Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yD49_txg1f-rVibZOM8hfRzE_AE.roa
File: yD49_txg1f-rVibZOM8hfRzE_AE.roa (raw, json)
Hash identifier: x2+lXBaHoM4rMzENrh8wgqXrcBI9FzboxjiDskhJ2Bs=
Subject key identifier: C8:3E:3D:FE:DC:60:D5:FF:AB:56:26:D9:38:CF:21:7D:1C:C4:FC:01
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0882
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yD49_txg1f-rVibZOM8hfRzE_AE.roa
Signing time: Tue 29 Sep 2020 10:02:32 +0000
ROA not before: Tue 29 Sep 2020 10:02:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17408
IP address blocks: 119.31.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2178 (0x882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C83E3DFEDC60D5FFAB5626D938CF217D1CC4FC01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:23:11:b2:91:55:e8:1e:47:84:a1:36:12:
2b:fa:6c:8d:b8:0d:cf:89:dc:3b:cd:44:a5:99:26:
4e:d8:0f:81:07:0e:ae:67:52:39:a1:b2:cb:89:7d:
6c:b3:25:47:0d:6c:95:1e:c8:b3:2a:11:32:79:6c:
52:1c:c1:5d:ec:87:99:7a:4d:a8:83:f8:b2:8d:9c:
87:e6:89:5e:15:6f:18:b0:58:55:a5:9f:65:aa:7f:
00:a3:04:86:52:08:e6:79:c7:8b:31:e1:36:2d:50:
44:c1:5c:c4:0e:c5:3f:5b:cb:e1:40:b0:e2:80:4d:
15:90:26:17:fc:fa:a9:27:f6:c6:63:44:8b:e7:0d:
63:7c:e1:2e:dc:89:ab:34:69:6e:a3:27:f4:4a:5f:
aa:3c:a2:ed:14:44:a1:66:72:3f:99:6b:5c:f0:91:
8b:b1:83:c5:61:29:bb:07:53:10:02:22:2d:b7:3f:
72:b6:c5:65:b9:5f:9c:6b:78:61:d7:dd:9f:c8:ab:
59:20:28:9d:fc:f8:7e:6b:2e:4e:b6:66:1e:c0:4e:
28:ef:ef:59:80:f8:53:23:75:c3:9e:df:dd:b0:bd:
93:ae:4f:8a:cc:96:6b:af:18:0b:fa:c3:8f:5b:69:
d3:8f:1e:81:40:de:6e:53:4e:5b:37:7e:e7:10:c9:
ad:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3E:3D:FE:DC:60:D5:FF:AB:56:26:D9:38:CF:21:7D:1C:C4:FC:01
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yD49_txg1f-rVibZOM8hfRzE_AE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.31.176.0/20
Signature Algorithm: sha256WithRSAEncryption
80:6c:94:77:a9:c8:00:24:ac:81:00:15:c4:a4:04:07:db:e2:
31:53:fc:82:2c:38:b7:29:f3:4d:6c:24:b0:13:9b:ba:5e:9b:
7c:a8:40:21:99:b1:27:ff:c9:55:07:5b:c6:0e:8d:d8:cf:25:
3f:50:eb:c0:56:17:fe:2c:7f:ab:ef:fa:de:9d:1b:cf:40:8a:
23:b2:d5:5f:6a:6d:d2:e8:1b:30:84:d8:c4:39:73:35:28:ac:
dc:64:d8:06:d5:9d:26:e5:9f:11:30:e5:f2:80:5b:f8:54:37:
26:6b:7f:f4:fd:81:b1:08:31:d9:18:0a:0a:1e:dc:e4:a5:38:
ef:2a:71:64:62:af:55:85:ce:a4:8c:e1:60:2e:91:89:ee:6f:
25:a1:21:de:94:fa:99:36:75:41:69:31:44:1a:e9:4c:55:b4:
b2:03:5e:0a:5b:fe:a4:c9:51:f8:03:a9:69:44:a4:6c:07:34:
bb:ed:f9:ff:5f:8f:2a:39:dd:5b:54:38:ca:37:49:7e:7f:66:
0b:dc:5e:b9:26:76:4a:fb:cb:36:c0:1e:fd:f3:61:5f:1c:01:
b0:85:29:8c:fb:31:0a:85:4b:55:ff:98:cb:99:fe:bf:f7:25:
55:df:8c:80:31:9d:e6:43:49:b1:8a:ef:3d:68:dc:03:72:fe:
50:d9:52:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org