Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/uRDF1K0F3G29HPPe82_98yIo_wk.roa
File: uRDF1K0F3G29HPPe82_98yIo_wk.roa (raw, json)
Hash identifier: 2tOt3o6tFz2+AC84FlAiE6RFgk9KbKIOVQWuXoGB4HA=
Subject key identifier: B9:10:C5:D4:AD:05:DC:6D:BD:1C:F3:DE:F3:6F:FD:F3:22:28:FF:09
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BE1
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/uRDF1K0F3G29HPPe82_98yIo_wk.roa
Signing time: Wed 29 Sep 2021 02:38:48 +0000
ROA not before: Wed 29 Sep 2021 02:38:48 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 150.116.170.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3041 (0xbe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:48 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B910C5D4AD05DC6DBD1CF3DEF36FFDF32228FF09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:ff:01:ca:8f:9c:05:f7:ae:32:28:ee:e6:
1b:c1:ac:78:e8:46:44:0e:0c:3d:ec:e2:07:3b:89:
6e:f1:73:7a:1d:11:3c:73:d6:3a:0b:31:cd:e2:20:
bd:f0:f4:2e:dd:d7:57:90:cd:8f:4b:f8:a5:4b:d3:
30:ee:60:5f:44:bb:97:8f:73:a3:f3:9b:9b:31:de:
fe:a8:f0:0e:f4:5d:59:b7:33:07:cb:86:27:a6:2f:
13:cd:1d:48:87:f6:dc:e3:9d:f9:f8:eb:ea:14:2d:
84:85:f4:ee:1f:01:60:55:6d:37:ea:2a:4a:3e:19:
c3:46:08:29:50:dc:9d:36:92:2e:36:1e:62:ca:b1:
e7:96:01:80:c1:23:53:9f:5e:79:0e:d5:e2:51:cf:
4f:af:d5:fc:a4:48:a9:8b:93:38:ea:f0:43:37:59:
71:f5:e3:d8:fe:37:d8:c3:b7:03:14:a8:d9:4c:9a:
d9:52:70:4f:51:52:c8:22:a5:30:8c:21:41:dc:eb:
30:81:56:88:80:81:e3:12:54:e9:4b:b5:12:b2:be:
fe:29:7f:fb:5f:b4:aa:71:b8:37:b1:80:87:24:0c:
bd:2d:74:33:5a:4d:d5:c5:65:8a:aa:85:3f:01:78:
2b:87:60:22:a3:4c:68:a8:98:b9:4d:08:36:2d:fa:
6f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:10:C5:D4:AD:05:DC:6D:BD:1C:F3:DE:F3:6F:FD:F3:22:28:FF:09
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/uRDF1K0F3G29HPPe82_98yIo_wk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.170.0/23
Signature Algorithm: sha256WithRSAEncryption
01:ce:d0:48:f4:69:6e:9c:4a:23:ec:62:c0:2f:ba:a9:2d:e3:
6f:92:2c:81:da:f8:f4:09:eb:57:46:11:08:0a:a5:a1:b9:0f:
5c:91:74:73:07:33:86:c1:68:3d:86:4a:91:f0:67:dd:c0:77:
36:f7:30:9a:1a:03:32:d5:e5:22:57:8b:65:fd:14:54:d7:cb:
e2:8a:84:fa:fe:29:74:3e:0c:6c:b8:16:28:28:f3:f1:c8:55:
fc:65:91:38:de:e6:6c:78:9b:4c:47:f9:2d:0f:ed:61:37:f9:
26:33:44:f2:35:26:36:84:e4:7c:06:4d:36:7e:79:8a:21:f6:
58:0b:19:ec:a3:b9:a2:ec:08:1c:35:9a:6d:22:59:23:b7:b8:
e5:42:a9:7b:66:30:27:30:56:08:6f:29:e0:90:08:4a:bb:c1:
c9:2d:9b:17:ea:2c:66:30:08:e4:e5:f8:38:ad:c4:e4:e8:eb:
02:76:bc:97:e4:1f:24:d8:a9:f1:aa:03:1e:1e:5a:53:f0:1e:
6c:4a:b4:97:5a:0a:0d:38:4e:97:f4:f8:4a:f8:b2:b3:6e:f5:
60:c7:48:80:d3:59:0b:78:4b:71:4d:a1:f1:29:d6:3d:26:06:
de:a6:a8:c1:ef:4c:82:9b:b2:1b:ec:ef:e2:20:a3:47:52:07:
fc:56:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org