Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tyI1FJ5toxg1R5AOr9Hq_DPUisM.roa
File: tyI1FJ5toxg1R5AOr9Hq_DPUisM.roa (raw, json)
Hash identifier: fhIUJA/kPGD6PZfeZ/Y9YBA7xocr9wiS1pyowjsHlJc=
Subject key identifier: B7:22:35:14:9E:6D:A3:18:35:47:90:0E:AF:D1:EA:FC:33:D4:8A:C3
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DBA
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tyI1FJ5toxg1R5AOr9Hq_DPUisM.roa
Signing time: Thu 29 Dec 2022 09:31:47 +0000
ROA not before: Thu 29 Dec 2022 09:31:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 150.116.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3514 (0xdba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:31:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B72235149E6DA3183547900EAFD1EAFC33D48AC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:0f:c8:be:43:b5:0e:4c:08:43:d2:0b:36:
ba:75:33:8a:7c:e6:46:ea:17:1d:2b:c7:eb:5c:70:
6a:0c:8b:db:b6:c9:c5:55:ff:9e:95:aa:65:fe:b9:
4f:3c:bc:93:62:ec:b5:3f:98:98:1b:96:6b:7a:31:
3d:8b:7e:48:c7:b9:1b:34:7d:d6:3f:89:80:75:fa:
d2:32:32:a0:0f:84:a6:45:57:09:fe:41:b5:08:ac:
2e:06:af:d5:47:32:2a:3f:07:b6:3e:59:2e:d9:b4:
a8:0e:40:33:04:15:07:95:bd:58:40:07:7d:e8:3a:
08:52:31:c2:56:28:e0:a5:25:f5:c6:f1:1a:ee:16:
5c:dc:ec:35:69:40:c7:5d:b2:a4:45:3f:c9:5d:ae:
6a:f8:ca:80:02:84:7a:99:fd:53:44:e8:4a:b2:a1:
ae:2c:0f:b8:77:24:79:07:10:e0:c9:88:48:c8:c0:
03:22:d7:fb:44:f7:c1:6d:6a:31:c7:c4:d9:59:58:
9c:9f:d0:12:e0:62:46:5a:8f:db:dd:57:16:79:77:
d7:d5:95:2f:6e:7d:ec:73:d4:51:26:dd:f0:12:dd:
56:85:e7:ce:eb:73:5b:6c:3a:00:8e:73:9a:19:b3:
fa:c3:f4:b2:96:88:17:59:33:a0:28:15:37:a7:fd:
b6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:22:35:14:9E:6D:A3:18:35:47:90:0E:AF:D1:EA:FC:33:D4:8A:C3
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tyI1FJ5toxg1R5AOr9Hq_DPUisM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.232.0/22
Signature Algorithm: sha256WithRSAEncryption
05:fc:bf:d4:70:f6:5c:9a:35:a0:0e:1e:f4:e8:1e:33:96:5c:
5d:1d:a5:ec:1e:02:23:46:f1:ba:3b:e5:ba:9c:a8:6b:1e:c7:
6e:b3:a6:54:b5:32:67:2b:65:59:e8:23:df:f9:0d:30:23:0b:
6f:ac:f1:6e:fc:6d:28:3a:ba:47:ba:e1:77:0b:c1:1f:d3:0e:
17:01:6f:1f:a4:c3:83:69:10:a7:6d:29:fb:c1:47:4b:4e:79:
27:ce:3d:9a:01:b7:b9:4d:fa:6a:96:28:09:86:11:ee:80:01:
3b:19:7e:88:44:14:4b:b3:dd:42:44:9b:b0:b4:b9:ec:96:2e:
04:0e:3d:d5:c0:4e:b9:04:9d:e3:1a:49:4a:2c:c8:d0:91:8c:
36:61:ee:1a:ba:65:b9:0e:26:0e:f2:b4:c7:6b:8a:64:da:25:
83:79:71:c6:76:6d:b6:d9:1b:3c:78:9f:43:6b:82:51:6b:d9:
00:68:98:30:68:2d:44:8a:ff:5e:d0:f8:8e:08:b4:ed:9a:69:
40:b4:63:7f:9a:00:fc:8c:31:5b:a8:cb:6a:d1:a1:84:9c:e5:
5c:53:dc:3e:a8:ba:64:23:2f:53:d8:ed:53:b0:f1:12:ba:41:
cb:a5:41:3a:81:59:97:20:5e:83:ef:80:91:d9:33:2a:6f:e9:
1d:a2:81:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org