Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yP-EdW2SIqsziP78ZaZxwBNKQq4.roa
File: yP-EdW2SIqsziP78ZaZxwBNKQq4.roa (raw, json)
Hash identifier: /UQbYXow1xRa8jOEWonI4qYoOagMaOSXHkM428X3wAs=
Subject key identifier: C8:FF:84:75:6D:92:22:AB:33:88:FE:FC:65:A6:71:C0:13:4A:42:AE
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E09
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yP-EdW2SIqsziP78ZaZxwBNKQq4.roa
Signing time: Thu 29 Dec 2022 09:32:09 +0000
ROA not before: Thu 29 Dec 2022 09:32:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 63199
IP address blocks: 150.116.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3593 (0xe09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C8FF84756D9222AB3388FEFC65A671C0134A42AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:76:96:b6:a3:a8:6d:1b:17:28:0e:88:25:
4a:ee:64:f0:88:47:de:fe:ad:e2:ee:c5:57:6b:52:
9a:0c:5e:6f:75:4b:05:4e:8c:39:1b:cf:b9:b5:a3:
74:ed:4d:43:c9:08:d7:83:e9:1a:8a:ae:10:84:73:
dc:00:91:f2:6c:d8:46:1c:a8:ef:ef:0d:a6:2c:eb:
c2:1e:24:c0:09:f3:53:f5:6f:d6:4b:a8:b3:cb:1c:
db:7f:cd:fe:57:be:97:c6:3b:89:2e:fd:17:62:a1:
32:da:8f:05:0f:86:ad:21:42:25:52:f5:62:d9:33:
f7:5f:cc:f6:d4:7e:98:c2:8a:bc:15:75:c9:58:ad:
08:14:05:f0:7d:79:af:1e:5c:e8:06:c9:f2:d9:71:
64:97:1c:fb:33:75:d1:38:1f:ed:38:b3:f2:64:11:
89:37:fa:8d:f0:ea:2d:77:43:cf:02:e9:67:bd:39:
fe:89:e4:9a:ee:7a:32:36:3f:26:60:e7:d0:45:ca:
98:e9:35:9a:f9:50:af:7b:0a:fc:37:db:d8:a8:b3:
8e:89:cf:b2:d1:4c:31:f2:be:a8:d3:96:64:f2:30:
25:42:0e:10:2e:b0:07:5a:4a:a7:74:b3:fd:bf:f1:
45:ea:40:99:a6:b7:f6:a2:9e:c1:4e:0c:9d:94:f1:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FF:84:75:6D:92:22:AB:33:88:FE:FC:65:A6:71:C0:13:4A:42:AE
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yP-EdW2SIqsziP78ZaZxwBNKQq4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.92.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:f6:26:bc:61:15:e6:ea:25:95:3e:34:25:fe:9b:10:ad:70:
97:37:3d:60:c1:c4:4d:91:94:63:e5:41:8b:ff:01:01:a5:a9:
67:4a:f2:1c:c9:80:05:8a:8c:c9:49:12:b8:07:38:12:5d:dd:
49:eb:b1:f1:92:7f:e3:e0:f3:dc:cf:ff:85:9f:b8:35:7f:a3:
b2:3b:3a:a8:bd:ad:87:7a:1b:d7:70:df:87:94:3a:98:c8:9c:
2d:04:d4:e5:ee:78:46:17:4a:01:5d:73:44:bf:eb:ff:93:fb:
d3:3f:b6:bf:3b:c7:03:3a:15:0f:c7:b4:28:6c:52:83:7c:c2:
e3:f7:1b:8a:09:76:9c:3a:b9:15:96:a3:8e:00:c5:30:fe:33:
a6:0f:75:44:b6:c9:68:e7:13:45:3e:a6:27:ee:ed:75:ad:a0:
bc:4a:2e:8e:54:3e:54:88:39:f9:da:ec:57:9c:4a:b8:d8:a8:
e8:38:93:7f:02:56:c3:9d:ec:9c:4b:cb:95:d1:3d:c4:55:b5:
6f:d9:4c:19:aa:88:66:a1:09:c9:bc:f7:cd:66:85:98:e8:be:
af:b6:a4:58:4d:0f:05:3a:78:f8:ff:b0:1e:99:10:c4:b7:19:
82:eb:08:bb:69:e8:15:e7:89:99:78:50:5a:f1:6a:0c:9c:8f:
7d:65:25:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org