Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vJ8ZV8Gi7rRe6hJhgmO0NE7fnHs.roa
File: vJ8ZV8Gi7rRe6hJhgmO0NE7fnHs.roa (raw, json)
Hash identifier: DmeCIIbCdBQBt3QjieTwxjHfb9QNuXQAG2T7fkqJOkw=
Subject key identifier: BC:9F:19:57:C1:A2:EE:B4:5E:EA:12:61:82:63:B4:34:4E:DF:9C:7B
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0898
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vJ8ZV8Gi7rRe6hJhgmO0NE7fnHs.roa
Signing time: Tue 29 Sep 2020 10:02:40 +0000
ROA not before: Tue 29 Sep 2020 10:02:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131607
IP address blocks: 150.117.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:40 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BC9F1957C1A2EEB45EEA12618263B4344EDF9C7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:0e:78:f3:2f:1d:b4:dd:2d:9c:f1:14:bd:
e7:60:b9:43:88:ff:c8:71:09:ac:54:6e:56:dc:e6:
01:c8:4e:12:b7:aa:f3:5f:15:83:78:16:b6:14:7d:
db:52:00:77:1a:da:f0:d8:d7:b1:9e:68:04:5a:7b:
e7:7a:45:a0:85:bd:d1:43:22:b4:2d:22:e3:66:b6:
b9:d0:cf:ff:b9:ef:e4:29:89:33:07:e2:31:d1:16:
ba:a3:2b:c5:f8:87:32:61:4f:10:e9:7e:73:6b:d8:
1c:a3:d4:81:f2:47:44:7f:6c:03:40:6a:15:0f:13:
47:b2:7f:20:9d:ad:5f:c9:15:82:94:ae:c2:18:30:
82:8b:eb:23:8a:85:d5:f6:71:c6:06:64:04:60:ea:
36:c4:ff:83:da:63:3d:8c:29:08:b5:82:d4:0b:e8:
af:78:9e:71:07:71:f7:71:78:24:96:7a:47:04:bb:
bf:22:00:aa:97:b1:d0:7b:4b:ec:e8:48:93:67:fd:
5c:f6:bc:f3:bc:39:40:da:cf:9d:af:97:26:4e:64:
3c:7e:bb:81:b4:55:94:13:f7:81:1f:97:a3:07:d9:
d1:f4:4d:05:90:da:ba:e4:0f:b4:af:3e:c1:3f:64:
f1:00:3a:97:61:01:6f:e9:fc:2a:36:2f:f4:0d:e4:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9F:19:57:C1:A2:EE:B4:5E:EA:12:61:82:63:B4:34:4E:DF:9C:7B
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vJ8ZV8Gi7rRe6hJhgmO0NE7fnHs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:c8:0e:9e:aa:1e:57:47:14:83:2f:f3:52:13:58:ff:85:2b:
ec:69:2a:17:7d:9e:e6:e4:94:5e:f6:05:6d:2d:87:54:9e:4a:
da:7e:b7:79:80:19:09:57:aa:4c:6c:5e:97:f1:18:78:a2:31:
f3:5d:e8:47:9f:ae:af:dd:7f:fa:6b:9d:dd:66:47:d7:4d:28:
10:c7:48:a6:ef:78:cb:9b:8e:21:d2:0f:e5:a7:85:24:9d:5c:
c5:e4:3e:4e:da:e1:82:a6:1d:90:83:ee:1e:77:bf:e4:50:bf:
7f:6a:4d:bc:25:54:66:ee:8b:4b:ff:4e:03:7b:00:78:ee:27:
5b:99:b6:84:6d:8b:81:93:09:cc:52:25:04:41:8d:62:a1:69:
7e:9b:00:1f:1c:33:1f:40:ca:ac:cf:dc:35:40:c9:ba:83:3f:
5b:d6:e4:5f:fe:9a:53:91:0c:cf:5b:dd:0c:98:45:8d:16:b4:
2a:73:1b:e2:de:b6:7d:a5:84:4b:cc:30:4d:af:dc:9e:37:65:
a1:2e:ec:cc:8a:f8:d0:9f:5c:77:98:0b:b7:7c:d6:52:42:dd:
c8:05:ed:12:13:68:c5:11:6c:d3:82:7e:ea:4b:31:f0:23:ad:
41:a8:5d:c0:05:b3:a3:94:bc:85:81:49:c8:14:d2:a9:2e:97:
7b:c3:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org