Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ssLtAaNfWYPOFGKuMx1RSDFDOr8.roa
File: ssLtAaNfWYPOFGKuMx1RSDFDOr8.roa (raw, json)
Hash identifier: 3+5hB8WjX+Z0YdJwuQMG0CAb0b4FcSi4liXgOg8MD0s=
Subject key identifier: B2:C2:ED:01:A3:5F:59:83:CE:14:62:AE:33:1D:51:48:31:43:3A:BF
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C21
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ssLtAaNfWYPOFGKuMx1RSDFDOr8.roa
Signing time: Wed 29 Sep 2021 02:39:04 +0000
ROA not before: Wed 29 Sep 2021 02:39:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18049
IP address blocks: 223.26.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3105 (0xc21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:39:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B2C2ED01A35F5983CE1462AE331D514831433ABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d6:85:eb:c7:21:0e:f3:a5:55:13:ec:2b:a1:
5e:65:67:7b:62:af:53:c7:cb:d8:b4:84:41:c4:fe:
74:86:80:8c:80:9b:56:72:97:f4:8f:86:17:f6:ac:
43:7e:38:af:4b:bd:cc:1c:69:59:c9:a9:32:b0:9d:
2c:27:07:91:8e:86:bf:8d:d6:0e:75:6f:93:31:58:
9c:31:2e:c6:c0:cf:c5:ba:1b:ed:63:43:c9:dc:19:
4c:e7:35:2a:7a:c9:72:c1:6b:b1:dc:d1:9a:7c:df:
a2:87:3c:c2:f3:6b:06:10:42:f0:68:17:ff:4e:d8:
be:03:5e:57:0a:a5:40:82:b8:62:e1:6c:43:7b:88:
e4:6d:7f:96:aa:bf:19:a2:fe:b3:28:c2:7e:6a:41:
54:ad:6d:f2:55:90:13:d5:43:57:80:1c:17:fe:1d:
47:2d:3a:6a:e5:9d:8e:c7:03:46:11:58:3b:75:0e:
de:83:75:62:61:76:44:99:22:d0:60:7f:32:47:9a:
97:8b:43:13:a3:83:c4:fc:62:b4:6a:62:e1:4a:3f:
b7:b9:1b:79:19:d4:9a:94:ad:ef:c6:f2:ec:10:82:
cf:46:14:17:59:07:11:d9:ea:19:36:a0:15:ff:d6:
1e:89:95:55:68:26:74:13:db:0e:07:4d:e1:01:fe:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C2:ED:01:A3:5F:59:83:CE:14:62:AE:33:1D:51:48:31:43:3A:BF
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ssLtAaNfWYPOFGKuMx1RSDFDOr8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.84.0/22
Signature Algorithm: sha256WithRSAEncryption
71:1c:e4:12:39:99:50:a4:68:55:c3:9d:93:e9:6b:f0:75:eb:
62:60:8d:00:c4:44:ff:3e:5d:d1:80:53:ce:29:ee:97:09:bd:
8e:8f:70:14:6b:96:9e:f4:7d:17:84:77:37:6d:fc:35:8c:6b:
0d:a4:8b:b3:dd:51:03:70:51:02:d0:e8:8e:29:ab:f6:b6:87:
b0:69:40:33:de:87:6f:16:77:78:1f:00:8e:bb:94:1d:8b:35:
8d:8f:6a:c2:51:7b:19:52:a0:aa:96:b4:b1:03:7e:40:93:02:
36:01:51:54:9f:9f:dd:ef:59:8a:51:d5:6d:24:f9:40:50:e5:
95:1b:cb:5b:73:3f:16:9f:50:bd:ea:21:72:9b:02:8b:b9:22:
f3:46:81:35:42:ac:e7:4c:b3:96:93:5b:09:83:99:7e:f3:c2:
34:f2:70:85:9b:89:69:3d:38:93:5e:d3:c1:f1:ba:cb:38:7d:
f3:7a:29:0a:a5:66:12:e5:93:2a:66:95:ba:88:11:76:82:f9:
54:a2:55:23:fa:93:9c:18:df:25:43:b0:1d:f8:2b:0b:a0:c6:
98:f5:9f:6b:e1:08:d5:46:86:39:9a:da:4b:74:c5:3d:6d:7c:
f1:fe:6a:8a:4b:4d:28:78:83:68:e4:21:f7:04:24:7a:4d:04:
00:e5:b0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org