Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/meuIPHixh0jE-4ASNcGiORalV2o.roa
File: meuIPHixh0jE-4ASNcGiORalV2o.roa (raw, json)
Hash identifier: 8N/olFTOOz+P5oG3F/Gc2TmyRGLfd2x2yo6Mh/Ss5OU=
Subject key identifier: 99:EB:88:3C:78:B1:87:48:C4:FB:80:12:35:C1:A2:39:16:A5:57:6A
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0A62
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/meuIPHixh0jE-4ASNcGiORalV2o.roa
Signing time: Sun 07 Feb 2021 11:49:34 +0000
ROA not before: Sun 07 Feb 2021 11:49:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18419
IP address blocks: 118.150.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2658 (0xa62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:49:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=99EB883C78B18748C4FB801235C1A23916A5576A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:c7:22:19:d4:d6:5d:77:d6:f2:18:1b:44:
57:74:77:ed:c4:2b:20:71:dc:ae:27:13:3d:b6:c3:
3a:42:c6:18:f8:31:6d:46:54:31:82:03:96:cb:f9:
b6:91:5f:23:ba:91:8a:c4:fa:4b:83:c0:bf:7f:3c:
d1:73:66:bf:6f:20:1e:39:45:90:98:d0:06:6d:f2:
ea:bf:3c:70:4c:06:90:db:46:50:f4:c8:04:69:5e:
7b:c9:21:00:0f:78:a4:fe:3a:41:5b:b1:52:9f:cb:
db:23:a3:71:c3:58:34:f6:fd:05:4a:34:96:0b:a4:
6e:e9:47:3d:7d:70:72:5a:ad:11:86:6a:08:26:82:
c6:d9:b5:df:8f:15:8f:07:f8:e0:0e:c6:36:42:bc:
79:86:5c:46:90:fe:ec:c5:1e:e9:42:5a:13:72:4b:
a0:3b:2e:6d:21:05:33:65:03:71:5c:e9:ea:ef:7b:
ff:d5:8a:cf:59:ab:3f:ad:1b:d1:32:9d:73:b3:64:
50:5f:e9:c0:b4:f5:be:67:c7:aa:bf:ba:25:05:0c:
db:e9:dc:41:aa:3b:19:de:ba:28:4e:81:f3:22:51:
9f:fa:6c:d8:77:68:01:49:06:0f:03:3d:fc:3f:b1:
3b:67:8b:f5:05:e1:5c:d9:58:9e:ba:6d:58:c6:f5:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EB:88:3C:78:B1:87:48:C4:FB:80:12:35:C1:A2:39:16:A5:57:6A
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/meuIPHixh0jE-4ASNcGiORalV2o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.192.0/19
Signature Algorithm: sha256WithRSAEncryption
03:ac:0c:3a:0b:ba:eb:98:c7:3c:12:0c:60:0f:92:80:e4:fb:
52:c5:b7:ab:35:58:a2:9a:9c:b9:c8:a8:fb:60:2d:58:0c:06:
48:97:37:cc:f1:da:2d:e5:84:7a:61:b1:fb:6c:48:12:3b:ac:
18:ce:1b:06:ad:0b:81:86:70:62:26:9b:c9:0c:fc:c7:15:a1:
73:f3:3c:43:14:e3:d6:9f:4b:8e:30:89:01:a3:c4:a0:47:aa:
b7:76:84:0e:a3:f6:ec:23:ff:7a:fc:5e:c5:52:5b:60:84:5c:
06:c9:7c:6a:f1:d8:db:90:96:e7:26:83:69:ea:82:1b:bb:96:
dc:b8:d1:3b:23:72:54:c7:64:fa:5f:0c:8e:1b:73:4e:45:d8:
e2:6b:85:da:5b:ff:0a:e2:f5:85:41:40:41:e2:d2:31:38:a8:
e8:0a:0a:3d:88:9f:7c:58:1f:c2:f6:ed:ca:9d:82:13:f8:b0:
c9:ed:7e:6e:00:91:af:7a:9f:ea:c3:15:de:bc:19:37:5e:dc:
d0:1b:5b:0f:be:5a:f7:f3:e4:4b:fc:a5:c8:38:66:a2:ae:51:
8d:84:18:89:da:3f:b3:93:99:f8:58:ee:1a:31:90:8a:23:cf:
6c:d9:57:24:6b:2c:fb:69:df:47:14:26:10:9f:c9:b2:1c:a3:
0e:63:d5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org