Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tWYnVU4aWmk58diQ7H5Idt-ZH6s.roa
File: tWYnVU4aWmk58diQ7H5Idt-ZH6s.roa (raw, json)
Hash identifier: vGZGqbgUO3H7AtiopEUqX4MEKXNG/6tv/uqSBYp/6l8=
Subject key identifier: B5:66:27:55:4E:1A:5A:69:39:F1:D8:90:EC:7E:48:76:DF:99:1F:AB
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0A90
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tWYnVU4aWmk58diQ7H5Idt-ZH6s.roa
Signing time: Sun 07 Feb 2021 11:50:29 +0000
ROA not before: Sun 07 Feb 2021 11:50:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18419
IP address blocks: 150.117.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2704 (0xa90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:50:29 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B56627554E1A5A6939F1D890EC7E4876DF991FAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e1:c4:69:66:4c:02:a9:a9:67:72:a7:f9:ab:
e9:c1:26:dc:0d:df:a9:e8:7d:98:db:a5:d1:9c:a7:
b3:00:a6:0f:84:7a:80:4c:69:04:52:3d:35:e1:cc:
f2:1b:53:ce:3a:2a:ca:f9:f4:cb:b2:67:8d:17:2c:
b4:c7:92:e4:90:f0:e9:b0:78:05:20:ad:61:96:8c:
7e:9b:2e:88:37:18:9b:00:9b:42:d9:3f:69:fd:9b:
c2:14:46:00:9f:f0:fc:27:09:c0:14:0d:fa:10:af:
2c:53:58:8e:5a:c5:4a:42:74:39:e6:0a:62:73:9a:
ad:60:f1:58:07:14:90:fe:3b:bc:ac:d0:8f:cf:d3:
83:3d:1f:04:55:dc:20:a2:bb:72:d1:71:94:f2:f6:
37:2b:00:83:22:c0:90:5e:3a:b9:f3:36:5e:f5:88:
85:b7:59:1b:59:ad:aa:3f:4e:8b:e7:9f:b0:e7:2e:
a9:28:00:a9:19:2e:c2:fc:38:38:b6:f9:c5:ec:3c:
37:88:d3:1b:16:82:1f:cb:84:88:cb:ca:1c:0f:0d:
70:d8:79:7a:a2:70:da:5d:09:1f:a2:a6:19:fa:31:
f7:94:7d:6c:2e:92:62:13:17:9c:e7:0b:28:59:c7:
33:f8:6d:ff:3e:61:79:f3:89:55:72:a2:36:a6:a2:
19:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:66:27:55:4E:1A:5A:69:39:F1:D8:90:EC:7E:48:76:DF:99:1F:AB
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tWYnVU4aWmk58diQ7H5Idt-ZH6s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.32.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:48:9b:b1:c4:79:88:a3:f5:49:d0:ea:51:82:54:8b:89:bd:
83:17:a3:10:e9:8e:0f:40:40:68:32:67:af:82:16:e2:6a:7b:
2e:78:e3:5f:8e:01:00:c7:ab:09:b1:d3:9e:c7:a2:74:bf:ba:
53:4b:ab:65:c8:3a:00:47:ef:00:0f:e8:d4:07:ca:95:53:22:
0c:92:00:3c:27:25:e5:38:9e:0e:b4:d3:d8:cf:17:4c:95:49:
f4:c7:d6:5e:70:45:a7:28:f8:21:78:b2:cd:01:e9:71:12:1c:
e2:02:9c:bc:5e:8d:6a:a2:b4:0a:5a:6d:82:cf:43:a2:bf:44:
18:70:7d:50:c0:4d:34:eb:4e:75:fd:a8:8b:d9:d4:c8:23:47:
a4:dc:3e:9a:ee:29:6e:f3:e7:e2:8f:49:fe:37:0e:d6:87:88:
c4:80:6f:88:74:1d:fd:06:d5:bb:29:97:bb:00:12:39:65:8a:
3d:74:17:ef:5e:c5:83:19:bc:1e:f8:4d:a4:8c:18:f8:78:84:
59:db:26:bb:03:e4:6b:50:8c:e4:bc:2e:82:e5:07:4e:54:fe:
1d:5a:44:33:33:8e:8c:c0:53:ce:ca:a6:d2:54:03:4d:77:e6:
42:14:44:dd:a8:53:ff:85:8b:15:6d:7c:07:ff:b9:70:d7:0d:
bc:d6:6f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org