Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/x7m0O2s6uTxKAmyxXu47xCug60I.roa
File: x7m0O2s6uTxKAmyxXu47xCug60I.roa (raw, json)
Hash identifier: Pg2s+jumhgA6x2d2Qq4kbkufhpL262wa2xQ+33O1qkU=
Subject key identifier: C7:B9:B4:3B:6B:3A:B9:3C:4A:02:6C:B1:5E:EE:3B:C4:2B:A0:EB:42
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0ADC
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/x7m0O2s6uTxKAmyxXu47xCug60I.roa
Signing time: Sun 07 Feb 2021 12:43:07 +0000
ROA not before: Sun 07 Feb 2021 12:43:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2780 (0xadc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 12:43:07 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C7B9B43B6B3AB93C4A026CB15EEE3BC42BA0EB42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:f5:25:99:5d:b9:60:84:4f:45:dc:b4:a1:
b5:1b:1b:d3:84:a3:a8:2b:32:9c:12:04:9f:b7:97:
a4:90:31:d5:f6:28:98:ad:4a:05:df:64:d8:60:b5:
4a:c4:53:e6:e9:0d:7e:a1:a6:65:f6:a6:f5:ed:24:
10:0c:29:f5:89:8d:9d:34:e4:36:79:ea:e5:4a:26:
07:49:fd:46:4e:51:f2:6e:9f:03:9a:b8:c1:16:80:
ac:39:d0:b5:c4:04:7e:39:41:6f:07:8b:60:87:d7:
f3:5a:33:91:41:98:47:63:39:08:8c:4a:52:cd:78:
97:cc:a5:41:52:2a:b3:59:9c:0c:d3:ac:72:1b:73:
dc:c2:c7:fd:70:e4:05:48:91:c9:d8:02:ad:59:10:
45:34:d3:10:d0:8a:18:10:71:9f:88:c5:58:40:43:
76:e9:20:2a:be:d8:4e:e8:5a:ed:c7:3a:3e:00:56:
fe:36:ad:fd:5f:c2:dd:88:bd:37:af:e4:3d:ba:3a:
89:38:c9:9a:fb:e4:7a:98:f3:d1:6c:3b:3e:d5:8b:
0c:57:86:cb:6a:e2:10:92:d4:3f:6b:a5:27:b3:1b:
04:ca:27:31:77:a5:fc:88:c2:30:4d:43:a9:7a:62:
ca:95:b8:0f:51:29:06:6b:a8:53:57:e1:39:a6:1c:
4f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B9:B4:3B:6B:3A:B9:3C:4A:02:6C:B1:5E:EE:3B:C4:2B:A0:EB:42
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/x7m0O2s6uTxKAmyxXu47xCug60I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0e:e6:30:cc:01:a6:dc:49:aa:f6:7b:45:40:dc:4e:da:af:67:
c2:11:6b:00:06:70:22:fb:bf:0d:d6:d9:08:d3:e5:2f:8a:ed:
2e:e0:a3:a1:0e:72:b1:85:82:d8:2a:a5:f0:ce:45:ff:b9:eb:
77:6b:65:2f:c4:0c:78:b8:44:fd:ff:c1:70:47:c4:76:a0:cd:
c3:ca:e8:93:53:b5:35:5f:15:66:2a:1e:e5:8f:61:5e:91:ab:
fd:b1:7f:da:bc:3c:d3:0a:bd:44:8e:23:67:c1:70:87:66:80:
ca:b1:33:45:78:f9:83:5a:a8:10:f3:a3:4d:98:24:f6:9c:43:
ec:91:dd:74:75:18:1f:41:91:77:3d:df:78:d4:3a:32:e2:22:
68:6a:25:4c:81:e0:cc:9a:c4:ec:4f:82:72:d3:b1:50:39:6d:
c0:04:61:7c:31:30:9d:71:a5:2c:e9:1b:e9:29:d3:19:5a:56:
f8:7d:ad:d4:72:61:ff:29:62:21:0b:50:23:ab:41:f9:1b:bd:
12:cf:cd:1d:0d:1e:97:6f:c5:e3:e1:2c:82:60:30:77:e4:1f:
c2:d9:fe:bd:e4:f4:a0:5a:98:7c:28:ac:f8:1d:50:f2:bf:4c:
13:48:d8:44:56:c0:41:5a:16:ef:05:3d:f5:03:90:00:81:14:
ae:a2:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org