Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/rB_byK4CNpU5LEhF6XSY_lBzAsY.roa
File: rB_byK4CNpU5LEhF6XSY_lBzAsY.roa (raw, json)
Hash identifier: DC2OygSlXKtV5ogGq3QX6eBtQoDAjT0kR1Qu1OemHsg=
Subject key identifier: AC:1F:DB:C8:AE:02:36:95:39:2C:48:45:E9:74:98:FE:50:73:02:C6
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0870
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/rB_byK4CNpU5LEhF6XSY_lBzAsY.roa
Signing time: Tue 29 Sep 2020 10:02:28 +0000
ROA not before: Tue 29 Sep 2020 10:02:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17408
IP address blocks: 203.163.192.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160 (0x870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AC1FDBC8AE023695392C4845E97498FE507302C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c3:12:1b:cb:d4:33:0b:f0:fa:82:cf:ec:b2:
33:40:d3:cb:ca:93:cc:50:ab:33:88:ba:d3:a5:83:
b6:98:08:e0:89:91:3b:c6:15:d8:3a:8f:f6:2e:5e:
50:93:69:a4:c4:33:63:31:d2:cb:b8:96:4f:32:1b:
be:98:6f:2c:76:3f:c0:46:bf:48:d0:4f:de:88:b3:
9c:ff:0e:cc:9d:27:8f:57:2b:1f:91:98:6b:82:01:
a4:2c:72:a8:b1:00:a6:39:3f:cc:80:47:ac:95:69:
66:47:2c:d0:3c:a3:a5:2e:60:d0:00:71:39:78:5f:
01:82:c3:9b:42:ce:1b:b6:3d:af:c2:a9:0d:e5:b9:
5e:91:aa:d1:01:d5:b5:f4:5c:27:2e:4e:83:34:57:
4a:97:be:0f:8a:b1:48:11:ef:32:6e:1b:84:58:1b:
31:0b:ba:0b:6f:e3:c5:c6:98:e6:c2:ec:01:ed:00:
cc:f5:e0:dd:11:62:a0:c3:a6:84:98:1a:b3:e8:28:
a6:50:1f:f0:01:bf:d6:f3:0f:6e:28:63:fa:40:bb:
f5:31:4c:b9:9f:f7:ff:c6:47:cf:85:e3:b5:99:dd:
e8:11:3f:d0:93:39:e1:07:ab:12:16:ac:23:77:82:
a3:78:0e:43:76:42:16:30:33:61:9d:c5:6e:65:f3:
dc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:DB:C8:AE:02:36:95:39:2C:48:45:E9:74:98:FE:50:73:02:C6
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/rB_byK4CNpU5LEhF6XSY_lBzAsY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.192.0/23
Signature Algorithm: sha256WithRSAEncryption
57:b1:82:f7:ac:7f:69:5f:b2:6e:a9:d3:b8:e2:fa:cd:b4:7e:
80:fa:69:aa:60:7b:5a:83:00:ba:54:27:d4:e3:8b:89:0f:80:
74:e9:46:f0:47:1b:5a:19:b7:09:af:73:aa:30:bb:3f:71:c7:
74:7f:49:38:9e:77:65:b9:8b:6e:cc:9d:d5:62:7a:a4:a6:d5:
3e:b8:fc:ed:8e:df:50:81:a1:a2:2f:83:16:15:86:76:48:ec:
b0:f4:ff:03:2c:11:2a:1d:eb:5e:06:e5:17:f8:05:eb:9a:3a:
47:78:31:96:9b:11:a9:ac:f3:4c:60:85:d1:45:58:c5:35:2e:
29:2d:22:17:b2:b9:a3:f6:b6:50:ec:62:b8:18:b0:ff:d1:60:
fc:da:77:ed:ec:99:c8:e7:0a:52:e2:24:7f:d9:17:1d:c3:82:
1e:7e:de:80:4e:17:fd:1b:0d:7f:95:7b:d5:72:c0:24:cc:ac:
6c:d1:7e:e1:c1:8b:08:26:b1:31:ba:da:d8:64:96:b3:5d:43:
a8:21:4b:45:b2:c1:50:0d:e5:16:5b:8d:a8:0e:20:f4:cd:8c:
ec:fb:ad:e2:db:99:0e:af:bb:e7:e0:3b:85:b9:25:6a:39:55:
9c:f7:be:dd:2a:c7:18:0d:ab:d8:6b:bf:69:90:f4:34:77:cd:
e8:cb:50:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org