Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ssXkHAvT8_6BpA-m8SB-0ckEjNg.roa
File: ssXkHAvT8_6BpA-m8SB-0ckEjNg.roa (raw, json)
Hash identifier: yNSRTIdFuMW8KVv5qBqKJDV7NpuQQMBZAhB7/YGIMGU=
Subject key identifier: B2:C5:E4:1C:0B:D3:F3:FE:81:A4:0F:A6:F1:20:7E:D1:C9:04:8C:D8
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ssXkHAvT8_6BpA-m8SB-0ckEjNg.roa
Signing time: Thu 15 Sep 2022 02:39:05 +0000
ROA not before: Thu 15 Sep 2022 02:39:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7532
IP address blocks: 150.116.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B2C5E41C0BD3F3FE81A40FA6F1207ED1C9048CD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:12:6e:22:d2:03:d6:1c:73:50:32:04:c5:
c6:ae:fc:e9:89:11:b9:43:d0:75:73:b0:c4:17:60:
84:48:aa:c1:13:c5:e3:aa:f1:49:06:46:a7:22:9f:
16:67:c6:21:ec:b8:bb:c1:5c:b4:47:f1:4b:7f:be:
dc:24:d8:e0:8b:23:56:2c:d3:83:2f:29:42:fe:2b:
8d:be:a8:d1:98:0f:3f:5d:aa:d8:40:3d:53:a3:cd:
3f:a4:eb:eb:7c:c6:82:7f:1b:2c:b5:f3:0f:95:3e:
69:f8:0c:59:63:c4:07:5c:da:59:79:c3:8f:cf:50:
f5:6b:f9:11:42:a8:7e:cf:de:eb:58:ae:34:e5:df:
72:f2:91:7a:d8:86:44:5b:41:eb:64:1c:1e:5d:f6:
a8:49:04:c2:ba:fe:0c:91:11:b2:1b:ef:6c:4c:0d:
1d:53:94:b5:f7:ff:89:c4:82:8c:d9:74:b7:06:d3:
a2:32:76:25:3b:0a:e2:e1:f6:e9:fe:03:a3:bd:7b:
c7:17:98:c4:5a:fd:69:67:df:ff:bb:24:59:b7:a7:
c3:02:aa:21:bf:62:75:a4:df:f4:74:c5:7c:1c:7f:
37:c0:d4:03:78:0e:d4:9a:08:43:89:01:bb:2d:73:
de:1b:88:f4:ce:7a:9d:90:54:ad:ff:cf:dd:e1:36:
ae:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C5:E4:1C:0B:D3:F3:FE:81:A4:0F:A6:F1:20:7E:D1:C9:04:8C:D8
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ssXkHAvT8_6BpA-m8SB-0ckEjNg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.56.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:12:d1:25:6a:3a:d4:82:74:70:80:83:df:49:57:cd:5b:0e:
60:e2:73:fe:61:85:54:b6:1f:92:41:60:1f:f7:e8:f1:00:ac:
93:e7:0b:fb:0a:b5:0e:be:d1:dd:6b:fd:4a:bf:b1:31:6a:4f:
8a:d0:9e:ec:aa:01:be:5a:f5:f1:30:80:3f:f1:99:c4:a5:7c:
6e:dc:d1:5b:02:20:ad:af:56:40:42:70:92:e1:da:a6:ec:e2:
f6:05:ed:01:dc:9e:85:61:d2:c5:d0:c3:55:08:22:62:8d:9a:
3b:dc:23:34:20:1e:12:99:57:5b:38:b6:89:6a:c3:fc:93:04:
bb:40:96:81:ad:2b:12:42:e7:36:b8:2b:33:cd:14:77:3f:d6:
7f:fc:35:49:1c:44:57:13:0a:00:63:af:f6:c2:18:10:d7:f0:
6e:53:da:14:1c:f1:fc:68:78:07:9b:96:89:79:3e:c1:9f:e2:
7a:94:2b:11:af:1f:2e:b8:09:13:f1:2f:f5:99:ef:61:78:78:
26:99:6c:79:ff:23:94:1c:0f:cd:5a:b9:fc:d0:60:aa:61:1c:
c6:a8:e4:40:e2:2e:4e:0a:ea:fa:26:db:a2:d5:77:28:04:d5:
a4:a9:d0:48:c4:97:61:55:ac:ee:d6:00:96:72:a8:96:f2:ed:
6f:9f:34:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org