Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lHYI__Ezgt3F6BQcDqP089i1gWU.roa
File: lHYI__Ezgt3F6BQcDqP089i1gWU.roa (raw, json)
Hash identifier: hLIsI35qjhnYfJiAco7qaVRoPeQLEK3LJy6SpZXjvXc=
Subject key identifier: 94:76:08:FF:F1:33:82:DD:C5:E8:14:1C:0E:A3:F4:F3:D8:B5:81:65
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E1E
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lHYI__Ezgt3F6BQcDqP089i1gWU.roa
Signing time: Thu 29 Dec 2022 09:32:16 +0000
ROA not before: Thu 29 Dec 2022 09:32:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 150.116.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3614 (0xe1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=947608FFF13382DDC5E8141C0EA3F4F3D8B58165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:3c:16:28:f6:c9:a5:e8:f5:54:f5:df:90:
22:71:34:ce:e7:6a:15:86:ef:4d:04:ae:e9:30:60:
c6:14:bb:55:a6:bc:38:90:cf:eb:7f:34:a7:2d:46:
2b:0a:bb:d1:30:15:ec:13:8c:ee:5f:3c:89:71:eb:
a2:df:76:28:d2:ee:77:73:a4:40:d9:de:b0:9f:38:
81:63:ba:3f:86:ae:af:05:ba:4e:3d:d1:40:25:0a:
b0:f2:4f:15:e7:70:17:0d:42:37:bc:e5:57:97:7e:
da:f0:1a:8d:32:66:ff:23:92:00:23:ed:ef:f6:0e:
2d:d1:c0:4f:cd:b7:6e:04:9d:d1:94:4f:1b:85:ec:
c0:23:f2:3e:3e:a1:67:70:0b:e9:9e:98:79:97:33:
1d:6d:c7:4a:8a:24:98:a7:e6:05:0e:e2:b5:9c:c8:
6f:3d:5f:d4:9b:ee:fe:e6:ce:88:1b:91:a5:78:43:
49:f7:dd:6d:8e:a3:ab:89:eb:64:ba:7b:93:f5:92:
a0:3f:4a:80:2c:d2:91:55:43:ef:29:3c:34:f1:d4:
3a:64:e4:a6:eb:20:40:2d:99:50:b9:14:43:f6:b6:
27:f6:d8:ea:6e:5c:ef:48:9d:8a:3e:b1:4c:fa:19:
56:29:e5:22:59:6c:82:9a:39:b7:57:f8:c9:7a:c5:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:76:08:FF:F1:33:82:DD:C5:E8:14:1C:0E:A3:F4:F3:D8:B5:81:65
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lHYI__Ezgt3F6BQcDqP089i1gWU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.160.0/21
Signature Algorithm: sha256WithRSAEncryption
15:d4:05:e1:09:77:a1:f4:d6:3a:80:a6:35:5d:c8:0a:43:8a:
c2:d3:18:97:a9:7f:1e:74:f7:7c:50:67:10:95:ff:44:6c:d4:
7c:a7:47:f4:ec:f5:50:0f:6a:e9:8a:38:3e:40:1c:d4:70:91:
32:42:43:be:94:4d:45:6b:ec:98:b2:1e:63:b7:ec:c6:df:84:
43:b4:4c:a8:c4:f1:1d:68:a2:cd:ea:a4:28:22:a9:03:90:9f:
10:23:97:7b:69:77:05:6f:60:c5:04:6b:04:c9:18:af:3a:13:
66:1d:49:7e:8b:58:c1:70:54:19:46:e5:a2:1c:77:9a:a1:c6:
21:69:a2:2e:4b:e7:74:e0:bb:57:6c:15:93:85:98:5f:70:53:
37:fd:76:2e:64:36:ec:2b:00:8e:93:3c:76:0d:6c:d7:82:62:
82:c5:14:0c:f4:83:79:7c:01:7f:99:2a:29:27:ad:be:17:42:
e1:41:b8:7b:cf:e8:48:bf:b3:9a:b3:f1:c4:f0:95:d4:dd:71:
1b:2b:bf:41:ed:c9:32:34:a2:e5:d4:43:aa:c9:e9:f3:40:4c:
2c:20:70:e5:57:f7:12:d7:e6:ef:62:b4:b0:22:b9:63:6e:54:
dc:3f:9b:c2:0d:ef:01:25:d0:30:4c:e6:47:23:27:79:e9:be:
ee:3d:4b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org