Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/sENBW_U0BHWpofWeXqGarFMfsmE.roa
File: sENBW_U0BHWpofWeXqGarFMfsmE.roa (raw, json)
Hash identifier: MN25m/+7MfbiupUEJGz6iNGHxW5ZC3Z5EaT2TB0iBhM=
Subject key identifier: B0:43:41:5B:F5:34:04:75:A9:A1:F5:9E:5E:A1:9A:AC:53:1F:B2:61
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/sENBW_U0BHWpofWeXqGarFMfsmE.roa
Signing time: Thu 15 Sep 2022 02:39:26 +0000
ROA not before: Thu 15 Sep 2022 02:39:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 118.150.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B043415BF5340475A9A1F59E5EA19AAC531FB261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:6d:c6:4e:93:d8:27:54:60:75:69:af:a6:
a7:2b:3c:b3:6a:42:56:75:c6:d4:6b:ae:08:52:0e:
85:1f:02:f8:ee:f1:d7:88:75:37:3e:be:02:e0:58:
e6:83:c7:7a:d3:34:b4:92:e0:38:51:d3:0e:02:96:
92:9c:a2:d6:cb:1a:cf:1b:69:f1:fa:aa:fa:64:d2:
41:aa:02:1d:66:d6:19:24:06:ed:73:52:b1:e2:35:
65:0e:c7:d5:f7:c2:96:52:a9:00:2c:f5:36:fe:88:
88:27:c5:98:ce:a2:be:5b:62:95:ad:24:84:9d:56:
ec:ca:c9:d6:cf:3c:fe:b7:85:74:14:b9:6f:ce:55:
7e:7c:ac:b4:3f:6d:42:17:82:e9:24:06:59:69:0f:
03:de:fa:d5:2c:be:bc:b5:06:00:f0:fb:be:8d:a0:
94:ca:f1:ab:27:96:47:72:c7:e8:97:be:5e:5d:ca:
9e:51:6f:30:b0:61:6b:98:8e:76:75:03:9f:1c:ed:
e1:96:7f:a7:ca:3b:09:d3:b2:c9:e9:65:c5:d6:da:
7c:a4:d9:f1:2e:d4:2a:d2:5a:59:7e:c8:bb:da:f7:
99:e3:06:e8:36:1e:6c:ec:9f:12:d4:39:03:0c:15:
db:e1:d0:6b:2a:a0:90:ea:75:fd:8b:1c:b0:53:08:
df:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:43:41:5B:F5:34:04:75:A9:A1:F5:9E:5E:A1:9A:AC:53:1F:B2:61
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/sENBW_U0BHWpofWeXqGarFMfsmE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.232.0/21
Signature Algorithm: sha256WithRSAEncryption
89:2b:a2:17:28:6b:fa:43:3f:b2:8b:b1:78:90:4c:3f:12:b0:
d3:37:76:cb:af:2c:de:f0:a7:71:48:21:57:aa:ff:8b:19:6f:
40:20:81:08:01:65:7c:ab:dd:03:b6:f7:f2:20:e0:b4:63:4f:
2f:51:35:d5:d1:4a:ed:8b:ff:a0:8c:95:5a:23:3d:f6:3e:b1:
0d:15:85:e6:c0:d6:79:0a:13:38:aa:1d:d2:81:18:56:d2:0e:
37:82:da:f3:61:0d:a7:99:76:9a:18:4c:3c:0c:a5:bc:a8:6d:
7b:df:82:7c:8d:17:44:b1:7e:e5:6d:55:51:3c:18:e4:40:ff:
83:44:22:bd:6c:64:4b:62:84:bd:a9:c7:c8:e1:99:e4:ad:e1:
61:98:2a:0d:ef:64:dc:da:1d:26:10:44:cc:c6:3d:9a:42:7f:
ff:ef:ec:ce:4d:f2:4f:d4:a8:94:1b:df:1b:26:c8:da:94:16:
7b:35:2d:08:56:62:24:c2:99:c8:fa:6e:c2:32:bb:ab:38:a5:
14:cb:39:3b:17:28:13:08:11:cd:9a:ff:22:6a:91:df:00:bb:
1f:2d:db:81:b1:df:80:84:4f:3d:49:31:74:76:ad:28:80:d6:
1f:42:69:f5:29:6b:d2:71:af:d7:37:af:4b:33:af:33:a2:ca:
ce:76:b2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org