Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/nBjpUEjqvQSjfzVJFe8Wm4pK4as.roa
File: nBjpUEjqvQSjfzVJFe8Wm4pK4as.roa (raw, json)
Hash identifier: iwbLXRRluDGzc2bG0crOOnXwcSMe7BuJsFWBg2dXW+U=
Subject key identifier: 9C:18:E9:50:48:EA:BD:04:A3:7F:35:49:15:EF:16:9B:8A:4A:E1:AB
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DE8
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/nBjpUEjqvQSjfzVJFe8Wm4pK4as.roa
Signing time: Thu 29 Dec 2022 09:32:00 +0000
ROA not before: Thu 29 Dec 2022 09:32:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 150.116.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3560 (0xde8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9C18E95048EABD04A37F354915EF169B8A4AE1AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:a1:e9:8d:cf:55:87:54:6c:0c:3e:8d:ec:
9c:72:60:f9:15:02:1b:b4:28:83:df:6a:d9:d3:bf:
c9:5b:02:e7:0c:9e:2b:9d:35:58:f7:72:fc:7f:90:
5d:c0:f0:29:05:5e:4d:3e:6e:76:7c:79:6e:93:5a:
a1:a6:91:fb:b8:08:38:cb:ef:f5:92:e7:95:69:83:
63:85:21:33:c4:7d:69:73:07:70:76:f0:f1:10:cb:
9a:79:c3:c2:e7:03:5e:23:fb:23:79:c1:6a:04:76:
bc:fc:f8:be:3a:31:3e:13:70:a8:cc:5d:c2:a7:ef:
1e:91:ce:00:08:57:86:25:49:c6:56:cd:a7:29:b3:
7f:0d:45:18:01:98:e7:de:ae:bc:f9:5f:d4:9e:54:
5d:3a:54:cb:57:e8:ce:df:ed:d2:cf:29:21:6f:df:
4b:52:05:e7:92:38:ef:5f:c5:8c:3a:cf:0c:43:6e:
2f:ab:95:9a:4c:e8:06:df:7c:2a:cd:f7:b6:12:9c:
11:00:c4:e2:76:56:9b:a2:ae:5d:76:04:18:62:04:
40:d7:e7:18:47:37:a1:9e:76:c8:f7:f0:e3:a5:c3:
c4:00:6b:c5:7d:e7:0f:ae:0b:ba:7f:28:5b:6d:c5:
53:e1:63:d6:cc:f4:6d:ff:04:9e:8a:68:dd:9e:d6:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:18:E9:50:48:EA:BD:04:A3:7F:35:49:15:EF:16:9B:8A:4A:E1:AB
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/nBjpUEjqvQSjfzVJFe8Wm4pK4as.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.128.0/17
Signature Algorithm: sha256WithRSAEncryption
76:a1:d3:6a:69:4c:bc:cd:5d:ea:3a:e6:13:e8:e4:0b:bb:ce:
01:be:2c:39:9b:6c:56:c4:c3:2b:b2:09:fc:e3:88:d3:72:8a:
af:34:75:c4:b5:4f:29:07:1d:75:28:7f:8a:7b:1b:49:1c:20:
cb:00:88:2b:d8:18:a3:85:70:de:11:64:79:fe:61:a0:6e:c5:
d1:30:84:fd:18:2b:a4:a2:ad:7d:5c:77:8c:df:a3:31:22:78:
3d:6b:65:3f:bf:b0:fa:8c:a8:b2:5e:32:c2:0c:4a:0d:82:0b:
a4:ec:22:c2:f6:94:96:5d:3a:e5:b0:7c:d5:b9:78:8c:5b:7d:
8b:7e:2c:81:5a:da:d4:59:36:35:13:aa:e5:f5:73:67:23:ec:
6e:fe:5e:f9:7e:57:19:89:f2:44:8b:21:d6:58:23:bb:61:00:
14:dc:79:86:a4:95:27:79:04:94:ff:c5:5f:a8:f7:c3:54:8f:
93:c9:0a:0a:a6:3c:23:0d:3b:0a:37:ed:9d:34:16:d8:a4:83:
d2:b0:ea:e8:fa:fe:5d:36:26:c1:0c:ad:d2:75:de:e4:bd:c7:
77:b0:1a:2b:5c:cb:11:c5:46:4d:d6:27:60:cc:a4:2c:d5:18:
d4:d2:62:75:76:80:78:dd:f9:cf:77:a9:13:ae:5c:d9:aa:cb:
89:b2:01:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org