Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/w6xnNER_6IymPNDtQRoHfC3eu68.roa
File: w6xnNER_6IymPNDtQRoHfC3eu68.roa (raw, json)
Hash identifier: 16faK2nT7qmtqwaQjizvIZILpreZ6ios8hpHvuWzJkM=
Subject key identifier: C3:AC:67:34:44:7F:E8:8C:A6:3C:D0:ED:41:1A:07:7C:2D:DE:BB:AF
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/w6xnNER_6IymPNDtQRoHfC3eu68.roa
Signing time: Thu 15 Sep 2022 02:39:00 +0000
ROA not before: Thu 15 Sep 2022 02:39:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 118.150.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C3AC6734447FE88CA63CD0ED411A077C2DDEBBAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:bc:d9:5f:1f:12:ba:1e:ac:da:92:ec:ef:
2f:90:78:34:e1:af:70:06:f5:db:00:ff:8a:ac:b8:
46:16:49:5d:57:84:ce:26:dc:a5:a1:1c:b5:99:14:
2d:94:73:ff:d1:ae:ca:0a:1f:8c:a4:7e:b4:27:22:
f9:4d:e2:f2:d3:72:33:7f:e4:a1:c3:10:8e:0e:f1:
51:89:9b:a0:52:0e:3b:1c:ba:00:67:c7:5d:77:5f:
a5:fe:90:b1:13:2e:5d:3d:3f:87:f1:2e:90:57:3d:
ac:57:fc:4a:4e:0e:66:f4:e3:d7:22:9f:6d:32:a9:
ef:97:54:aa:80:d3:a0:9b:12:51:99:c9:70:c6:80:
78:c2:db:4d:b5:5d:e9:7c:00:fa:6e:5b:75:1e:38:
4c:b4:d8:94:6f:6f:a9:53:e9:3c:07:c8:f7:65:11:
b0:ad:cf:e2:fb:51:cb:ef:9a:bc:b0:1d:85:10:15:
0a:09:b6:eb:94:ad:28:14:02:de:42:72:69:62:ee:
94:7a:c8:af:dd:57:f7:42:fc:55:fe:cf:30:86:07:
6f:a0:ce:32:55:49:29:2f:fd:a3:a7:80:0c:23:5f:
0e:73:a4:85:6a:a5:4a:77:4c:e9:62:1d:3a:a7:1e:
4c:65:bb:d7:db:2d:7d:a0:e9:5a:1f:ef:27:fa:ea:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AC:67:34:44:7F:E8:8C:A6:3C:D0:ED:41:1A:07:7C:2D:DE:BB:AF
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/w6xnNER_6IymPNDtQRoHfC3eu68.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:2c:1b:49:1d:d3:b3:31:e2:ff:90:0c:16:fe:1a:bc:d9:31:
1d:3b:57:e4:fb:b5:4c:17:0d:0a:2f:4b:b8:cd:86:7e:d3:5e:
ac:c2:01:98:97:7e:13:af:29:40:97:da:45:0e:3e:98:f0:e1:
27:ac:e3:20:da:ec:9d:1d:27:aa:81:72:91:6e:7c:e7:09:17:
3e:32:a8:9a:67:c0:ec:97:25:33:92:e7:f7:69:7c:61:82:a6:
a0:5d:b9:17:99:bf:b3:12:70:70:47:b3:f7:51:1e:5a:39:01:
9c:43:b1:f9:68:e9:22:25:fa:eb:71:93:3f:3c:3e:90:43:e9:
5a:bf:d0:e9:66:c4:4d:41:02:98:72:90:bf:67:5a:b3:6f:03:
58:76:96:67:22:e6:9b:f4:a7:1e:37:aa:20:0e:1f:d4:35:e1:
d1:45:15:b3:79:4f:1a:42:48:15:8e:f8:a8:de:0b:c3:2c:cd:
27:22:cd:47:cf:ea:9f:28:a0:bc:ff:e9:f7:5e:95:98:27:18:
c8:db:51:2b:87:26:ee:ab:0d:6b:c9:36:c4:1a:fb:db:16:16:
11:1c:80:f3:19:ba:d0:c0:ad:c7:75:4f:f5:e5:21:7c:56:9f:
82:0c:f3:dd:5f:46:07:1e:9e:68:12:da:e3:46:76:d1:3a:65:
61:f8:f1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org