Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lnzqPVSYRK6nno4FLEIxyqMncQQ.roa
File: lnzqPVSYRK6nno4FLEIxyqMncQQ.roa (raw, json)
Hash identifier: AR7DaGfpUnY1jYNZRvJOIhbtZ8/kS4na3hsPoTmWUWU=
Subject key identifier: 96:7C:EA:3D:54:98:44:AE:A7:9E:8E:05:2C:42:31:CA:A3:27:71:04
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DC4
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lnzqPVSYRK6nno4FLEIxyqMncQQ.roa
Signing time: Thu 29 Dec 2022 09:31:50 +0000
ROA not before: Thu 29 Dec 2022 09:31:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 132157
IP address blocks: 150.116.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3524 (0xdc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:31:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=967CEA3D549844AEA79E8E052C4231CAA3277104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:38:80:4a:d3:dc:49:20:c1:fe:08:98:76:
d2:b9:ce:1a:d6:1c:8a:c1:a8:0a:6b:34:b5:9d:2f:
2e:4b:e6:9b:da:cb:7e:fc:01:7f:74:fc:f1:ac:c3:
56:bd:04:f8:72:b3:c6:a9:91:18:c6:10:fb:21:1d:
8a:8e:58:ce:16:6d:31:f3:20:34:b2:64:4b:05:8e:
42:78:b2:6a:ad:0b:13:93:bf:3b:49:c5:e6:3c:9b:
bb:36:95:84:16:3b:92:00:cf:51:f8:d6:e5:bb:ff:
44:4a:4b:9d:19:81:c5:8e:1f:68:76:fa:4b:02:de:
f8:61:50:58:30:a3:83:2d:62:b0:37:c2:b3:e7:73:
77:f7:0a:b4:69:2a:52:98:d9:70:28:d6:be:9a:c6:
12:0c:97:22:88:44:00:0d:e0:f5:b7:eb:2a:f9:ed:
45:95:c2:de:b3:f9:47:16:d6:2d:a2:71:b8:59:25:
11:98:d2:c0:1a:a4:16:a1:44:38:7f:a1:92:f6:d5:
c8:c8:1b:f1:23:26:08:01:e8:4d:dd:32:91:f4:ec:
8b:54:33:8a:4f:c3:00:7f:c9:95:89:b0:e8:ec:d9:
b4:d1:82:52:73:b3:2c:c5:fe:56:2f:8a:2a:dc:32:
1f:22:03:52:59:47:ed:04:12:5a:b8:4d:c2:4a:fe:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7C:EA:3D:54:98:44:AE:A7:9E:8E:05:2C:42:31:CA:A3:27:71:04
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lnzqPVSYRK6nno4FLEIxyqMncQQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.118.0/24
Signature Algorithm: sha256WithRSAEncryption
41:3f:0c:6c:a2:33:08:14:1c:cb:49:4e:ba:a0:4e:11:2a:7e:
00:a5:41:13:57:46:fa:5e:2d:c0:7a:84:23:b1:95:91:22:22:
a7:e3:75:81:38:c4:2c:0c:8a:d1:08:64:20:23:af:e4:f9:93:
60:bb:35:a4:e5:5d:e7:a1:a9:fa:eb:a2:4a:c5:6d:1b:56:ff:
69:85:f7:29:c8:68:bf:e5:cc:68:ce:16:59:7d:fe:ea:70:34:
62:70:b8:ec:3b:eb:5f:dc:73:a1:03:21:36:05:14:b0:c5:0c:
8e:5b:18:7a:cc:26:3c:3f:9c:88:2e:9d:05:16:f6:47:d9:8a:
f6:12:80:26:11:b7:3f:67:f5:26:7c:44:20:a1:8e:e1:10:65:
1b:29:e5:f4:a7:50:a3:7b:90:43:8d:39:6c:dc:61:92:ee:7e:
9f:4d:31:42:7a:ac:b1:e1:33:41:f9:56:8a:93:0e:b6:04:f8:
ff:1c:ed:df:4b:be:70:a7:fa:95:cf:ae:80:d2:3d:33:e4:a6:
ac:4e:bb:34:59:de:5e:f4:8d:2e:7d:3f:83:38:05:81:1c:43:
19:59:0b:b9:81:97:9f:39:4e:0f:d2:9f:08:8e:5d:f3:34:69:
b4:5f:2d:4a:b5:48:bf:7a:ba:10:35:07:62:67:67:86:3c:5e:
ed:c5:f1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org