Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/qCgqWJITpiuL9ULKFwetj7dFbQE.roa
File: qCgqWJITpiuL9ULKFwetj7dFbQE.roa (raw, json)
Hash identifier: odUAA1jvnCcA2IyGMl/LgiqQlsQQjmjckG+L/DhrJdE=
Subject key identifier: A8:28:2A:58:92:13:A6:2B:8B:F5:42:CA:17:07:AD:8F:B7:45:6D:01
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0A5E
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/qCgqWJITpiuL9ULKFwetj7dFbQE.roa
Signing time: Sun 07 Feb 2021 11:49:31 +0000
ROA not before: Sun 07 Feb 2021 11:49:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18419
IP address blocks: 118.150.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2654 (0xa5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:49:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A8282A589213A62B8BF542CA1707AD8FB7456D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:e1:8f:0c:fd:1f:5f:f2:e1:06:1e:c2:8e:
9d:1b:79:a9:be:2f:02:b2:ce:76:1f:99:25:f7:0e:
b7:88:2f:d7:63:c1:38:1f:32:94:0d:aa:c5:0a:98:
0b:35:5c:be:55:f5:66:ce:5b:e6:92:ab:5d:09:93:
ce:df:a3:04:de:e8:b8:69:9e:53:dc:86:c5:1a:1a:
60:ae:8e:8b:f8:0a:95:c1:1f:bb:f6:c1:a8:9e:65:
d6:a9:50:8b:5a:23:7d:5d:99:1b:ff:64:ab:69:ca:
80:b9:b1:c3:1d:a4:44:94:82:99:fc:1c:e1:a6:33:
41:11:97:95:a2:63:6c:ed:5d:b8:7a:ad:af:a4:e9:
d5:c8:07:46:c3:3a:c6:7d:e6:bb:91:1e:a8:e4:22:
6c:15:8b:08:21:1c:8c:35:77:ad:fb:d7:16:99:22:
1c:77:27:26:22:d8:b6:7d:6d:8f:c1:26:3b:31:9f:
a2:83:2b:ba:b0:51:5c:03:ce:4c:1f:e1:51:11:91:
3f:08:20:7c:a6:99:54:1c:46:94:f3:55:a0:e1:a9:
25:19:39:62:87:e0:d6:79:ce:04:45:b9:1f:f4:68:
58:cf:ad:9f:90:10:c1:3f:6c:d9:e7:06:44:c6:d6:
36:3c:14:63:b0:c9:40:73:31:aa:4b:10:48:69:5e:
cc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:28:2A:58:92:13:A6:2B:8B:F5:42:CA:17:07:AD:8F:B7:45:6D:01
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/qCgqWJITpiuL9ULKFwetj7dFbQE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.0.0/17
Signature Algorithm: sha256WithRSAEncryption
41:f1:ea:c0:9a:7a:2e:1d:e3:56:b1:73:b9:d3:e9:56:c2:2e:
36:ba:9a:a3:d3:51:21:2f:54:d9:83:a1:e3:3b:cb:22:37:d3:
b0:13:40:ae:a6:11:e9:c2:e9:bc:82:bd:97:1a:43:32:93:bf:
24:28:89:f1:d3:46:4f:3f:ec:b4:da:74:e3:9a:1d:f3:c2:09:
e0:4c:2e:d8:1a:a2:a4:d9:0d:31:9f:17:66:67:d3:12:bc:4a:
f9:ae:03:e7:0c:84:fd:8d:7b:34:19:cc:42:e8:8b:b0:03:16:
c5:b7:06:fe:16:30:70:de:e0:1b:a6:54:5b:d2:08:e4:37:12:
c5:10:f9:16:46:8f:02:8b:a3:ec:da:8d:fb:81:d4:42:79:22:
f2:59:45:08:4e:1a:84:5b:2f:fc:85:3c:99:1b:c7:c0:67:66:
dc:bb:42:04:7d:b5:0e:51:43:54:ae:f1:dc:a7:42:0b:bb:3c:
85:27:74:55:0b:3d:b2:a8:fa:8e:25:03:9d:14:52:5a:dc:23:
e3:dd:e8:4e:bf:42:f5:d9:fe:0c:fb:16:8b:47:99:ac:f6:1b:
a4:da:d6:5a:e2:55:8e:fb:e9:78:3f:4b:c5:ec:a4:a5:d4:9d:
6c:f6:c3:e5:bf:7d:78:cc:ae:c7:7c:60:b9:f2:9a:16:df:54:
e9:29:e0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org