Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/wOoOwjvSKn4wEhcv78wZiWaNx88.roa
File: wOoOwjvSKn4wEhcv78wZiWaNx88.roa (raw, json)
Hash identifier: +RKtjQ9Y4rRk6Jtb1Ac+SnqJ44TuX0wRe3p/2NeWR+E=
Subject key identifier: C0:EA:0E:C2:3B:D2:2A:7E:30:12:17:2F:EF:CC:19:89:66:8D:C7:CF
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/wOoOwjvSKn4wEhcv78wZiWaNx88.roa
Signing time: Thu 15 Sep 2022 02:39:16 +0000
ROA not before: Thu 15 Sep 2022 02:39:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10085
IP address blocks: 203.163.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C0EA0EC23BD22A7E3012172FEFCC1989668DC7CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:3c:0a:52:11:af:11:1e:6b:aa:87:0a:16:
60:f4:2f:e7:7e:98:61:ee:2a:b4:f6:a6:0d:bf:97:
ce:85:ab:c2:f4:68:30:b6:0d:57:19:7e:c4:7c:5c:
24:f9:a6:95:66:1d:f9:04:37:84:ef:0c:fa:bf:94:
5e:68:f3:11:57:e3:7e:b0:83:60:78:8f:2d:d3:a6:
35:b3:12:d6:a7:19:99:48:98:e4:d5:74:a4:05:2c:
24:09:a6:5b:67:60:db:cb:ba:1a:0f:ec:73:2e:ce:
60:a1:33:36:6e:d2:0b:98:e0:c1:44:fb:fe:8b:f9:
31:79:13:9f:32:22:63:93:e8:0f:d1:1b:75:fe:85:
d5:2f:01:76:d2:2a:27:24:78:c0:0e:7e:96:de:57:
90:b0:d3:7f:f4:44:72:90:de:43:5d:fa:1c:bd:f5:
a6:cc:68:a2:ff:1a:2a:b7:11:60:a2:59:32:78:b9:
d3:f5:ae:13:35:70:05:00:1d:75:25:7e:0a:00:a7:
ff:19:07:b9:01:e8:bd:e6:78:ca:fe:a5:22:ba:bf:
2c:04:d2:aa:48:9f:68:18:16:c7:95:27:4b:d5:9e:
57:4a:9a:29:7f:8a:ac:d8:3d:5e:92:c2:ad:e0:6c:
2b:91:a4:4a:43:34:f2:6c:d2:25:b1:fa:7f:b6:1d:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EA:0E:C2:3B:D2:2A:7E:30:12:17:2F:EF:CC:19:89:66:8D:C7:CF
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/wOoOwjvSKn4wEhcv78wZiWaNx88.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0c:b9:e6:37:7d:a3:19:d5:35:bb:69:ba:7e:29:6d:9f:20:
59:0e:3a:be:cf:ce:86:a3:6b:bd:b3:b1:3a:46:ef:28:16:b4:
5e:8e:2d:48:77:ba:cf:51:d2:44:63:24:fc:3a:45:53:8a:4e:
ba:e0:06:f6:60:f3:2b:00:f7:19:50:51:a5:30:a5:91:14:3f:
ac:6f:69:7d:62:73:e3:a3:12:e3:f1:05:70:86:ec:55:0c:bb:
bb:07:95:81:b4:f7:2f:38:56:e4:ee:4d:9f:71:d0:72:7e:23:
d4:ce:39:d0:dd:b9:6d:24:33:b6:c1:73:58:2e:53:6b:07:f2:
7d:02:b2:88:ac:02:a9:53:28:04:18:8c:23:eb:19:7b:2d:4c:
7f:1a:64:4f:d4:28:84:24:29:84:cf:72:11:b3:95:3d:bf:5c:
c2:a8:ad:e4:18:04:37:05:31:d9:4d:df:e0:8a:5b:24:d7:33:
68:c1:19:b3:7a:06:b9:07:e6:0a:a5:de:24:b6:c1:98:59:db:
2f:33:e0:fd:a3:8e:e7:4b:61:f2:d6:24:4d:a9:7b:ae:31:23:
04:a3:a6:5a:35:15:1d:f9:f5:68:a5:fe:9c:7c:15:7a:9b:49:
25:2d:ea:2a:b5:01:ce:65:a1:82:4e:94:5a:07:a4:84:49:85:
83:84:b3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org