Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/n4x-QChDRT4VE8Uzrp76OUIxGOM.roa
File: n4x-QChDRT4VE8Uzrp76OUIxGOM.roa (raw, json)
Hash identifier: MK8DTVTYsmgLENIIPiq3EKZC2RKcRcVqdDP+lJ0Uv0A=
Subject key identifier: 9F:8C:7E:40:28:43:45:3E:15:13:C5:33:AE:9E:FA:39:42:31:18:E3
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BF6
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/n4x-QChDRT4VE8Uzrp76OUIxGOM.roa
Signing time: Wed 29 Sep 2021 02:38:53 +0000
ROA not before: Wed 29 Sep 2021 02:38:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131607
IP address blocks: 150.117.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3062 (0xbf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:53 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9F8C7E402843453E1513C533AE9EFA39423118E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:6e:ba:3b:72:c9:17:93:f8:ac:2d:87:12:
52:d7:16:b3:63:a5:3c:7e:e7:56:ad:3e:83:0c:4a:
c4:01:8c:79:40:2d:2e:06:15:73:3d:24:46:00:b7:
c8:e7:20:ca:74:90:f5:4c:e5:2d:f4:9e:fe:cc:4c:
ba:a0:49:b8:e7:4d:a0:10:93:5f:70:eb:a6:ce:6f:
8f:60:7a:0b:e0:83:09:fb:b8:3b:b9:52:0c:f2:30:
3c:47:75:24:3f:09:c9:c8:16:3b:b8:95:f0:da:54:
88:2a:88:24:5e:45:f6:43:1b:8e:24:6a:cd:3c:31:
99:1e:8e:38:cb:45:30:a0:4f:50:1f:94:41:f2:36:
34:dd:9c:b1:29:e2:8d:93:c0:95:8e:07:46:29:9f:
ec:52:39:23:75:2f:91:c6:84:70:8f:3e:12:21:0e:
2c:5d:2e:1d:c2:3b:b8:85:8f:08:89:29:a5:b2:f2:
40:67:7f:50:32:d7:e4:d3:28:21:5d:8f:74:c5:73:
34:d3:8a:67:d6:26:00:c7:6d:d3:ca:8e:7d:a7:c5:
b4:87:c1:ca:2f:b0:59:77:b5:cb:fe:cc:fa:16:e8:
4f:fb:cf:2b:6c:0d:8f:8c:f3:25:ca:2a:ac:6f:99:
cb:bd:6b:f4:6c:15:a3:89:cd:6c:29:11:82:66:11:
c9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8C:7E:40:28:43:45:3E:15:13:C5:33:AE:9E:FA:39:42:31:18:E3
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/n4x-QChDRT4VE8Uzrp76OUIxGOM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.176.0/20
Signature Algorithm: sha256WithRSAEncryption
73:f6:a3:10:9a:64:4e:1c:02:8f:48:c1:d3:fd:03:88:72:81:
11:c6:20:e3:50:e4:4e:1b:8a:9d:79:4e:4b:8f:55:9d:54:1b:
0e:c1:d8:8a:83:2d:dd:e0:34:c2:bd:4e:90:4d:ed:1e:04:4c:
6d:1f:25:f9:f5:54:a6:46:80:b6:f6:fc:be:a8:54:fc:95:2c:
0b:d1:aa:ef:4c:4a:12:94:e0:fb:30:6d:af:7b:13:58:c5:4f:
9a:6f:f7:8c:38:82:ce:42:a4:79:06:99:e0:95:b2:43:49:a6:
6f:43:cb:8a:d5:04:64:71:b2:dd:f9:82:69:5c:5f:30:07:67:
c4:90:ca:3b:85:b5:f1:b5:43:15:a9:f8:39:f4:d6:f5:e7:39:
f3:34:88:01:94:c7:2d:9a:df:b3:20:9b:a0:1b:62:43:d2:60:
0c:61:e5:ad:00:5c:7c:9e:8c:74:f5:8f:00:f4:de:6d:30:05:
36:d1:69:52:02:d4:e9:53:f4:ff:5f:9e:28:ff:ee:a8:c2:d7:
4b:6c:58:ef:41:37:77:9d:71:e7:69:b2:59:b9:36:20:cc:26:
e2:89:9d:7e:32:36:6d:09:08:25:0a:93:47:95:9f:14:8c:b2:
fd:0b:cd:28:c6:51:7c:c7:b2:31:78:6c:84:e7:52:a7:77:2a:
b4:9a:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org