Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/rHrzwDDUa6uYU5MdRBaZfPtOm98.roa
File: rHrzwDDUa6uYU5MdRBaZfPtOm98.roa (raw, json)
Hash identifier: 50OTnwxqnSt5Et1OGfZ4IB3ELAXaKctRe+RomA6s4dA=
Subject key identifier: AC:7A:F3:C0:30:D4:6B:AB:98:53:93:1D:44:16:99:7C:FB:4E:9B:DF
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DE4
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/rHrzwDDUa6uYU5MdRBaZfPtOm98.roa
Signing time: Thu 29 Dec 2022 09:31:59 +0000
ROA not before: Thu 29 Dec 2022 09:31:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 223.26.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3556 (0xde4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:31:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AC7AF3C030D46BAB9853931D4416997CFB4E9BDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:34:d8:2f:d1:5d:c5:9c:63:fa:fc:56:c9:
32:d1:98:b3:d3:4c:dd:a0:57:20:13:6a:21:75:c8:
a1:c7:29:96:4a:9f:36:85:12:a6:c2:a5:65:73:46:
67:1e:f2:51:9a:36:e8:16:ab:c4:5f:21:0d:b2:09:
e5:94:1d:92:9f:b9:ca:a4:d3:37:51:ce:d0:b9:2c:
bd:5c:dd:ff:a0:02:e4:26:e7:b3:e8:38:31:11:c7:
c5:8d:ec:2e:8f:5a:30:7f:8b:c6:49:bd:60:cd:15:
66:13:e4:60:a0:48:ce:70:12:b0:14:3b:d3:ac:75:
6c:4e:f2:c0:ac:4b:9c:72:26:1f:9f:7c:bb:af:6a:
87:ad:16:da:80:94:cb:56:3b:59:01:e3:61:25:da:
9d:dd:d3:68:b5:f9:a6:54:ec:ae:29:c3:db:b0:cd:
a7:05:1c:10:39:de:cd:40:b4:de:f8:71:2b:73:b9:
a4:ed:6c:05:e9:6e:30:7d:07:3a:fc:e7:e4:54:9a:
9a:29:88:1b:1b:e3:5f:f2:06:d7:de:9a:86:0c:b3:
82:a2:25:8f:aa:33:c2:cd:aa:24:fd:26:ea:62:0d:
50:42:ac:85:68:10:81:31:19:1f:a0:e9:21:2f:f4:
5a:5a:b4:40:2e:6a:e0:53:d2:4f:24:e7:64:43:0d:
fa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7A:F3:C0:30:D4:6B:AB:98:53:93:1D:44:16:99:7C:FB:4E:9B:DF
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/rHrzwDDUa6uYU5MdRBaZfPtOm98.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.104.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:b8:1a:bf:77:56:dd:31:fd:8b:2d:02:e4:f5:14:b4:48:78:
8f:d8:c6:39:e6:e7:ea:6f:64:aa:18:7d:0d:8f:5e:63:1e:a7:
e4:cd:61:68:f8:37:40:b7:2e:75:fd:33:70:e0:67:a3:7c:16:
1b:41:c2:61:c5:82:68:a1:f5:eb:30:80:b4:8b:1e:f5:97:42:
0c:15:b4:d2:38:d4:78:44:ac:ab:cb:0d:3f:8e:f7:68:23:3a:
32:4a:14:2d:fa:94:3a:84:53:8e:48:86:5e:9b:fd:0c:1e:d6:
dc:41:5d:0e:8a:23:3d:60:b3:bf:a4:56:eb:dd:8b:5f:4f:a3:
65:5c:f4:8a:51:ed:43:f9:75:99:51:e1:7a:99:0b:dc:1e:5a:
d8:36:27:bd:da:f5:51:3c:1e:fe:80:b5:a6:d6:6b:67:db:dd:
0f:2b:c8:df:fa:05:e0:99:5d:9c:b8:4f:9e:24:03:43:5c:48:
64:17:b8:66:ad:44:ff:47:13:e6:01:01:3d:df:e0:da:82:09:
72:b4:f9:31:96:25:8c:8b:ac:7a:7f:e1:12:b6:fd:48:03:59:
7d:b8:d2:af:bf:54:66:ae:26:09:e9:83:45:49:fa:cf:3a:64:
a4:5c:19:9e:f9:c3:fd:e3:0c:f4:69:14:c2:d4:42:06:60:ee:
97:72:2b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org