Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/v0oXJcB0k4KZhO-9zVuhVO3SLIs.roa
File: v0oXJcB0k4KZhO-9zVuhVO3SLIs.roa (raw, json)
Hash identifier: S+7wbwU0gwttKOKqEFZxy6jLRi3GgyPWMjqwCPx6SxM=
Subject key identifier: BF:4A:17:25:C0:74:93:82:99:84:EF:BD:CD:5B:A1:54:ED:D2:2C:8B
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E05
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/v0oXJcB0k4KZhO-9zVuhVO3SLIs.roa
Signing time: Thu 29 Dec 2022 09:32:08 +0000
ROA not before: Thu 29 Dec 2022 09:32:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 203.163.192.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3589 (0xe05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BF4A1725C07493829984EFBDCD5BA154EDD22C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:4f:25:6f:d7:32:b5:13:99:29:e5:44:ff:
9e:78:0a:37:95:2f:05:10:14:07:00:16:2b:68:ae:
23:9c:cf:64:8a:57:8b:16:51:a2:9c:b0:4f:b9:66:
1c:a9:70:de:e1:ac:0e:06:65:79:98:f8:75:1e:9d:
3c:e4:db:44:27:e8:a8:6d:8f:e6:17:ae:ca:7f:4f:
a1:f7:42:e5:db:49:f3:e1:43:2c:ef:d4:c1:fd:32:
bf:fe:58:4f:39:15:a9:7f:41:34:2c:d1:75:0c:31:
9a:f4:8c:3a:27:ae:1b:d5:73:75:05:88:d3:14:7c:
fe:49:77:97:1e:48:35:7c:2b:94:1e:09:de:ab:68:
be:a4:d8:28:1e:f7:a0:19:09:82:6a:11:7d:aa:67:
ec:ab:ab:d5:c0:13:c1:72:e1:fb:9b:d4:b3:aa:43:
42:ce:61:d0:da:84:fd:8f:09:17:02:ce:88:f4:2c:
b2:e1:a3:c0:c6:aa:68:64:15:19:a9:5d:fe:af:48:
4b:9d:59:f7:7e:33:6a:71:eb:2f:08:db:57:20:f3:
76:69:e9:1e:98:6b:82:f1:25:26:01:39:46:13:a4:
04:f5:4e:0e:a9:46:78:40:bb:7d:b4:ba:45:f5:b0:
9f:64:2b:eb:85:e5:65:a4:81:d8:50:04:70:51:70:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4A:17:25:C0:74:93:82:99:84:EF:BD:CD:5B:A1:54:ED:D2:2C:8B
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/v0oXJcB0k4KZhO-9zVuhVO3SLIs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.192.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:ea:e2:37:d7:4c:f9:6f:e5:cb:42:68:96:fe:cf:10:e8:52:
34:aa:50:e3:bc:93:24:a0:5a:e9:87:e5:7d:cd:01:f0:55:43:
2e:83:a2:91:90:3f:94:07:d1:68:ec:02:9e:c8:94:bc:b5:8f:
9a:86:a5:cf:a6:93:ed:8f:32:5a:3e:b8:f3:0c:52:31:75:9b:
12:72:21:d0:d2:93:fe:e5:ec:7d:a0:56:13:01:3b:4f:98:10:
3e:15:61:98:13:ef:00:d6:b1:68:9c:1b:50:ab:28:ef:71:c2:
8c:54:4a:9d:3c:2f:f3:56:f4:a1:77:0d:06:64:fd:43:5e:8f:
da:bd:7c:70:03:50:36:c5:c1:03:dc:a5:a3:db:6d:68:02:a1:
0c:40:4b:eb:38:0a:86:de:43:dc:84:b5:13:67:bd:23:de:bb:
28:10:60:4f:1e:45:01:21:d2:2e:27:4b:5b:29:6a:03:54:a4:
04:63:d3:de:da:fc:0c:58:51:f1:b5:b2:e8:a2:d7:fd:0f:75:
ce:ab:53:42:1f:b9:91:78:d4:f5:f6:79:48:69:2e:ac:d1:0f:
f1:01:62:5d:af:18:92:b8:d7:5e:1b:d4:9a:d9:bd:45:1f:c7:
ca:33:df:31:68:69:7e:b3:19:21:7b:6d:84:16:9e:b1:b9:ae:
5e:36:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org