Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/t8lGBS0Mv8BZS_eXCFX9dPKsIeg.roa
File: t8lGBS0Mv8BZS_eXCFX9dPKsIeg.roa (raw, json)
Hash identifier: SqWW7wdo9U4Y6noo5LC6LZZJPWNlDrBc00oBzIBSgT8=
Subject key identifier: B7:C9:46:05:2D:0C:BF:C0:59:4B:F7:97:08:55:FD:74:F2:AC:21:E8
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/t8lGBS0Mv8BZS_eXCFX9dPKsIeg.roa
Signing time: Thu 15 Sep 2022 02:39:14 +0000
ROA not before: Thu 15 Sep 2022 02:39:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 150.116.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B7C946052D0CBFC0594BF7970855FD74F2AC21E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:e5:f2:9a:a8:5f:8a:53:0b:9b:92:9b:11:
39:4b:70:91:9e:ec:31:e2:ac:20:fe:7d:03:ed:89:
95:8d:1b:90:1d:73:f5:d9:07:12:f9:ee:1a:7b:26:
5c:03:be:8d:b5:e5:ca:6b:3b:51:f4:e8:0c:7f:a0:
64:4b:42:10:48:51:5b:0d:39:eb:fa:89:13:83:0d:
c5:a2:e8:a1:6c:7d:78:bd:05:38:ca:b6:2f:cc:96:
21:99:6a:91:f0:22:15:37:00:1f:34:78:8f:58:9e:
6d:1a:a7:86:ad:ce:5d:46:6d:76:8b:5d:08:fc:4d:
56:48:b3:48:11:e5:4e:e0:e9:e9:22:e0:5f:dc:69:
73:be:78:93:5a:67:4d:fc:17:70:ea:d5:c6:de:6b:
39:e1:b2:3e:ba:80:99:92:34:60:8c:c1:0d:58:f8:
c2:70:94:0d:5a:81:4d:9f:c3:36:e0:00:a8:3c:b2:
b0:4f:ea:1a:c7:29:c6:87:5f:34:88:5f:2d:49:0b:
d0:46:0e:ed:bd:c6:c6:55:24:bc:67:46:c1:94:98:
5d:cd:b5:02:2e:ff:5e:a4:bb:51:57:e1:12:47:7e:
09:c8:ea:8c:ae:e8:ac:a6:e8:b2:ea:92:7d:0d:59:
f9:28:b3:49:2f:7a:83:c2:be:8a:de:c5:a4:7a:32:
d8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C9:46:05:2D:0C:BF:C0:59:4B:F7:97:08:55:FD:74:F2:AC:21:E8
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/t8lGBS0Mv8BZS_eXCFX9dPKsIeg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.64.0/20
Signature Algorithm: sha256WithRSAEncryption
76:d9:e0:6f:2c:2f:1d:e9:c1:23:74:c1:f3:31:ac:32:e8:71:
a6:0c:35:f7:18:5a:af:b2:06:00:c7:56:7a:88:4e:36:71:e0:
3d:ae:54:1c:18:25:79:0e:f5:c3:ce:ad:95:b0:ec:77:e6:0c:
f4:19:6c:db:21:03:2f:e5:e2:ef:03:df:81:f1:d8:56:21:09:
62:d4:e1:30:20:02:a1:f0:7d:7d:55:cd:64:47:7c:d4:37:99:
a3:5b:72:f0:8e:06:8f:a0:c3:7e:9b:66:dc:6a:39:73:a9:d5:
9d:f6:1b:7b:bf:4d:64:0d:80:f9:8c:03:e3:72:dc:54:0b:cf:
fc:9d:05:f4:61:c3:7d:91:50:1a:10:a1:f6:3a:6b:90:26:2e:
0c:5d:9c:8a:ea:57:7e:1a:96:77:49:ae:9a:19:45:0a:32:70:
00:87:76:23:42:cf:83:4a:76:79:18:05:ff:0d:4a:41:39:cc:
28:60:67:8d:98:07:ad:a1:af:ae:67:f8:dd:1f:e8:21:01:a6:
2c:fb:75:28:98:8a:21:25:96:f7:58:51:db:90:8a:e5:c5:81:
be:70:3f:ac:ba:66:f1:5e:28:1f:ae:33:55:d9:33:16:f7:24:
6b:0f:51:72:a4:ab:83:49:bb:79:d6:dd:60:94:2f:69:0b:a3:
4a:5c:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org