Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/njF7xjGOlAagZv6Hanz2Ee-henk.roa
File: njF7xjGOlAagZv6Hanz2Ee-henk.roa (raw, json)
Hash identifier: XwdiHvr7WE2ABM6ujwRa6biey/g24x1wWlQikCrmwOA=
Subject key identifier: 9E:31:7B:C6:31:8E:94:06:A0:66:FE:87:6A:7C:F6:11:EF:A1:7A:79
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0B2C
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/njF7xjGOlAagZv6Hanz2Ee-henk.roa
Signing time: Sun 07 Feb 2021 13:16:17 +0000
ROA not before: Sun 07 Feb 2021 13:16:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 150.116.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2860 (0xb2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 13:16:17 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9E317BC6318E9406A066FE876A7CF611EFA17A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:ec:92:c1:ad:52:10:47:c5:5d:2c:96:13:
10:b1:39:bf:21:27:62:f4:2c:01:09:e9:bf:83:c4:
23:00:ac:fa:50:17:a9:45:b9:f1:58:2a:dc:82:97:
cc:6c:49:5e:30:b3:ed:41:4c:ec:9e:6a:87:5a:9c:
6e:45:e1:13:5f:3a:d1:43:63:f1:f5:88:26:d7:b5:
eb:4f:df:be:ca:f4:93:08:50:31:a7:08:de:97:32:
e3:e7:cf:8e:8a:13:36:11:5b:33:98:6e:6c:5e:11:
d8:11:1c:b8:27:2d:cb:02:ca:7a:c2:ae:63:3c:b9:
6c:fa:c7:64:3c:2b:9d:22:c3:2c:0a:f0:05:b6:84:
80:7f:20:3a:1a:0f:17:73:58:5c:40:93:6d:04:1c:
23:7e:d1:1d:10:80:c1:69:f2:fb:a4:6c:80:14:27:
12:2a:9d:d1:b5:55:24:a7:f4:52:53:2b:63:57:cb:
18:95:85:cd:aa:ce:f3:53:94:78:3e:6c:7c:c8:d6:
ea:0a:42:d6:b8:0f:8f:c4:db:35:d4:c1:33:d0:2a:
6e:d4:06:4f:ac:8b:f1:47:79:a5:1f:9b:d7:fc:98:
57:94:f7:6f:13:9a:92:13:a9:ce:83:c1:b2:33:94:
48:6f:df:aa:52:44:3c:52:39:ff:b9:e0:e0:a5:19:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:31:7B:C6:31:8E:94:06:A0:66:FE:87:6A:7C:F6:11:EF:A1:7A:79
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/njF7xjGOlAagZv6Hanz2Ee-henk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.120.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:87:6b:a2:1d:43:5c:c6:8d:ec:32:bf:a6:36:cf:56:b6:53:
d7:09:d5:19:bc:b0:ae:cd:40:a4:0f:95:0c:1a:fd:17:ef:f3:
8c:fa:17:d9:69:c8:f5:b4:b2:02:2d:03:3d:62:5a:22:3f:21:
c8:ec:0a:de:ba:e4:b1:ab:2c:e9:5d:06:4a:cd:e4:47:6b:52:
c5:c2:97:a2:be:7e:78:df:30:dd:ef:70:6d:23:57:07:d5:08:
99:cd:4d:ba:0d:01:17:08:ea:81:ed:cb:51:af:a1:8b:d0:9d:
16:cd:48:24:dc:0a:f6:9d:30:f4:c5:ab:bf:27:0f:41:e7:5c:
dc:85:f1:03:7b:4d:0b:48:d7:cd:49:cc:8d:b5:b4:1b:54:74:
f1:9b:81:ea:1c:24:2b:7d:d8:8e:19:5b:6c:ce:98:07:2e:06:
b1:06:9b:f1:ba:d1:a2:c1:97:64:0d:6e:84:13:e4:b5:93:59:
4b:b9:39:fa:86:0f:45:33:bd:91:5c:8f:9e:c3:a4:c5:2a:c7:
4e:fa:3d:1d:db:fb:b2:cc:be:5c:25:b3:a9:ec:85:22:15:62:
b1:19:da:6c:4f:19:b1:b9:ab:49:65:6f:38:31:f3:87:9d:62:
80:a8:38:7a:b2:f9:52:2e:51:72:e4:a5:ad:24:73:0d:10:e7:
b5:d4:35:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org