Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vouMuwcoKcY7pO21DUHjBjmqTKA.roa
File: vouMuwcoKcY7pO21DUHjBjmqTKA.roa (raw, json)
Hash identifier: 0Mkfmr1wQ0iiUkySiJmBGxxvHjtiS3AdH63gTLzqzRk=
Subject key identifier: BE:8B:8C:BB:07:28:29:C6:3B:A4:ED:B5:0D:41:E3:06:39:AA:4C:A0
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0885
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vouMuwcoKcY7pO21DUHjBjmqTKA.roa
Signing time: Tue 29 Sep 2020 10:02:34 +0000
ROA not before: Tue 29 Sep 2020 10:02:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BE8B8CBB072829C63BA4EDB50D41E30639AA4CA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:cd:3f:91:72:c0:e4:e9:52:59:ac:3d:c7:
0f:7e:6b:3e:4f:11:cc:a6:1b:cb:d1:ec:97:3c:e3:
d5:35:ea:36:bb:89:e4:86:bd:cc:d9:ca:a7:e5:8e:
c3:74:bf:8e:c8:d5:ba:66:4d:b1:ec:a0:76:0f:df:
0a:d3:53:e9:41:75:a2:3b:22:f8:90:28:30:05:ca:
c6:d6:87:1f:2b:6e:07:71:45:53:76:a1:7d:3c:64:
a0:88:0d:97:f8:1b:e5:04:29:1d:bb:09:0b:2f:48:
31:f3:bd:b6:fc:6a:c4:bc:0c:b9:55:97:7f:42:b9:
4b:8e:24:0b:8e:b7:36:e3:be:14:69:6b:0e:62:96:
79:3a:1c:c1:3d:e8:f4:f4:fe:d6:b1:05:38:fa:2e:
fb:7c:e9:1f:59:7c:e0:5c:a4:0a:a4:7f:dc:af:ac:
fd:77:0a:d0:b8:32:12:cc:61:38:ae:7a:17:a0:30:
e4:53:90:25:64:5c:18:f4:32:68:e7:f2:10:84:59:
62:fe:07:fa:93:ac:25:38:62:dd:c4:d0:3c:21:08:
5b:3c:70:b2:46:fa:1d:f3:fa:c5:24:92:61:72:21:
83:9e:85:ac:54:c5:44:a2:5b:bf:1e:6f:c3:28:fe:
b2:2c:a3:cd:14:6b:45:7c:fc:05:e3:67:be:a7:25:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8B:8C:BB:07:28:29:C6:3B:A4:ED:B5:0D:41:E3:06:39:AA:4C:A0
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vouMuwcoKcY7pO21DUHjBjmqTKA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.192.0/18
Signature Algorithm: sha256WithRSAEncryption
27:69:b2:a6:fa:7c:45:1a:12:83:28:f3:0d:36:c5:0e:a3:01:
0e:07:61:cf:5c:70:2d:e3:75:82:cc:41:20:da:a2:a9:8a:40:
9b:95:7f:43:aa:6a:e6:3d:ef:7f:ee:a3:d9:6c:f6:5e:30:d9:
7e:17:64:aa:34:a7:b1:81:34:56:8e:c0:54:e8:8a:74:98:6a:
fa:c3:2d:d8:2d:fa:08:1e:24:d7:eb:49:2a:d5:80:cc:db:3f:
a3:bf:0d:29:8a:15:b1:b0:47:cc:30:75:b7:42:08:b7:85:9a:
93:b1:f9:3e:e1:4c:17:28:f3:72:a5:8c:a8:20:6b:e5:01:4e:
57:bb:22:4b:f4:5c:52:60:dc:fc:f3:3d:1f:f2:eb:10:2a:4a:
d6:34:ac:6a:42:dd:77:e4:ce:ae:0a:f7:19:cc:19:be:cc:7a:
39:82:44:fc:08:77:64:52:cb:3d:b6:78:a7:3c:8f:96:3f:3b:
2d:66:4e:09:74:43:6b:61:4b:b7:26:d6:41:08:1a:12:58:0f:
e5:5b:21:0a:be:c5:a0:47:c7:3a:53:2e:0e:53:96:eb:0a:2d:
36:f1:43:38:3f:95:23:78:93:8e:ad:13:4f:89:87:61:5f:bb:
10:1d:b4:a9:a0:e4:ea:76:e9:25:ba:44:59:ec:0b:4c:0f:9c:
d1:f6:ff:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org