Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tUv372eKsVTs5_m4votxmx8dIX0.roa
File: tUv372eKsVTs5_m4votxmx8dIX0.roa (raw, json)
Hash identifier: iT35iVh1F5PIJEgvn/L2DLPifKe9tEeBag/hZYeSTVw=
Subject key identifier: B5:4B:F7:EF:67:8A:B1:54:EC:E7:F9:B8:BE:8B:71:9B:1F:1D:21:7D
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0894
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tUv372eKsVTs5_m4votxmx8dIX0.roa
Signing time: Tue 29 Sep 2020 10:02:39 +0000
ROA not before: Tue 29 Sep 2020 10:02:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17408
IP address blocks: 150.116.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2196 (0x894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:39 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B54BF7EF678AB154ECE7F9B8BE8B719B1F1D217D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:1e:3d:58:28:61:46:39:dd:42:a5:87:1d:
27:f1:84:5e:8f:dd:dc:75:75:15:50:03:4b:0a:13:
f9:97:d6:4f:fb:ac:4a:b8:98:fe:d0:2f:1e:7e:02:
20:45:a0:9a:59:58:eb:c7:13:ec:d6:31:f8:97:44:
bb:b1:0f:db:b5:93:cb:d9:02:76:af:45:85:dc:2c:
98:f1:4f:c4:4b:a2:51:c4:ef:e0:3b:51:e1:2d:76:
5b:86:54:6b:4c:da:68:15:02:8d:35:97:77:d8:8c:
de:55:64:b9:a1:ab:6b:0d:49:8a:7b:20:8a:05:37:
63:fc:75:8a:e6:a5:cb:55:1d:39:33:f3:49:84:78:
17:14:39:f7:cb:d1:e5:35:3e:b8:ad:bf:11:d6:a7:
bf:9a:06:58:b1:79:73:72:37:11:12:60:45:38:29:
7b:a0:99:97:b8:7a:c9:ad:05:78:19:21:b4:82:f5:
a4:6a:5a:94:13:33:04:03:d6:c6:e3:14:6e:39:50:
dc:40:44:10:a4:7d:b2:3a:f8:80:b8:3c:bd:74:f4:
5d:7b:c1:f3:8e:c0:73:0b:da:5f:37:f2:94:b4:e0:
b0:4c:c0:15:23:b9:8b:d0:7d:d3:44:5c:80:af:7d:
c9:13:b3:f2:a3:29:31:3e:54:d9:a4:e7:f1:47:5f:
fd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4B:F7:EF:67:8A:B1:54:EC:E7:F9:B8:BE:8B:71:9B:1F:1D:21:7D
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tUv372eKsVTs5_m4votxmx8dIX0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.52.0/23
Signature Algorithm: sha256WithRSAEncryption
03:76:f7:85:7e:51:7d:7c:be:1b:86:05:e2:60:65:4f:67:d2:
84:ea:95:b3:fd:de:95:b0:32:8b:0b:26:16:22:13:f9:38:77:
f4:9c:71:2d:77:6f:dc:47:3d:94:61:c6:01:8e:60:e0:2c:ae:
34:39:d6:27:08:3f:c7:f8:7d:8b:c1:5c:f7:72:86:d2:db:f3:
ce:8f:5e:11:37:c4:c5:ec:cf:c4:d3:5d:fa:1a:cf:03:d0:5b:
fb:1a:71:40:ee:b0:11:a1:46:c7:83:30:fe:d3:ee:51:72:66:
83:0c:62:45:9a:ba:8b:ba:13:50:8e:2e:09:02:06:b1:48:0d:
cd:c2:2e:68:69:c8:5c:20:77:f7:41:7e:f1:1c:a2:63:b3:f4:
d6:7f:39:90:d0:82:fd:16:43:5e:70:be:3e:89:5f:cf:08:b7:
2d:d4:28:b8:74:c7:f6:35:e5:9b:04:3b:c5:a8:50:10:5e:cf:
ff:40:d4:9f:ab:05:6f:72:b2:44:c4:47:4f:98:47:f6:62:71:
2f:93:20:04:e5:0b:5c:00:43:20:04:7d:af:d2:45:98:85:92:
0e:f2:14:90:3b:3c:52:c9:a7:bb:b6:c3:f5:58:ea:67:cd:15:
75:a9:14:c0:5b:77:b0:81:28:4e:97:e7:cd:b2:d2:85:4d:18:
70:ae:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org