Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/wdD2CTB4ZFds3spOFufEiZTWOrc.roa
File: wdD2CTB4ZFds3spOFufEiZTWOrc.roa (raw, json)
Hash identifier: 8FZ6kQ+7x+6Cie8qDWowV2wfZ5g5zZWkcU3dSU/L/MY=
Subject key identifier: C1:D0:F6:09:30:78:64:57:6C:DE:CA:4E:16:E7:C4:89:94:D6:3A:B7
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0918
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/wdD2CTB4ZFds3spOFufEiZTWOrc.roa
Signing time: Thu 22 Oct 2020 05:15:29 +0000
ROA not before: Thu 22 Oct 2020 05:15:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7532
IP address blocks: 150.116.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2328 (0x918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Oct 22 05:15:29 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C1D0F609307864576CDECA4E16E7C48994D63AB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:b0:10:c1:1c:3d:7a:68:3c:34:bd:fc:48:
ca:ff:04:51:79:f8:f8:c6:9a:22:53:20:38:3d:8f:
30:a1:c3:eb:74:f4:91:d6:ef:26:c0:7e:9c:a5:52:
c8:ae:fc:75:1d:04:22:4b:43:9d:97:2f:87:2b:9d:
d4:ef:3e:08:d3:85:27:6a:98:a6:3b:cc:a2:55:be:
86:58:01:8e:ce:5e:48:60:88:f1:42:23:41:2e:47:
f4:30:a0:58:28:ea:03:17:9c:4c:6d:fe:bc:cb:a1:
6d:1c:97:17:30:41:d6:bf:8e:0b:a0:ee:bd:8b:78:
df:e0:fa:7c:19:52:a0:e9:ae:04:c0:28:bd:ca:c6:
01:93:98:3b:74:14:72:da:b9:0b:2c:9d:3d:24:b8:
46:b9:e1:31:b0:c8:05:77:29:02:99:08:19:61:28:
5e:80:92:98:ef:99:b3:d9:d5:9a:20:a3:24:b6:cb:
c2:2b:11:68:b2:99:99:45:7d:59:a7:dc:79:56:50:
10:62:d5:ed:3d:13:43:27:3a:84:8a:40:47:9e:3b:
cf:f7:f1:38:83:b7:55:df:a9:bc:5e:92:71:71:85:
c7:a0:fd:e2:6f:45:34:d6:22:9f:51:95:80:86:fb:
6a:c5:ff:b1:81:b2:5e:c1:81:03:be:41:68:51:00:
a7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D0:F6:09:30:78:64:57:6C:DE:CA:4E:16:E7:C4:89:94:D6:3A:B7
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/wdD2CTB4ZFds3spOFufEiZTWOrc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.54.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b4:cb:38:ee:af:69:e0:1d:17:07:47:d7:14:f9:d6:f7:90:
88:51:7f:28:d7:45:79:97:84:6a:52:cc:a5:06:13:80:bc:9a:
23:c2:b6:ad:97:7f:4d:ae:26:22:ef:c7:e9:ae:92:03:89:2f:
05:74:19:5b:df:71:13:1f:dc:af:da:a9:cd:0e:6c:5f:51:76:
c8:ad:11:1a:65:0f:7e:53:ec:12:31:5d:97:a1:4e:2d:53:d1:
0c:e8:5c:ed:25:7a:e3:04:74:ce:84:97:14:28:87:5b:7d:49:
eb:23:f2:68:2b:0c:9b:57:98:d7:f5:96:4c:fc:e0:83:f3:84:
36:b8:77:59:f5:f0:78:38:2b:fa:ec:31:e4:23:be:b6:23:36:
af:d4:24:67:24:06:4a:1c:9d:3c:ed:8c:fb:78:e6:b7:64:c5:
01:78:58:14:15:1d:64:e5:7d:64:89:a2:a9:f9:f5:e4:1d:1a:
7f:3c:dc:44:d0:55:6c:87:23:35:6f:56:0c:88:d4:fe:84:3b:
e5:08:92:24:50:b9:7c:31:b4:1e:fc:c6:f6:5b:2a:09:45:ce:
10:13:d9:ee:4e:e2:6a:c0:c5:ac:e9:0e:56:fb:a0:c1:9a:00:
83:cf:f9:8b:e5:81:58:bc:ee:2f:e4:a0:db:3d:a5:9a:7a:0d:
55:31:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:49 2023 by rpki-client on console-ams.rpki-client.org