Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/otkUr1K2q5MteuxzngsHW32ADDY.roa
File: otkUr1K2q5MteuxzngsHW32ADDY.roa (raw, json)
Hash identifier: Jp5LlbfEB8n8qNgXM+iOWkR2GQsXYpgGR4ZtO/YR9W0=
Subject key identifier: A2:D9:14:AF:52:B6:AB:93:2D:7A:EC:73:9E:0B:07:5B:7D:80:0C:36
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/otkUr1K2q5MteuxzngsHW32ADDY.roa
Signing time: Thu 15 Sep 2022 02:39:07 +0000
ROA not before: Thu 15 Sep 2022 02:39:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 150.116.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A2D914AF52B6AB932D7AEC739E0B075B7D800C36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:bb:84:9a:e4:49:c6:8a:98:7a:7f:c4:30:
48:7c:c9:83:56:52:55:1c:20:28:90:63:c9:ac:bd:
96:a1:26:bb:fa:57:aa:d9:fd:c5:cb:3b:56:78:d1:
c5:2b:ed:bf:fb:0e:87:77:a3:88:81:d0:f8:b6:2a:
e0:55:2e:33:ea:33:db:0d:bb:54:8e:aa:06:dc:f6:
be:c3:4a:e8:a0:a8:dc:4f:ed:02:5b:47:89:bb:75:
2e:1c:28:48:3c:59:fd:ad:dc:ee:ba:95:3a:c1:b4:
c4:fc:bb:6c:bc:45:5d:35:9c:69:ab:8e:e4:54:92:
ef:5d:3b:93:a9:93:84:38:74:55:a7:f3:ad:36:5a:
03:e8:69:e5:97:23:d9:b5:52:e8:8e:ee:db:04:dc:
11:9c:67:69:5a:fb:99:9c:9c:63:a8:e0:70:9d:9f:
33:34:df:fa:7b:8c:24:ec:e5:4e:f9:b0:cb:25:18:
b2:a9:db:80:f5:15:78:5b:e9:ec:2f:6c:35:60:a7:
68:05:96:cb:39:b7:2d:cd:eb:5b:11:2c:18:04:6e:
67:2f:0c:0c:b7:b2:3d:0c:3d:0c:01:02:78:33:68:
9d:ce:bb:fd:03:0b:d5:00:3c:8a:e5:de:d9:4c:8c:
f6:c1:25:04:d3:8e:8a:62:a8:fb:f3:84:5f:7b:8d:
6c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D9:14:AF:52:B6:AB:93:2D:7A:EC:73:9E:0B:07:5B:7D:80:0C:36
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/otkUr1K2q5MteuxzngsHW32ADDY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.239.0/24
Signature Algorithm: sha256WithRSAEncryption
86:3f:0f:04:68:ad:de:fa:a2:e8:df:d4:ed:f5:8f:5d:bc:14:
fd:7a:9c:74:d7:d8:af:ac:8d:87:90:75:40:7f:43:14:c6:bb:
ec:79:1b:2b:97:b2:6b:ed:07:0a:37:29:d9:27:f1:fc:b7:a8:
9b:94:96:f6:6f:b7:da:74:67:ef:39:7a:6b:38:1e:66:a1:29:
97:1d:3e:a3:a4:7a:2c:fb:da:b2:a2:be:d9:d5:50:37:93:3a:
33:71:52:01:fb:c0:67:1f:a3:2d:44:7d:86:15:7d:e2:a1:01:
76:9a:ef:ec:1c:30:6b:5a:76:1b:aa:fc:35:fe:21:74:e4:02:
a9:5a:a9:95:21:8b:8e:c0:ac:6d:0b:0a:24:d4:a6:3e:40:09:
b4:b4:01:69:7e:43:29:01:86:dd:2d:5c:17:67:93:0e:d7:35:
8c:44:4e:43:12:27:7c:76:03:a1:82:cc:58:24:07:c4:29:75:
1f:77:f6:e1:2b:30:15:93:85:54:51:30:14:50:63:de:9f:39:
51:10:bf:de:33:d1:54:a0:64:f6:82:1e:0d:95:3e:0e:20:05:
68:2d:18:aa:cf:cd:37:7b:bc:b6:53:43:6a:75:22:20:36:6f:
81:6e:a5:ad:be:24:e6:0e:7f:d7:fc:cb:04:a2:43:d7:64:46:
66:f8:8a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org