Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/q4mOVXdCMkPNG52R4Sy1G_0M-qs.roa
File: q4mOVXdCMkPNG52R4Sy1G_0M-qs.roa (raw, json)
Hash identifier: 09klMmHj/CLiPQ6vHHNgc1tXTd2ROji9iO+EbyAcoac=
Subject key identifier: AB:89:8E:55:77:42:32:43:CD:1B:9D:91:E1:2C:B5:1B:FD:0C:FA:AB
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0864
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/q4mOVXdCMkPNG52R4Sy1G_0M-qs.roa
Signing time: Tue 29 Sep 2020 10:02:25 +0000
ROA not before: Tue 29 Sep 2020 10:02:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148 (0x864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:25 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AB898E5577423243CD1B9D91E12CB51BFD0CFAAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:27:a4:b2:d1:e7:f8:56:fb:d3:90:63:b0:
ec:3a:86:41:b6:6d:71:b5:7d:81:a0:0a:05:25:da:
30:23:82:55:71:0b:bb:22:ab:a6:2b:65:28:4b:8e:
9d:6a:41:fc:25:dc:aa:27:78:28:fb:7a:c2:25:34:
3d:6e:0b:3b:4b:21:bc:ed:2a:6f:f5:07:12:48:a6:
87:89:65:34:5b:2f:b5:62:ae:63:a7:d9:b3:ce:3a:
74:c1:42:96:6d:20:32:b6:6c:66:01:92:92:2c:8a:
99:49:3a:ac:6b:92:36:45:5c:31:c2:6e:6a:d8:40:
2e:64:58:34:a2:dd:27:99:ef:77:4c:aa:13:0d:d4:
0d:dc:99:74:48:81:f4:32:9a:9d:0b:d9:9f:b2:17:
ef:e8:36:83:48:c5:45:2e:23:38:20:20:cc:2a:15:
eb:0b:8a:a2:60:bf:26:37:80:a9:85:65:82:64:46:
82:65:b4:f2:97:94:ca:67:59:8d:b6:f8:db:21:52:
38:22:82:0e:12:60:0b:17:d1:7d:ab:d9:04:ac:98:
93:02:9b:c0:17:85:ce:1a:58:2f:a2:99:cf:0a:1d:
17:1e:fa:4a:84:08:b5:b0:d3:52:e2:40:78:7b:78:
34:50:c4:a8:a8:20:ca:d9:fc:98:a1:d4:c9:db:2c:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:89:8E:55:77:42:32:43:CD:1B:9D:91:E1:2C:B5:1B:FD:0C:FA:AB
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/q4mOVXdCMkPNG52R4Sy1G_0M-qs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.96.0/21
Signature Algorithm: sha256WithRSAEncryption
36:62:d2:9f:ba:fc:dc:f4:3a:50:0f:0a:64:28:7f:11:1c:49:
18:85:a2:d0:ee:e4:52:0e:6d:85:13:75:fe:1f:e0:e3:4f:65:
c7:a3:3c:c9:dc:61:2a:f5:43:c8:62:13:2d:e9:0c:d9:b6:b9:
c5:90:55:1a:b7:76:4e:33:13:7e:4a:9b:f3:f1:48:d6:07:b0:
0e:f1:07:d1:4e:55:40:29:43:12:28:26:23:f9:9c:8a:29:cd:
09:7b:1b:ac:53:4f:48:ce:50:89:c9:95:f0:0a:fe:b2:a7:e3:
95:1c:b2:37:56:dc:9f:84:d1:e1:24:ce:8b:09:9f:12:b8:86:
6a:5a:df:1d:56:a6:39:c8:dd:6d:f5:0e:64:94:3f:25:da:6a:
25:6d:f1:41:e2:71:13:aa:cc:41:f6:3a:93:49:c7:12:af:2c:
b5:ec:b5:1e:c6:66:b4:60:5b:d4:58:16:6b:0a:ba:dc:ae:f0:
08:98:5a:65:8c:b4:89:3e:12:f9:52:12:a4:08:51:fe:b6:a0:
8e:39:ff:d0:4d:06:72:60:55:a8:d8:27:58:46:e8:ea:80:4e:
fb:21:e5:05:77:66:9d:63:b8:3d:55:bf:40:46:29:9e:ed:e8:
a2:e4:de:79:04:03:ba:6d:90:2f:2a:61:c6:42:4d:a3:70:05:
3c:a1:f1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org