Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/rSg4OxBFqNfvxGUCNeJtheMKsjA.roa
File: rSg4OxBFqNfvxGUCNeJtheMKsjA.roa (raw, json)
Hash identifier: gZnXEqCqlHHRz/Gi0LfSR0+QESfn6L17/tla9tHD+Yo=
Subject key identifier: AD:28:38:3B:10:45:A8:D7:EF:C4:65:02:35:E2:6D:85:E3:0A:B2:30
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0855
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/rSg4OxBFqNfvxGUCNeJtheMKsjA.roa
Signing time: Tue 29 Sep 2020 10:02:20 +0000
ROA not before: Tue 29 Sep 2020 10:02:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 137263
IP address blocks: 113.21.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2133 (0x855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:20 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AD28383B1045A8D7EFC4650235E26D85E30AB230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:65:ed:df:ff:aa:ff:99:44:3a:04:ee:49:
29:37:21:96:9a:ca:0e:52:56:01:2a:95:23:11:45:
e5:b0:d2:99:1c:80:fd:e9:f9:99:22:f3:d0:1c:3a:
bc:76:f2:32:9e:f5:ca:4a:87:01:31:4a:bc:b1:37:
29:7c:ca:3f:88:d9:b6:12:9b:4d:6a:de:00:dd:2b:
48:ea:b5:4f:6c:5d:dd:1e:d6:87:b9:65:1c:26:5f:
d4:d4:9b:52:13:c8:2c:37:71:cf:09:15:f9:4d:b1:
a8:60:53:cc:64:35:30:39:ad:54:3f:34:49:8d:ef:
3d:cb:4d:c4:ae:b1:8a:57:4b:15:e1:4b:c2:94:e9:
96:bb:ae:be:5b:0a:32:c8:96:49:55:83:43:62:3f:
0c:0b:a4:f5:0d:98:46:3e:f4:c4:ac:82:5a:ba:16:
b9:41:2b:b3:f0:98:a9:05:91:6e:36:87:55:c8:b3:
f4:c0:93:ff:c9:75:e4:79:cd:21:14:5e:a3:17:29:
d5:05:7c:14:28:7a:f1:15:76:2c:c1:24:ff:15:15:
8f:51:df:f8:0e:c2:35:cd:a1:64:5a:9b:70:c8:ef:
2b:c3:0c:70:3f:80:21:2a:ad:f8:57:21:ca:44:bc:
84:ba:13:e6:2c:a8:d6:c2:89:4b:18:40:f0:88:81:
b5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:28:38:3B:10:45:A8:D7:EF:C4:65:02:35:E2:6D:85:E3:0A:B2:30
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/rSg4OxBFqNfvxGUCNeJtheMKsjA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.92.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f7:a9:0f:9c:6f:96:75:b9:dc:d0:6e:2c:b5:12:43:61:72:
0f:d1:22:e1:9d:d1:0a:0a:59:94:5a:86:3f:c5:ff:f7:11:a3:
bd:12:4b:34:6e:58:ff:36:4b:0e:92:86:df:a6:f8:a2:26:5f:
4d:49:9f:6c:e4:07:df:bf:72:b2:bb:4b:93:f4:30:0e:7e:22:
b2:73:5a:2f:24:22:37:05:e1:1c:fb:7a:e1:64:3d:d1:bb:b8:
08:50:bf:f9:e3:b1:55:dc:e1:75:77:f6:af:99:de:d5:0c:df:
14:40:7d:1f:ee:a8:6f:4e:6d:e1:62:ff:6c:5c:a9:ea:42:da:
70:a8:76:50:bd:0f:29:56:3d:27:2c:aa:58:4f:67:44:07:7a:
3e:f7:ac:72:bc:d1:2e:57:8c:3e:a8:39:b6:38:d9:80:6d:da:
89:3b:0f:2c:49:7d:74:5d:16:12:e7:ac:91:2e:bc:f3:e5:d7:
33:3b:76:22:1c:47:48:de:e4:c7:f6:13:77:a2:0b:a2:08:8f:
fc:65:5b:19:90:3b:f3:9a:0b:24:4c:09:14:c9:51:bd:3f:8f:
fd:c3:ee:e7:d5:02:eb:d9:cd:c8:e5:aa:5d:1e:9e:44:49:24:
18:5a:06:96:d4:05:48:4d:ee:d5:f6:51:be:f5:f7:0d:a7:92:
e0:c7:28:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org