Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lUqKj8QQV5DtywJEQyZfqcklb7c.roa
File: lUqKj8QQV5DtywJEQyZfqcklb7c.roa (raw, json)
Hash identifier: 2O3IjukUy6kwWWwcTVzctc+2nyp3wvDt4FUsx6uDmOo=
Subject key identifier: 95:4A:8A:8F:C4:10:57:90:ED:CB:02:44:43:26:5F:A9:C9:25:6F:B7
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BF3
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lUqKj8QQV5DtywJEQyZfqcklb7c.roa
Signing time: Wed 29 Sep 2021 02:38:53 +0000
ROA not before: Wed 29 Sep 2021 02:38:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 10085
IP address blocks: 150.117.112.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3059 (0xbf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:53 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=954A8A8FC4105790EDCB024443265FA9C9256FB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:43:15:e3:ba:8d:17:bf:25:73:ff:cd:0e:
b1:27:bb:c0:ac:5c:5e:01:7e:07:9f:d1:10:20:55:
4f:7b:ca:ef:3a:c7:bc:14:df:eb:2b:4d:a6:af:48:
3f:ee:2a:c1:f9:12:76:56:59:1f:1c:6e:84:69:ff:
63:59:33:c9:43:d8:ba:07:02:8c:9a:0b:03:f9:04:
d5:4b:ed:1e:e4:9b:42:d2:2c:df:4f:25:b8:dd:3d:
f7:a5:eb:bf:20:40:bf:9a:25:28:7f:4c:b8:c2:2d:
53:92:dd:1f:71:ae:32:31:3d:fa:44:e2:59:a8:d0:
6a:25:54:60:09:38:16:ee:7b:90:32:46:22:25:ff:
26:12:63:32:f7:78:09:e2:f1:f2:5b:5e:ee:b8:32:
80:91:17:db:c0:c0:0d:0b:f1:9d:e9:3e:9e:ef:3e:
1f:e1:03:42:b4:a6:5e:0f:3d:62:81:83:7f:0d:53:
2b:d0:2a:53:3b:52:22:85:c2:c7:de:31:42:b8:83:
50:b2:7e:4d:b5:da:f9:f5:d9:dd:93:03:65:33:d9:
90:5a:80:66:40:1c:cc:7f:e9:9c:43:ca:d2:b7:f5:
b6:51:50:56:89:e3:4a:02:bd:53:0e:18:c2:e4:b2:
56:fe:48:6a:91:00:50:8d:93:4a:0d:2f:0c:4a:2f:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4A:8A:8F:C4:10:57:90:ED:CB:02:44:43:26:5F:A9:C9:25:6F:B7
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lUqKj8QQV5DtywJEQyZfqcklb7c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.112.0/21
Signature Algorithm: sha256WithRSAEncryption
03:f5:5d:7a:e1:2b:d6:9c:4f:25:72:67:67:7e:09:26:77:91:
d2:86:41:70:02:76:da:e9:a5:8e:55:3f:cd:49:7f:a4:0f:13:
3c:8e:03:15:47:41:60:77:49:58:00:dc:d7:cc:e2:71:6d:e1:
04:c4:55:02:c7:dc:4d:9a:92:96:7e:34:2c:f1:fb:0e:5a:79:
8a:83:4f:25:3c:f6:0f:3c:2b:6c:ae:0d:25:bf:5b:1a:38:d2:
96:75:6f:df:d5:dd:58:95:65:e8:c7:53:9c:91:79:74:65:5c:
e4:34:25:5c:58:b4:38:a4:04:15:4d:55:ac:b0:25:27:f0:cd:
06:29:a3:7d:d7:bd:e8:d1:44:6c:27:ba:a1:41:50:c8:cf:95:
5e:7d:96:2f:49:20:fb:af:96:42:8c:ba:64:8b:02:1d:6b:20:
65:d1:64:9f:98:ec:e1:d7:7f:09:44:30:66:31:35:de:84:bf:
e2:55:2e:7f:b5:d3:67:ab:f8:94:fb:d0:36:5c:99:80:cc:8d:
c6:fc:f0:7d:f2:f6:82:9d:f0:4d:0a:ad:3b:ea:d3:2e:b0:ff:
19:f1:0d:38:43:13:26:be:52:9a:97:ff:b3:43:62:7f:fd:70:
87:17:77:1d:a4:cb:41:5a:79:8b:ac:be:eb:e3:fc:b7:04:03:
65:10:7d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org