Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/psdEmpQ_aBiH9sR7Fd6VH8WtKts.roa
File: psdEmpQ_aBiH9sR7Fd6VH8WtKts.roa (raw, json)
Hash identifier: jJcUMt87Uv2996PLJd7Rck6DSK9KuceT7YR7lpuiNsY=
Subject key identifier: A6:C7:44:9A:94:3F:68:18:87:F6:C4:7B:15:DE:95:1F:C5:AD:2A:DB
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DF3
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/psdEmpQ_aBiH9sR7Fd6VH8WtKts.roa
Signing time: Thu 29 Dec 2022 09:32:03 +0000
ROA not before: Thu 29 Dec 2022 09:32:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131607
IP address blocks: 150.117.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3571 (0xdf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A6C7449A943F681887F6C47B15DE951FC5AD2ADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:9a:80:bf:c8:a1:95:15:40:07:26:d7:7d:
02:74:9c:d9:27:85:c9:e8:4a:5a:5b:a7:7f:cf:39:
da:21:76:51:80:ba:ff:db:17:e0:7a:44:23:bd:d8:
76:ec:6f:4b:8b:e2:6b:19:f5:ad:02:47:bb:55:fe:
93:67:86:ff:89:2d:18:74:d7:7f:d3:d0:a3:49:b7:
0c:1e:d4:a9:ac:3f:0d:4c:e5:9e:38:dc:40:eb:71:
9d:5a:99:39:7e:29:dc:61:d1:e5:fe:21:8e:d3:e6:
e3:1d:d3:89:14:12:5b:2a:d2:c9:d3:80:c6:bf:74:
d8:22:43:dd:ee:6f:2b:04:8f:0e:31:a1:69:83:4c:
3a:a7:0b:02:2e:98:06:7e:ab:83:ba:9b:b7:12:1e:
59:a6:9b:ca:c9:44:8b:61:b0:19:1a:6f:66:1c:52:
c7:2c:82:cb:a3:60:32:f5:66:b2:c5:0f:e4:0f:5a:
64:14:cb:80:01:20:cf:13:ad:a2:ec:88:2c:35:f4:
f7:9b:88:0d:70:e6:6e:f0:e1:6c:7a:45:3c:25:03:
c9:31:1c:8e:04:b9:30:6d:44:a1:c4:16:05:5f:1f:
81:ab:80:ff:05:aa:30:41:dd:a8:40:95:25:c7:70:
c4:86:77:82:2f:a4:8d:fd:e1:30:a9:18:65:e5:04:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C7:44:9A:94:3F:68:18:87:F6:C4:7B:15:DE:95:1F:C5:AD:2A:DB
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/psdEmpQ_aBiH9sR7Fd6VH8WtKts.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.80.0/20
Signature Algorithm: sha256WithRSAEncryption
59:88:8c:af:08:fc:34:21:0c:af:33:63:52:95:ed:96:5d:62:
1b:8b:e4:d5:e3:c3:d7:b4:4f:66:80:5f:38:07:b1:5c:c3:03:
7b:f9:44:eb:9f:8b:b8:e9:e4:db:8d:db:f0:a0:17:45:86:da:
40:54:eb:8c:3b:c7:87:16:a0:6f:8d:78:58:cf:04:28:e2:d8:
06:71:a6:bd:f0:4d:83:fa:8b:6c:73:b0:73:c9:17:b4:2c:7e:
69:aa:b7:21:fd:15:70:fa:9c:08:4a:fe:ce:b5:40:be:35:7b:
e6:33:9f:a3:28:7a:07:a0:08:4d:51:67:73:40:66:fe:7b:46:
b4:ec:ec:3a:69:4f:26:1b:2f:b7:3d:7f:22:ac:0b:90:2e:a4:
03:ae:35:01:2e:7f:1e:99:13:e2:b3:d1:be:d3:7d:33:1e:67:
90:8a:c5:93:05:6a:9e:98:7e:81:fd:97:48:69:81:43:25:f0:
8a:48:c2:5a:98:5c:36:63:50:83:22:be:cd:38:ed:4e:04:f9:
a3:28:93:12:32:c7:30:6d:b0:c6:1e:1b:70:4f:39:ae:0a:3e:
d9:07:74:f2:87:94:e8:7d:1a:fc:09:6f:97:96:aa:ca:cb:53:
82:70:dd:f2:5d:3e:3e:7e:e5:f8:2e:0b:39:89:8a:42:9c:31:
82:6f:82:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org