Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/nTOxGfX-hwpryHvtpus45HYDJv0.roa
File: nTOxGfX-hwpryHvtpus45HYDJv0.roa (raw, json)
Hash identifier: 2XQzcK0LQ3hYsga5xNZDnR/EmuO0C8lGwHg0aGef1tY=
Subject key identifier: 9D:33:B1:19:F5:FE:87:0A:6B:C8:7B:ED:A6:EB:38:E4:76:03:26:FD
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0883
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/nTOxGfX-hwpryHvtpus45HYDJv0.roa
Signing time: Tue 29 Sep 2020 10:02:33 +0000
ROA not before: Tue 29 Sep 2020 10:02:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131607
IP address blocks: 150.117.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2179 (0x883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:33 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9D33B119F5FE870A6BC87BEDA6EB38E4760326FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:37:0b:5a:55:bf:f8:dd:c2:48:03:a2:bb:
f4:a6:22:d1:8b:1b:f1:2d:ac:e5:0c:e8:f0:a9:60:
5e:84:23:6c:85:e7:99:80:13:e2:04:e4:5e:5a:87:
01:e8:0a:0c:16:c7:45:c7:53:08:be:e1:7d:70:6f:
c4:b3:73:a2:82:ee:c8:55:a5:e4:8b:2e:e0:c5:10:
00:f1:33:61:9b:21:d5:32:a9:62:c5:37:74:05:7f:
a2:dc:7c:24:de:8e:25:47:d6:74:a2:d0:63:a3:00:
b6:d8:44:ed:61:25:80:cb:cd:ce:d5:9b:4e:0f:81:
bf:f8:d9:30:f0:37:80:8e:9e:04:87:52:60:1d:63:
2c:6d:39:1d:ff:36:5d:fd:13:9b:1f:17:1b:22:a9:
e2:a0:d5:cd:8e:c4:1c:7e:e9:4c:5d:61:ba:4b:ea:
41:96:5d:26:e0:29:eb:ee:70:b8:b4:96:8d:84:95:
a6:bc:77:2e:61:66:13:d6:cb:d3:1e:89:5a:61:ad:
3e:68:46:0d:92:16:ee:91:20:67:7e:c6:4d:3e:99:
ef:60:9e:39:2e:20:cb:27:ce:cf:fa:31:bf:41:f3:
a9:30:da:73:e6:b1:c1:26:ac:4c:09:7b:5f:f2:d2:
7b:ea:99:af:9d:cb:32:ee:19:7d:2b:84:63:f1:79:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:33:B1:19:F5:FE:87:0A:6B:C8:7B:ED:A6:EB:38:E4:76:03:26:FD
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/nTOxGfX-hwpryHvtpus45HYDJv0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.208.0/20
Signature Algorithm: sha256WithRSAEncryption
31:ec:6b:05:9d:5e:41:49:2e:f7:eb:7e:0a:84:39:1f:d3:99:
a2:90:0e:d3:19:71:54:86:bf:98:12:93:4e:4a:40:19:fb:a4:
79:05:08:e3:a6:e3:26:31:c2:f7:f9:44:6b:80:8c:1b:32:a2:
c2:cb:7f:50:5c:df:80:cd:3f:e4:20:83:89:c0:a8:eb:aa:0c:
3f:8c:a9:15:b6:53:30:2a:70:b8:fa:c7:13:39:6e:09:98:6a:
b0:ac:26:f9:12:bf:e8:4b:54:6d:59:d1:07:52:bc:70:cf:3a:
21:53:82:4c:56:36:04:c7:a8:dc:7c:f1:30:17:b7:d7:cb:6a:
26:54:0e:c8:a8:47:04:ce:2f:3a:be:64:b3:b0:5e:66:92:15:
17:d9:af:4e:fd:86:c6:43:18:a5:af:bb:da:71:6c:70:8c:1c:
84:fd:54:4f:7b:0d:bf:94:14:ce:ed:ef:51:98:56:4a:cd:5b:
f8:57:a5:6f:98:5a:35:06:9e:88:24:00:7b:bf:45:8c:7b:c9:
3b:8b:04:f0:c5:22:f7:2d:3a:58:29:49:84:22:f0:31:5d:5d:
ca:bd:26:1a:9c:a8:e4:a8:d6:1a:6c:c9:22:4b:5f:47:7f:8b:
5c:d2:c8:36:d9:ca:f5:fe:b4:1e:48:fa:d0:12:77:87:7d:26:
9f:9e:17:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org