Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/uoKGGCZHueICHpILsYnKKxp3BqI.roa
File: uoKGGCZHueICHpILsYnKKxp3BqI.roa (raw, json)
Hash identifier: jiR9tcb2/l6dPjAZa9F51i1jsFCnkcIcib25mLQbAtc=
Subject key identifier: BA:82:86:18:26:47:B9:E2:02:1E:92:0B:B1:89:CA:2B:1A:77:06:A2
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BF7
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/uoKGGCZHueICHpILsYnKKxp3BqI.roa
Signing time: Wed 29 Sep 2021 02:38:54 +0000
ROA not before: Wed 29 Sep 2021 02:38:54 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131607
IP address blocks: 150.117.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3063 (0xbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:54 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BA8286182647B9E2021E920BB189CA2B1A7706A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:eb:2c:1f:c1:c5:6d:ad:e0:52:fb:b4:2c:
21:cf:70:32:46:19:d6:06:10:3a:89:a0:d8:3b:99:
d4:8f:b5:8a:2b:4a:fd:b7:70:73:d3:28:5b:c2:10:
b1:66:80:c6:2f:16:4c:ad:82:47:6f:bb:8b:f7:8a:
1b:c8:57:d6:e7:84:41:45:d6:d5:10:33:bc:0d:25:
57:ef:95:fd:42:4e:6d:81:22:da:d8:8e:3e:80:28:
b4:dd:59:d1:5e:06:65:79:87:66:e0:eb:19:14:3c:
4f:54:9a:86:58:43:3c:a1:b2:b4:e6:96:60:36:05:
be:81:3f:63:5d:9c:d1:2f:ef:17:7a:f9:f0:54:93:
e6:a9:66:8e:b0:a3:29:ae:93:f4:f6:90:78:bf:ef:
65:98:4a:56:44:ff:ef:f4:18:a0:cc:61:d9:24:de:
f4:80:b7:5d:9b:d9:54:22:5b:e8:24:a6:ea:ba:f8:
8a:56:09:be:9e:34:1c:f4:1a:7d:81:3b:1c:50:b9:
77:bb:53:1a:43:dc:bc:c2:78:94:4f:29:bd:9b:ac:
ac:44:78:28:42:3e:16:a4:b3:0a:0f:d2:3c:c4:dd:
ed:93:fc:bb:98:86:df:df:d2:20:7d:62:00:10:d8:
93:4f:13:93:f0:c3:64:55:e2:29:50:93:ee:5d:bd:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:82:86:18:26:47:B9:E2:02:1E:92:0B:B1:89:CA:2B:1A:77:06:A2
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/uoKGGCZHueICHpILsYnKKxp3BqI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.224.0/21
Signature Algorithm: sha256WithRSAEncryption
25:d6:08:60:e0:2f:85:87:b2:66:41:b7:31:aa:9d:43:86:e2:
3a:b0:5d:6b:9c:e2:8d:1b:6d:79:7c:ba:a2:6c:04:fe:6b:6f:
46:c2:dc:75:50:dd:73:cb:9a:e7:81:18:f0:a7:ab:70:5c:b8:
f5:38:3e:0f:42:c5:35:23:fd:2c:fa:7e:9f:5c:5b:1f:27:c3:
3e:75:28:df:74:75:bf:25:b1:8a:8c:45:5f:f2:86:ed:3a:f7:
70:2d:7a:d0:93:86:b6:24:b5:6f:94:38:7e:81:94:e7:34:dc:
fa:9b:04:fb:29:52:63:8b:45:bd:fb:98:b5:ce:ba:de:0d:53:
1f:28:33:64:40:cf:53:69:43:a1:5a:a8:2a:9d:be:41:a4:11:
36:c3:c4:35:9f:e4:33:19:77:95:76:e7:83:e7:d8:31:db:84:
22:46:a3:7c:8b:3a:d5:b1:40:c8:ce:2c:0e:3c:4d:5e:c1:b2:
f2:c7:1e:fa:29:bf:8c:d6:0c:6f:3e:df:25:fb:40:13:ee:89:
81:46:8f:3b:b1:d0:e3:78:2e:09:82:6a:ae:49:b1:20:5b:d7:
99:be:36:f5:e9:7c:3a:93:21:76:d0:8b:ff:18:14:3a:b3:97:
8c:c7:17:d7:06:57:69:f8:76:f5:28:55:78:65:40:3c:8f:63:
00:7a:bb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org