Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ultB3Pk2zBAWbokdcqfDqHTSTc0.roa
File: ultB3Pk2zBAWbokdcqfDqHTSTc0.roa (raw, json)
Hash identifier: jWG5RwfNYAsyZ2wfjm+/sWwgHttlWck2DvwfgOvW8EI=
Subject key identifier: BA:5B:41:DC:F9:36:CC:10:16:6E:89:1D:72:A7:C3:A8:74:D2:4D:CD
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0F8D
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ultB3Pk2zBAWbokdcqfDqHTSTc0.roa
Signing time: Fri 01 Sep 2023 08:29:17 +0000
ROA not before: Fri 01 Sep 2023 08:29:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17408
IP address blocks: 150.116.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3981 (0xf8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BA5B41DCF936CC10166E891D72A7C3A874D24DCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:23:f9:b7:f8:df:2a:aa:0c:8c:c3:25:39:
b1:d9:ae:f4:7f:d5:89:7a:d7:5d:42:ab:87:78:10:
6b:13:78:61:40:69:ec:53:7a:40:79:02:0b:e0:88:
3c:e3:3b:8c:aa:91:41:b2:a9:de:e9:75:98:48:c7:
c1:10:70:4d:50:29:3c:2b:90:d6:e8:37:10:51:3e:
63:5c:43:87:46:0d:9e:b3:0b:b2:1f:ea:28:40:d9:
dc:bd:1c:30:45:a8:57:f4:a9:56:95:00:a1:2f:83:
a8:47:d6:2e:69:71:05:97:b7:26:19:4f:c4:00:ee:
de:62:69:37:d6:b4:8a:b0:da:e5:6d:39:9f:af:40:
2a:09:22:ac:cb:df:74:ee:7b:33:03:c6:1d:74:09:
7b:90:7f:4b:c5:cb:27:71:e2:8b:fd:ae:33:26:77:
a2:a2:38:b7:b8:a4:b0:e1:6d:03:ed:59:2b:69:05:
72:66:2c:a0:cb:83:bb:4d:72:9f:0e:ed:29:27:99:
3b:5e:f2:70:f7:d4:b7:b2:39:05:46:30:18:72:5e:
2f:8e:57:99:7a:44:f7:ff:e9:36:57:f5:2d:a5:95:
8c:a1:50:3d:ee:d6:a0:2c:ce:de:66:03:4f:2e:ee:
25:cf:ed:04:21:b7:65:83:77:b3:4a:86:6a:c8:ea:
5b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5B:41:DC:F9:36:CC:10:16:6E:89:1D:72:A7:C3:A8:74:D2:4D:CD
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ultB3Pk2zBAWbokdcqfDqHTSTc0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:f1:ce:ef:4d:b3:d4:84:2d:d3:32:43:e2:5d:6f:29:cb:66:
1a:14:d9:50:c1:16:7f:53:38:40:42:b5:7b:ff:fc:a1:4b:54:
e1:fe:36:50:e7:70:55:0c:11:6c:ae:53:c7:b3:9a:b3:6b:c1:
b3:e3:c2:8b:e7:69:5f:77:ea:11:98:e7:0a:51:ec:db:dd:dd:
44:ea:2e:c5:1e:b4:45:80:e9:c1:e7:6d:38:46:9e:eb:56:c9:
c7:fc:f4:85:9c:70:42:f8:0b:73:ce:17:63:f9:5c:51:fd:9b:
21:9c:77:aa:e0:29:3b:3f:7e:96:ac:97:af:ee:90:a7:1a:6f:
7b:d9:17:fd:66:c1:e2:14:9e:de:72:75:f0:4c:96:8e:c6:b5:
6d:18:af:15:69:4b:bb:94:48:40:02:8c:25:a0:fe:d4:f6:65:
50:86:7b:17:c8:5b:c4:a8:ac:22:92:7a:4c:7a:a1:90:69:36:
29:cb:2a:43:7f:f9:f4:9d:60:d7:8f:c6:c0:cf:c9:5e:c4:70:
ca:e4:2b:40:2d:68:0d:92:7a:2e:8c:de:ad:eb:61:fd:fb:c2:
ad:b5:f7:72:76:e7:00:3a:2e:14:52:bd:d5:ea:0c:22:2d:d0:
0c:e9:48:4b:06:60:cd:9c:8a:ec:37:18:89:3e:2f:6c:82:f1:
dc:94:aa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:57 2025 by rpki-client