Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/s1HTYKjEj5Toz_S1ONkx2rcpeuE.roa
File: s1HTYKjEj5Toz_S1ONkx2rcpeuE.roa (raw, json)
Hash identifier: CrubmhqXUoCMwzI/Zc5OOcQR81U78mkv+U53LrzbA9M=
Subject key identifier: B3:51:D3:60:A8:C4:8F:94:E8:CF:F4:B5:38:D9:31:DA:B7:29:7A:E1
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0842
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/s1HTYKjEj5Toz_S1ONkx2rcpeuE.roa
Signing time: Tue 29 Sep 2020 10:02:15 +0000
ROA not before: Tue 29 Sep 2020 10:02:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17408
IP address blocks: 150.117.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2114 (0x842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:15 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B351D360A8C48F94E8CFF4B538D931DAB7297AE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:d5:f4:2a:b1:e3:f8:c1:c9:ae:3e:98:d6:
68:fe:5a:f5:00:1f:b0:a1:c1:76:90:b2:74:5f:62:
ae:19:a4:c1:e8:c5:40:7d:c4:85:03:fc:1e:5a:39:
c4:9e:8a:33:10:6b:8e:f3:70:5c:8b:f9:40:ee:ab:
9d:f4:67:21:49:6c:ab:47:5d:32:6b:dd:ef:76:c8:
e4:97:a2:6c:a0:83:6b:45:69:c3:d9:0a:26:d5:b6:
57:2c:83:81:fc:d4:15:d8:f6:b1:32:6a:7f:11:14:
f2:a6:e2:dc:a1:6a:9a:ca:01:83:33:99:fc:61:41:
ad:f7:5a:37:a6:91:d7:bc:28:f6:cb:21:32:b1:2e:
3a:af:5e:b2:c3:db:21:2e:c6:db:3e:fa:4e:7f:41:
e6:b2:42:21:d2:62:5d:57:b1:55:48:17:2e:c7:e9:
9f:e9:d7:08:43:4f:d2:f3:01:27:5c:fb:02:42:d5:
bb:a9:5f:87:6e:27:10:16:dc:6d:76:c1:e5:99:17:
d1:14:51:c0:5b:32:93:b9:c3:1f:48:72:29:c0:15:
f7:1c:54:5d:3e:ed:fe:63:9f:76:eb:76:de:35:e9:
cc:a8:8a:7c:3f:eb:70:b8:7d:b5:38:d3:7b:2f:c5:
34:fe:24:05:c7:11:77:76:bb:65:2d:ee:54:1b:a2:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:51:D3:60:A8:C4:8F:94:E8:CF:F4:B5:38:D9:31:DA:B7:29:7A:E1
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/s1HTYKjEj5Toz_S1ONkx2rcpeuE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.160.0/21
Signature Algorithm: sha256WithRSAEncryption
34:05:4b:c4:36:8f:ae:86:0d:9d:9d:ae:ac:8f:cb:e3:86:1f:
58:3d:97:d8:e3:7d:03:60:24:7a:3d:ed:90:7c:64:6e:48:87:
0a:cd:b8:bd:77:c1:b9:0b:af:d0:6b:5b:28:95:62:ae:41:92:
6e:3e:86:fe:a7:52:aa:75:77:8c:e4:d6:08:65:1c:bf:d7:22:
57:f5:c0:98:87:9c:9a:14:50:80:7a:7d:b7:45:75:de:1f:39:
14:50:fc:03:bf:48:92:60:4a:51:35:f3:b4:34:78:bd:a4:90:
b5:99:c7:7e:8e:86:a8:df:38:eb:87:6e:29:4f:10:23:c9:37:
d0:a8:d8:0c:c4:40:27:d7:e3:04:84:86:a3:a0:f3:54:e0:68:
a6:8c:62:76:b7:14:e4:cd:6f:89:a5:c7:74:33:f3:af:d6:45:
2e:26:37:8b:df:15:ba:75:e2:29:f4:ea:ec:e9:7d:0b:ff:5a:
07:45:90:b8:a6:de:96:38:af:7f:45:0a:e5:53:32:b1:7e:8c:
a4:ce:32:7a:ae:e8:17:72:3c:58:4b:54:c4:fc:02:e8:79:4a:
1b:43:e1:8f:80:3c:47:aa:7a:8c:6c:dd:01:71:58:29:79:fb:
a8:4b:83:e3:91:e6:c1:5c:56:3d:66:9f:24:be:28:ff:cf:c0:
a9:71:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org