Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/u1u_vUDFhhKxqLyqvqR70qu52fA.roa
File: u1u_vUDFhhKxqLyqvqR70qu52fA.roa (raw, json)
Hash identifier: r9fYBUADcyuG4rgFUAjeyPZpVRcafy8rkmG7Hf8rY0M=
Subject key identifier: BB:5B:BF:BD:40:C5:86:12:B1:A8:BC:AA:BE:A4:7B:D2:AB:B9:D9:F0
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0A88
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/u1u_vUDFhhKxqLyqvqR70qu52fA.roa
Signing time: Sun 07 Feb 2021 11:50:02 +0000
ROA not before: Sun 07 Feb 2021 11:50:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2696 (0xa88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:50:02 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BB5BBFBD40C58612B1A8BCAABEA47BD2ABB9D9F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a5:b3:33:3c:a1:88:2a:bd:10:b6:ce:be:51:
81:21:32:c3:f0:78:41:ae:6c:bd:5b:20:6a:e2:25:
a1:8f:cd:b2:ae:7b:77:fd:e6:e0:df:c0:a0:95:22:
d2:6c:b4:ca:9b:f7:40:ae:1a:03:01:6d:c2:95:ec:
ff:89:3d:fe:d4:1e:51:6b:b6:62:3d:34:80:9a:61:
8b:c4:21:c7:3e:5a:a6:91:60:2b:b6:d7:c9:f0:4c:
45:83:5a:d8:b6:3a:ef:77:2e:42:0e:21:e1:0e:ee:
fb:69:35:58:d5:a3:67:0e:f0:4a:c6:d2:9d:a0:85:
a7:e1:e2:5f:ed:44:67:03:30:ab:66:cf:39:2b:f0:
47:6d:a8:ba:76:d7:14:ed:6c:7c:46:05:76:19:bc:
ad:40:78:81:10:35:87:93:9f:74:0f:88:ea:26:25:
da:c1:32:e1:78:08:cd:7a:94:0f:38:b4:45:65:b9:
f4:84:e2:0f:bf:e5:3d:da:6e:44:a5:0f:a7:99:65:
c3:a2:aa:4e:45:c1:c0:e3:8e:d4:43:6e:c6:f9:e3:
22:33:54:49:17:f9:77:3c:6f:1f:eb:42:b3:9a:c1:
e7:7c:9e:6d:fc:11:68:14:b2:94:77:cf:6e:85:ae:
8a:c8:41:9b:fa:00:c5:22:df:4c:04:f8:29:d2:75:
91:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5B:BF:BD:40:C5:86:12:B1:A8:BC:AA:BE:A4:7B:D2:AB:B9:D9:F0
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/u1u_vUDFhhKxqLyqvqR70qu52fA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.238.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b4:35:4c:f7:c9:c5:b1:d1:f6:b0:7b:92:d4:b9:44:5a:f0:
d0:5d:74:83:b4:b3:ff:b1:fd:b3:08:8c:61:ce:35:8a:63:ee:
a8:3a:2e:d2:6c:85:06:fd:d9:d3:71:04:05:5c:d1:a7:bd:01:
1f:97:be:07:15:e7:8a:1c:a2:6e:ee:50:fe:a5:3e:61:db:c9:
76:e5:dd:86:d9:a8:60:98:a7:69:11:85:8f:64:14:c7:7f:55:
5a:6d:97:26:0e:04:d5:9a:f6:d5:71:25:1b:ed:80:3d:4d:0d:
25:00:60:19:4b:40:96:14:a1:54:d5:98:6d:31:c0:0a:f6:c2:
06:56:73:f8:23:50:6a:75:31:08:19:53:24:bc:43:16:76:0b:
06:e2:e2:99:0b:5f:66:e2:cd:09:bf:86:72:74:d3:a2:a0:b2:
4b:60:27:c0:84:ac:57:8c:b7:97:b2:86:97:1b:41:5b:aa:d4:
54:9e:d8:a9:34:1b:b0:2b:95:0e:07:34:06:52:71:33:f2:3b:
55:a0:af:97:eb:9d:31:db:ad:58:65:58:86:8d:63:57:f2:f0:
de:8e:08:46:67:24:a7:9d:8a:18:02:b5:73:f8:2b:9c:c8:31:
17:e1:6b:9f:bd:2e:13:41:60:f2:d2:32:3a:e9:ca:bc:0c:7a:
e2:6d:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org