Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yUw7YVtXN-pQ9pJgSmJWMM46iSM.roa
File: yUw7YVtXN-pQ9pJgSmJWMM46iSM.roa (raw, json)
Hash identifier: Hbluiug1BTMT0BlLAHp3+Ffa9pnz1nGrKOnHj+baTmw=
Subject key identifier: C9:4C:3B:61:5B:57:37:EA:50:F6:92:60:4A:62:56:30:CE:3A:89:23
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0B0C
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yUw7YVtXN-pQ9pJgSmJWMM46iSM.roa
Signing time: Sun 07 Feb 2021 12:59:46 +0000
ROA not before: Sun 07 Feb 2021 12:59:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 10085
IP address blocks: 203.163.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2828 (0xb0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 12:59:46 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C94C3B615B5737EA50F692604A625630CE3A8923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:21:ec:dd:7f:c3:8b:75:f8:50:05:43:6d:
39:b4:ef:a2:f1:e1:be:fe:ba:84:86:0c:f1:50:12:
de:5b:96:4e:87:bb:04:63:33:8f:5f:af:c2:fc:12:
71:ba:c1:b9:9b:3d:d3:74:26:c2:57:7d:cd:e3:3c:
82:3c:bb:9c:52:c5:07:7f:5a:c7:5c:07:97:77:6f:
fb:3d:9f:17:e7:a1:e7:38:fe:b5:03:c3:4d:c8:6c:
6c:e4:c6:01:74:07:48:50:c6:30:e3:bb:30:94:5b:
42:1e:62:d3:a0:09:21:8c:75:a4:70:46:96:1c:e0:
db:ba:70:ea:61:7c:40:5e:ec:d4:41:fb:ad:27:12:
c1:5a:c5:a4:f5:ec:b7:89:47:53:08:50:94:e1:81:
77:5c:5e:30:51:34:e9:c6:3c:30:46:2a:26:59:05:
1e:9c:b6:23:78:c9:18:b5:00:d9:e9:d7:0a:3d:3c:
3a:e8:5d:c0:e7:87:73:fd:4b:40:84:43:ac:bd:07:
2f:ca:52:b7:26:d7:f3:fe:fa:42:51:b7:de:35:46:
cf:25:80:6c:69:41:dc:2c:4e:21:d9:9f:3b:41:b3:
dd:ee:db:a3:08:d8:3f:68:7d:45:15:2c:28:ee:0a:
1f:9a:c2:11:88:02:1c:8f:5e:1d:a3:06:d3:8a:c2:
69:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4C:3B:61:5B:57:37:EA:50:F6:92:60:4A:62:56:30:CE:3A:89:23
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yUw7YVtXN-pQ9pJgSmJWMM46iSM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.214.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:0f:c5:e2:2b:e6:21:fd:2f:2e:dc:3d:fd:1b:1f:b2:ee:09:
5e:d8:e9:c2:43:5b:77:3f:bb:82:eb:e8:7d:35:b8:06:0d:78:
a4:48:6d:41:4a:9a:22:8a:9c:0a:d1:a8:88:17:ec:6c:66:cc:
2c:08:80:05:37:c9:e0:2c:f4:e2:b4:fd:3d:78:46:54:89:65:
bc:0a:b7:bb:67:6a:bc:69:a6:5d:ee:8a:39:82:93:5f:76:d8:
29:30:68:8b:4b:97:d1:d2:66:2f:9a:48:98:b6:02:89:5f:a2:
6e:7d:26:89:2e:c2:e8:10:8e:2a:f9:07:9d:70:c6:89:76:d0:
e6:95:de:1f:c0:e3:54:15:3e:7a:9a:5e:32:70:ad:a6:c4:ed:
82:2e:48:82:10:bc:2e:33:06:8e:8a:c2:10:27:97:6d:a1:60:
d2:cd:39:c6:be:d4:a7:f2:64:2f:fd:4f:b0:41:04:6d:e7:87:
82:71:f1:0d:af:7f:06:00:15:c4:19:c2:c3:11:9d:d9:eb:79:
b1:7e:85:1a:d4:1f:1d:66:ab:12:56:d5:9e:d7:fb:0d:5f:d4:
83:ad:74:63:3b:c2:6f:8a:2d:e5:e4:9f:21:73:f6:a0:e0:bb:
5f:c5:91:6a:cb:e8:11:d0:0f:02:12:4f:65:f1:fd:43:df:05:
68:42:f2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:33 2025 by rpki-client