Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yLr_AFVggfgHB1T7Y1BmNI-nKeE.roa
File: yLr_AFVggfgHB1T7Y1BmNI-nKeE.roa (raw, json)
Hash identifier: F1Zgy5Fv+Y1sCBTyFdTXhe+wS7tM+L+yzjOJgDTWq00=
Subject key identifier: C8:BA:FF:00:55:60:81:F8:07:07:54:FB:63:50:66:34:8F:A7:29:E1
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C37
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yLr_AFVggfgHB1T7Y1BmNI-nKeE.roa
Signing time: Wed 29 Sep 2021 02:39:10 +0000
ROA not before: Wed 29 Sep 2021 02:39:10 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 150.116.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3127 (0xc37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:39:10 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C8BAFF00556081F8070754FB635066348FA729E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:50:d8:e0:f2:9b:f7:60:b9:38:3b:25:6f:
07:e9:87:0a:c8:82:d2:4d:7e:c7:9a:b3:e4:21:4e:
11:9e:44:37:d5:07:6a:4c:d9:75:d4:f2:c6:b1:e6:
f9:54:6c:32:60:4d:c3:e9:a9:67:01:9e:27:0e:ed:
ba:e1:84:26:4b:da:1c:97:f3:89:ae:17:df:99:63:
e5:ba:53:79:56:7b:89:dd:88:7c:59:c7:de:3d:cb:
10:a2:31:0e:eb:72:99:c4:b4:0c:8d:ae:bd:aa:6d:
2d:01:ee:36:e2:06:8c:d5:27:fa:d9:e5:a4:64:03:
24:32:2a:b8:0a:66:50:81:ec:e1:9f:d9:3d:3e:25:
d0:a0:09:2a:78:b2:d9:0e:af:8c:31:1e:c6:05:fc:
2a:80:8e:0e:ad:b6:92:bd:9b:e6:a7:41:99:a6:aa:
f8:b1:78:57:fb:3d:33:90:e0:69:12:75:be:39:10:
c3:4e:c8:69:a9:ac:4f:f5:2c:31:13:cc:61:a0:93:
59:d0:f4:64:ca:5d:9b:f5:67:4b:3b:87:fd:94:b7:
e2:27:2a:de:e7:10:e3:ed:84:42:54:16:90:4e:5f:
e6:0f:86:06:dd:8a:f0:64:e5:5d:8b:30:98:f4:9c:
82:a9:40:23:6e:8d:8f:39:75:cd:b4:5b:29:a6:7f:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BA:FF:00:55:60:81:F8:07:07:54:FB:63:50:66:34:8F:A7:29:E1
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yLr_AFVggfgHB1T7Y1BmNI-nKeE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.128.0/17
Signature Algorithm: sha256WithRSAEncryption
41:ce:a2:8a:e6:e5:48:b6:00:a9:27:6e:88:6c:aa:4d:a4:3e:
9d:c6:24:3c:d6:00:ec:4e:31:7c:33:47:39:ea:fc:bb:00:06:
22:e2:78:97:96:cf:b3:71:ce:64:34:a8:2e:4b:f5:56:33:7d:
08:67:26:cc:07:93:7b:35:7e:a2:bc:91:8a:d5:26:ec:65:35:
da:c2:52:ed:00:74:92:28:e3:ce:1f:37:92:12:76:44:cc:b3:
cd:af:27:06:c3:b7:a1:6d:fa:0d:77:08:bb:a9:35:58:7c:93:
c7:1d:84:e2:8a:b6:63:be:c6:02:7d:0b:6b:e2:cb:28:21:72:
d8:73:60:55:6f:69:cc:6a:17:4b:81:2f:57:f2:01:e3:2b:73:
30:c6:c4:80:ce:e2:cf:32:0f:b2:f0:79:55:b8:6d:cc:87:f8:
0e:e6:15:19:b8:f4:48:17:34:a4:04:ea:44:21:6c:86:a0:ae:
4c:eb:98:7f:d4:5f:29:db:3e:e8:67:c7:67:df:12:38:9f:c0:
85:19:75:02:4f:ef:d5:a2:9e:19:7b:b2:cb:39:2c:ec:38:00:
68:93:ab:d7:f2:fe:d1:39:d5:61:38:6b:93:ca:85:27:92:5e:
5f:67:2f:3c:73:34:c2:6e:bc:5f:ed:93:68:e7:0e:5f:35:86:
b1:45:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org