Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vKptaBnbni6l1ivSVLuO0ybMuyk.roa
File: vKptaBnbni6l1ivSVLuO0ybMuyk.roa (raw, json)
Hash identifier: Mc1ISlcWXSr6BM0oWRXl8FgxfRBzZP5NazdyCWGNdjo=
Subject key identifier: BC:AA:6D:68:19:DB:9E:2E:A5:D6:2B:D2:54:BB:8E:D3:26:CC:BB:29
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BDC
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vKptaBnbni6l1ivSVLuO0ybMuyk.roa
Signing time: Wed 29 Sep 2021 02:38:47 +0000
ROA not before: Wed 29 Sep 2021 02:38:47 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7532
IP address blocks: 150.116.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3036 (0xbdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:47 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BCAA6D6819DB9E2EA5D62BD254BB8ED326CCBB29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:c1:81:42:9e:95:52:32:0f:f6:e4:b2:9c:
cb:80:cc:87:00:aa:e8:9f:28:31:6b:82:12:56:92:
97:e2:72:89:27:9b:9c:f6:fc:88:b7:79:ec:14:24:
e1:04:3d:6e:00:6e:2f:19:51:13:6b:d7:29:a6:65:
4a:a8:1f:ed:2c:4b:1c:7d:74:87:17:f8:19:da:2a:
dc:67:46:f8:75:e8:78:27:d7:a8:98:e8:05:e0:b7:
79:1d:5f:10:af:d4:38:91:d3:1a:80:84:48:09:36:
3d:aa:63:f2:8b:b7:ff:45:75:70:a0:ff:d2:ce:aa:
09:9a:19:a8:aa:a9:58:cf:7c:b1:1e:1d:69:80:d9:
08:bc:f2:85:61:35:e8:53:72:a7:c9:03:cc:9b:22:
58:84:d2:a3:9e:ee:ac:e6:aa:e1:91:60:86:bf:a1:
70:5d:24:8f:ea:91:94:7b:a7:da:4d:91:1e:87:28:
36:40:53:8d:e6:e2:c9:91:10:03:c7:14:f0:0f:46:
3d:2f:83:bd:c3:31:ba:72:22:2b:f1:d7:7a:38:b1:
64:78:0f:35:d3:90:f1:86:6a:6f:39:1a:20:ca:5b:
c5:6d:af:60:58:8d:2d:c3:09:4c:fb:d1:84:d4:a9:
7c:f3:52:fa:a8:54:e5:81:b7:d0:27:9d:57:84:97:
b8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AA:6D:68:19:DB:9E:2E:A5:D6:2B:D2:54:BB:8E:D3:26:CC:BB:29
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vKptaBnbni6l1ivSVLuO0ybMuyk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.56.0/21
Signature Algorithm: sha256WithRSAEncryption
54:50:da:ef:59:f9:e1:6c:4a:f0:d7:c8:26:99:26:bd:4c:14:
15:de:ac:b0:b9:de:75:b3:5b:e1:de:89:fc:2b:3d:6f:f5:5b:
d5:be:5d:3b:05:7c:99:a4:fc:c9:62:54:73:25:3e:de:6a:22:
2c:2c:e2:ac:f9:3a:1d:d3:b9:84:d5:55:92:6e:13:87:a6:33:
40:e2:2f:b6:92:20:79:9f:69:8b:92:9d:56:53:4a:10:97:c6:
9a:88:6a:31:21:33:e3:43:cf:9f:6f:03:46:6c:94:df:ce:88:
68:de:ae:c8:49:3a:dc:13:b6:48:48:92:9c:5b:88:82:52:76:
9b:7d:1c:f6:96:86:ec:24:e5:30:c1:fc:05:fc:a1:c5:4d:2a:
b2:8a:60:af:2a:94:43:27:17:c9:2c:24:96:b5:0e:92:5b:1c:
d1:a9:ac:e9:3b:bc:ba:75:83:f3:4f:3c:b5:8c:25:0b:81:a4:
2b:9f:22:1b:c1:26:5a:51:ae:f9:50:96:9f:ad:90:88:00:cb:
49:77:b5:64:4d:f6:e9:28:b5:cd:0c:6a:6c:5d:18:10:4e:e9:
95:0c:fc:7c:16:ff:0d:99:33:59:7d:5a:4e:8a:41:5a:82:c0:
2c:34:c8:ea:57:6b:ff:ef:cf:44:bf:ec:86:6a:8b:bf:8b:3e:
03:e4:4e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org