Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ws9rVoMukmdAH4--FaC18iS6HVE.roa
File: ws9rVoMukmdAH4--FaC18iS6HVE.roa (raw, json)
Hash identifier: y+bvYTH/KTxusQMS0IWOFYFsZkzP74FsJpVw2ETPi7M=
Subject key identifier: C2:CF:6B:56:83:2E:92:67:40:1F:8F:BE:15:A0:B5:F2:24:BA:1D:51
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ws9rVoMukmdAH4--FaC18iS6HVE.roa
Signing time: Thu 15 Sep 2022 02:39:15 +0000
ROA not before: Thu 15 Sep 2022 02:39:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7532
IP address blocks: 150.116.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C2CF6B56832E9267401F8FBE15A0B5F224BA1D51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:09:62:b7:bf:03:7d:1b:41:c6:f3:12:bd:
b5:30:11:37:56:52:ba:8e:0f:ea:92:44:61:80:12:
44:9c:e0:eb:d7:aa:35:bb:7f:6a:d6:eb:33:7f:f1:
7c:e8:ca:e0:04:41:50:43:b3:b7:3c:2e:22:30:a8:
1e:9d:4d:7f:c8:1c:36:12:1e:c8:0d:8c:78:1d:d4:
c7:bd:49:80:14:e2:7d:aa:d5:99:08:01:29:75:67:
f3:a1:5f:03:a6:9c:22:ce:aa:7c:9d:4c:23:b7:92:
d7:3c:54:6e:63:77:57:35:cf:5c:e3:17:db:5c:7c:
df:e6:b2:e6:dc:e6:83:eb:42:c6:10:f3:35:15:96:
ee:61:80:93:8e:f2:48:7c:06:93:f4:09:47:e3:a1:
52:cf:a3:62:b4:dc:38:27:ea:05:bf:59:c0:73:2c:
28:cc:97:13:72:c1:dd:e7:50:d2:36:ff:eb:c7:61:
0a:2e:80:8d:b2:af:a3:b4:ff:14:c8:c1:b3:51:ac:
cf:d9:43:a1:45:8b:b3:22:47:81:4b:59:63:5f:89:
89:87:e3:51:e0:91:4c:f9:3b:b2:b4:d1:37:fd:e1:
d4:08:1b:90:5b:2a:c2:80:a2:f5:cf:e5:3e:36:66:
36:db:6b:33:0d:e3:49:73:da:7c:17:16:d5:7c:13:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CF:6B:56:83:2E:92:67:40:1F:8F:BE:15:A0:B5:F2:24:BA:1D:51
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ws9rVoMukmdAH4--FaC18iS6HVE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.54.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1a:e6:b9:eb:2c:9c:ad:d6:5f:16:5d:37:9d:e0:68:df:21:
5a:ac:87:90:02:9e:3e:e3:a5:f2:18:33:6f:fa:26:df:39:64:
89:1c:ba:3f:bc:e1:39:14:a1:04:82:ed:b5:f8:89:35:03:1b:
aa:29:cc:e4:01:e9:d5:3b:de:e1:06:f4:34:15:e0:8c:b6:04:
43:62:81:f2:ec:47:dc:a8:13:19:b8:b0:74:ca:86:03:7c:3b:
57:f8:28:8c:72:95:81:15:ba:e5:ee:b7:09:ed:3b:43:88:38:
b9:40:44:3f:86:95:b0:5d:b6:e1:93:38:5d:94:44:0f:44:47:
1c:ea:5e:ed:53:97:d3:3c:42:8a:6f:0e:b3:fc:f6:a1:e6:13:
54:27:d0:88:a7:2a:ca:28:3a:03:d9:62:47:97:0d:36:ac:40:
8c:42:b3:87:98:36:46:2d:a5:93:2b:cb:4c:93:10:31:31:21:
44:7e:af:43:c2:8b:cc:09:13:3a:ca:ea:93:05:f0:c7:3f:d5:
44:70:f8:3c:79:a1:66:83:d8:8a:0a:c1:62:76:fe:33:96:3b:
68:40:57:0f:8f:c6:9a:83:60:98:cb:c0:84:7f:fc:e6:3c:65:
4d:79:be:52:53:f3:81:3a:34:61:fc:40:3b:19:85:1c:b6:66:
88:10:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org