Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tE6_1TZo425TWLdFWRRjrruiE3g.roa
File: tE6_1TZo425TWLdFWRRjrruiE3g.roa (raw, json)
Hash identifier: 2J98N+0v4fYLH7+i9ey0Bf5Go6w1roy/NvBuuvgvenk=
Subject key identifier: B4:4E:BF:D5:36:68:E3:6E:53:58:B7:45:59:14:63:AE:BB:A2:13:78
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tE6_1TZo425TWLdFWRRjrruiE3g.roa
Signing time: Thu 15 Sep 2022 02:39:26 +0000
ROA not before: Thu 15 Sep 2022 02:39:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10085
IP address blocks: 203.163.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B44EBFD53668E36E5358B745591463AEBBA21378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:9a:bd:dd:d2:82:b6:0b:c1:f4:3d:97:4b:
60:ae:c0:89:7c:2e:11:1b:ee:53:69:76:d7:27:db:
85:14:8c:6e:28:dd:a0:3f:78:4e:30:4f:ab:af:f0:
82:57:2b:51:42:47:43:0f:94:7a:9b:4d:15:d5:d8:
fd:f1:e7:85:b3:df:57:4a:4f:22:40:82:65:f8:5c:
0a:10:33:d9:f6:e5:f3:b5:99:78:cc:f7:d3:d1:cb:
3b:ea:cd:94:33:d4:ff:ff:27:62:d5:c8:b1:74:da:
6c:0b:1d:6b:5f:63:67:c5:e9:7a:54:b3:ce:32:01:
64:6b:bd:16:f7:d1:b9:5f:9e:b1:bf:f6:cc:91:0f:
57:e0:3a:b2:d2:6c:82:bb:e6:d4:6c:ad:e5:f0:33:
f2:03:11:b2:2e:f3:88:0b:42:3d:fc:be:4e:00:af:
fc:21:61:08:f4:42:88:fa:64:d1:16:9e:ba:41:a6:
b1:36:e9:01:71:3b:d5:e9:1d:cc:bc:06:fc:10:40:
ff:84:8a:ab:62:14:39:81:23:53:53:f1:d4:16:37:
29:9a:56:75:21:c9:a1:37:8f:df:42:02:ac:60:aa:
dd:e7:3e:b2:db:bc:00:0b:8e:ef:0c:55:83:d1:75:
ee:54:9f:12:eb:4e:7d:6e:52:65:e6:97:61:56:57:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4E:BF:D5:36:68:E3:6E:53:58:B7:45:59:14:63:AE:BB:A2:13:78
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tE6_1TZo425TWLdFWRRjrruiE3g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.196.0/22
Signature Algorithm: sha256WithRSAEncryption
38:15:d8:2f:5a:3a:fb:a0:77:53:f8:f9:79:1e:28:44:85:28:
57:1e:0b:81:e5:ea:48:84:a3:6d:5d:9c:13:e6:92:80:29:58:
8c:94:ce:3a:2d:c5:30:47:63:51:ac:31:dd:2c:a2:a1:72:85:
e1:89:17:4a:38:7a:43:78:24:80:8a:96:e6:0a:b5:53:a5:f2:
7d:e0:4c:a5:4f:b2:80:da:25:97:9c:d1:eb:d5:6a:96:b1:29:
89:1a:34:3e:04:6d:97:14:23:3b:6e:1d:f5:e6:df:f2:7f:c7:
03:fb:5a:8c:00:fd:37:bf:9d:5f:39:71:52:56:81:2f:b7:65:
11:55:85:07:9a:28:2d:78:70:a0:2e:b9:d7:23:40:c9:53:f3:
1f:64:f2:7c:bc:2d:d8:0d:ac:a1:e8:2a:fb:4d:b9:a5:a3:b8:
47:2e:7f:3f:28:38:96:bc:fb:e9:c7:10:c6:fe:00:e8:2a:b2:
d0:67:26:ce:41:43:1e:a4:2c:12:7b:91:ca:ec:29:3d:ff:7a:
2f:bb:d0:ea:18:50:04:28:75:43:3b:b8:cf:1e:1b:03:c1:33:
a2:f1:01:79:eb:cb:6b:b8:27:bb:c0:0c:fe:a3:b2:87:0e:af:
c0:b6:32:1e:2e:6f:86:96:a8:6e:48:a0:c7:b9:e4:d0:b0:53:
42:bf:26:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org