Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/oMzyOkhz2IWDDHlPMwYyB-GGoiw.roa
File: oMzyOkhz2IWDDHlPMwYyB-GGoiw.roa (raw, json)
Hash identifier: dRp69ht41/OXjjjjEOoiqedr6RDemNkBV7sm2DMNm3c=
Subject key identifier: A0:CC:F2:3A:48:73:D8:85:83:0C:79:4F:33:06:32:07:E1:86:A2:2C
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/oMzyOkhz2IWDDHlPMwYyB-GGoiw.roa
Signing time: Thu 15 Sep 2022 02:39:25 +0000
ROA not before: Thu 15 Sep 2022 02:39:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 150.116.168.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A0CCF23A4873D885830C794F33063207E186A22C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:4f:5f:6c:12:e5:b1:db:58:eb:44:9c:11:
0d:60:a8:33:20:0c:e9:63:43:fa:4f:48:86:7a:a8:
97:9f:d7:17:d7:1f:55:75:b9:24:c3:45:c7:91:df:
bf:72:e1:eb:99:0b:d7:9c:1e:77:20:c4:da:81:45:
ab:61:31:09:21:fd:7d:27:ec:d7:68:5f:ee:25:43:
ef:49:47:4a:e3:be:29:cb:83:d6:e5:55:f4:00:68:
2f:db:96:3c:c0:87:f1:b5:08:45:55:6e:30:79:7d:
d2:de:28:89:90:c3:41:71:67:c8:9a:12:37:bc:e4:
13:ba:e1:38:c4:8e:6e:5f:d2:dc:a9:c9:52:4d:26:
30:ea:6d:a9:8a:a7:1d:91:03:4a:3b:95:77:96:52:
4d:cf:c9:b7:98:74:3e:c7:5c:ea:21:19:14:26:3e:
5d:54:d7:a6:65:6f:f5:48:dc:32:f5:b9:07:37:d2:
41:37:3d:02:61:ed:b0:1c:d8:e4:9c:d2:57:7e:09:
34:ce:ff:ac:f3:88:0f:2d:a4:72:ea:51:d5:33:12:
ee:82:18:df:43:0b:7c:c2:20:22:69:5b:e5:3d:1c:
7e:6b:71:16:f8:76:e6:c5:16:e4:2c:64:fc:be:6f:
3b:b6:c9:03:4c:0e:53:3d:9a:02:f8:10:2f:00:5b:
68:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CC:F2:3A:48:73:D8:85:83:0C:79:4F:33:06:32:07:E1:86:A2:2C
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/oMzyOkhz2IWDDHlPMwYyB-GGoiw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.168.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:88:37:4d:9d:75:a8:ce:64:b0:47:84:dc:67:9d:df:49:d3:
f0:4f:df:ec:b9:8a:7f:31:58:64:a1:11:5d:fe:a8:fc:21:8d:
b5:aa:d0:69:b2:88:40:70:c7:96:01:48:68:33:f5:db:0e:cd:
10:9a:e0:c5:33:a7:ef:67:28:28:d0:da:06:ce:6d:4d:8e:72:
a2:39:ce:67:c4:09:e0:8e:79:31:de:c5:b8:37:8b:ca:9b:41:
c8:79:17:fe:50:59:2b:10:d9:0f:ca:28:5f:f1:c4:68:90:03:
f2:d6:e5:2a:ef:dd:17:f4:45:3d:d4:9a:27:0a:8b:52:59:87:
1f:08:f7:2f:24:d3:be:07:e3:75:1e:49:cf:e3:d4:0a:f0:37:
d4:0e:3e:a8:15:45:97:59:a8:95:4b:8f:75:be:a7:d0:9d:3c:
17:c4:36:de:ee:a0:38:c5:47:2d:83:ac:0a:f9:70:ac:5c:2c:
aa:b4:8a:df:0b:57:33:92:55:ab:c5:83:fd:af:36:96:4d:51:
3f:88:bb:1c:bb:c0:56:26:53:5c:52:d1:8e:05:02:31:6d:0b:
24:be:c5:e7:45:35:b8:1d:b2:93:2d:9b:37:5d:3f:d2:b2:ad:
3a:e9:0f:0d:64:8e:4b:6f:e0:a0:b0:f2:b4:2f:91:4f:9f:ab:
f2:54:fc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org