf:c8:ed:b3:62:b0:32:
38:4f:58:8b:ca:ca:5f:49:09:c0:ee:24:8e:5f:15:0c:c4:61:
95:ee:94:47:22:c1:40:19:03:c7:a4:dc:35:33:d9:4d:25:84:
64:c9:41:55:cb:7a:ea:ed:76:6d:97:42:b4:2e:48:36:0d:63:
70:dd:df:5a:fb:cd:ec:a7:f0:38:ff:a8:c3:da:17:0e:d1:d6:
f6:fc:87:0b:7d:4b:3b:20:e4:90:83:17:71:e4:dc:ec:d8:e4:
65:55:22:22:2a:28:66:a9:ff:fd:6f:7e:38:56:36:0c:0e:e9:
22:64:5a:25:dd:f8:d7:07:23:5e:f9:96:b1:ad:74:b6:a7:9f:
27:42:64:84:93:13:f8:7a:d9:d3:fb:53:d5:57:0e:fb:ca:fd:
1f:8f:6b:2a:c8:ee:aa:22:38:54:36:7c:4b:e7:20:c0:43:c4:
f5:42:0f:a2:ca:2b:f8:cd:c4:10:f9:b1:01:ee:d6:b2:d0:eb:
b9:89:34:f2:da:c5:39:e9:34:6c:96:c1:38:d5:40:79:ab:cc:
ea:50:51:95:c8:77:23:2f:f2:d1:5b:8e:b9:3d:cb:c4:7d:e4:
a1:fc:b4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org