Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/pO1wCQKCq7_JUfKhMe06Qlws3K0.roa
File: pO1wCQKCq7_JUfKhMe06Qlws3K0.roa (raw, json)
Hash identifier: MMcS8NSVH99NassgifnUWwy3CAs1+irKoKFT6oBCU4s=
Subject key identifier: A4:ED:70:09:02:82:AB:BF:C9:51:F2:A1:31:ED:3A:42:5C:2C:DC:AD
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/pO1wCQKCq7_JUfKhMe06Qlws3K0.roa
Signing time: Thu 15 Sep 2022 02:39:21 +0000
ROA not before: Thu 15 Sep 2022 02:39:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131273
IP address blocks: 150.116.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A4ED70090282ABBFC951F2A131ED3A425C2CDCAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:41:4a:0c:0e:8c:05:94:46:e5:4e:fd:ca:
fa:41:34:57:47:40:2d:33:e1:04:a4:25:20:a8:7b:
5f:2a:e0:ac:e0:35:9f:60:02:6e:70:7b:14:ca:4f:
65:70:ed:8b:49:0f:90:d2:47:34:f7:26:8b:63:5a:
ac:9a:04:d6:52:77:2e:fb:cf:97:0a:65:77:d9:69:
0d:03:11:43:32:f0:59:dd:4e:b8:ea:7f:8d:9b:79:
68:78:34:87:9d:be:d9:b2:a0:79:94:7c:31:b5:09:
7b:9b:67:9b:60:55:02:5d:13:02:6c:8b:ff:00:22:
e1:0b:75:5b:8c:3c:27:60:84:78:99:a4:f5:bd:e9:
6e:3d:2d:3a:b3:8a:70:35:66:b0:f9:fc:04:12:c1:
e1:2d:53:95:66:a2:a2:ae:29:27:4a:c5:7c:9f:c2:
46:aa:bf:d6:e3:c8:65:43:c3:bb:5d:fe:67:38:bb:
37:97:ce:ea:7d:a3:7d:1b:40:2d:26:cb:38:56:94:
0f:6d:91:47:1f:f0:b4:7a:90:94:9e:89:3d:86:a7:
d5:a6:d0:c8:0e:f2:e6:5f:7d:e6:40:12:30:98:7e:
56:82:ca:23:05:db:2a:df:a0:4b:78:1a:35:11:df:
00:57:05:7c:4b:d0:c7:43:6f:a4:6c:33:38:23:d4:
88:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:ED:70:09:02:82:AB:BF:C9:51:F2:A1:31:ED:3A:42:5C:2C:DC:AD
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/pO1wCQKCq7_JUfKhMe06Qlws3K0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.80.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1a:09:52:06:39:01:61:8e:df:f4:d5:cc:40:b7:d6:84:e1:
6c:a6:9f:b5:0a:b2:b4:c6:15:b4:38:fd:d6:57:4a:95:9f:37:
af:ea:91:96:4d:61:82:79:d0:7f:9f:bd:15:7d:cc:49:2a:ec:
6e:15:c5:1e:31:54:88:72:e7:ca:78:4d:fd:a7:50:66:e3:ed:
60:de:84:54:45:b1:44:02:8e:6d:48:c7:9a:a4:53:fd:b4:72:
61:f3:a7:b2:b0:33:34:bc:6f:d9:01:87:46:d4:f0:42:a2:58:
11:56:93:ff:d6:ff:32:16:ab:b3:2b:c8:b1:a6:28:92:ea:25:
5d:92:8a:eb:89:ce:9e:fb:5d:ae:4a:5a:12:08:9d:1a:18:e7:
45:11:08:00:aa:c9:68:d0:0f:f9:d3:1d:26:31:d7:7e:07:6d:
54:da:8b:f4:44:36:22:24:e6:04:4b:64:25:dc:c2:1c:a3:f3:
fe:6b:83:f2:21:6b:96:75:51:58:06:89:de:de:fc:a6:b8:5c:
eb:74:24:5c:33:72:11:e1:00:ed:17:ea:49:67:9c:86:56:49:
6c:6a:78:7b:df:2c:dc:d8:1c:1f:9e:17:7d:03:c8:c1:e9:76:
e7:36:72:7e:47:9f:a6:2b:a8:9f:85:47:e3:cb:75:c9:6a:65:
e7:d4:07:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org