Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yWCJWJH3DHd2uyi44LUI5MNhj50.roa
File: yWCJWJH3DHd2uyi44LUI5MNhj50.roa (raw, json)
Hash identifier: KFQxYSe2W5wYT6hXLw2Cbmc0CgVp8ry99qq7CS7SNJ8=
Subject key identifier: C9:60:89:58:91:F7:0C:77:76:BB:28:B8:E0:B5:08:E4:C3:61:8F:9D
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C1C
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yWCJWJH3DHd2uyi44LUI5MNhj50.roa
Signing time: Wed 29 Sep 2021 02:39:02 +0000
ROA not before: Wed 29 Sep 2021 02:39:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 63199
IP address blocks: 150.116.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3100 (0xc1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:39:02 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C960895891F70C7776BB28B8E0B508E4C3618F9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:b7:87:53:b9:c0:ed:54:60:ed:fc:c8:94:
a6:a8:91:4a:52:7b:ef:1b:52:00:28:a1:6e:9b:6a:
46:d2:e4:9e:92:36:60:ad:ab:ad:aa:8b:a2:a9:d1:
46:9a:a1:a7:bd:a4:9e:75:78:06:d6:74:54:52:e1:
af:68:05:bb:4f:12:f2:77:74:44:7e:e3:69:42:4a:
70:cb:58:b3:c9:8f:1c:8f:bb:72:f2:c8:17:ae:57:
47:13:f5:b0:42:d3:0e:7d:33:76:ad:f3:9a:80:2f:
4c:61:18:31:96:33:0b:47:7c:98:fb:c4:47:fc:99:
5c:24:cf:16:30:d7:9b:a6:c6:1a:1d:eb:f3:b7:74:
a4:a0:63:8d:c1:cd:15:5d:b2:f7:48:da:5c:79:c4:
c2:da:c6:e4:78:f7:b7:d8:19:e2:9d:97:8f:1c:af:
f7:80:dc:97:98:00:a4:fe:41:f7:3b:f4:df:4a:d5:
96:a8:cb:65:bf:aa:c0:ac:7d:2d:1f:34:05:f1:ba:
97:20:e0:5a:da:de:66:02:f4:16:ea:94:6e:7b:0a:
dd:d2:82:fe:dd:d5:01:ec:f6:a8:2e:ee:1d:58:48:
10:07:72:d8:82:11:75:f1:c6:f5:2d:96:32:b8:7b:
70:44:99:b1:d0:e6:19:16:c4:69:68:ea:2a:57:71:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:60:89:58:91:F7:0C:77:76:BB:28:B8:E0:B5:08:E4:C3:61:8F:9D
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yWCJWJH3DHd2uyi44LUI5MNhj50.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.82.0/24
Signature Algorithm: sha256WithRSAEncryption
15:7b:0e:77:2c:56:2b:8a:8d:ee:e5:6a:fc:d8:15:e2:44:f6:
99:d9:19:12:79:37:4d:86:10:ed:96:5b:ac:f4:84:fd:c1:dd:
47:03:7c:b6:92:da:4b:d0:5e:83:62:e0:d1:ad:65:0f:ce:d0:
99:09:e4:86:dc:af:4e:8b:3e:64:76:9d:50:fb:e7:af:ed:ea:
e4:0c:9a:ad:4f:64:09:2e:f3:6c:19:50:a1:7e:1d:ed:8c:aa:
40:82:74:f3:c5:22:e5:90:5f:11:ee:ff:f9:a6:5a:a6:a6:33:
69:7f:d2:1e:7b:41:43:7b:b0:e3:0d:36:38:74:a7:67:22:f3:
3d:f7:af:d9:51:a4:66:49:c4:e8:1a:e5:0d:4f:39:1e:2e:51:
95:ec:4b:be:37:ec:b4:7e:92:d6:0f:c8:ac:e5:4f:c8:f7:52:
75:c1:d0:aa:c1:68:96:32:01:83:37:29:50:88:74:b0:ee:6d:
4d:7b:66:53:35:8a:8d:51:00:0a:c3:61:dd:b8:67:03:e9:65:
29:6f:12:21:df:d2:78:c4:10:74:6a:59:68:a7:67:33:9d:28:
0a:b6:a4:a7:27:cb:d5:c8:06:c2:bf:a4:3d:e3:07:6d:3a:6a:
25:3d:87:ed:0e:67:fc:52:b2:49:36:6a:d6:7e:f1:b0:12:4e:
fd:dd:c4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:19 2025 by rpki-client