Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yhYn-eBX9Z6JLHaznccjyTCKB88.roa
File: yhYn-eBX9Z6JLHaznccjyTCKB88.roa (raw, json)
Hash identifier: +LBLa9hPWNKIETp58HCWDCXYcX0/xB5cvrDnCJEyGRc=
Subject key identifier: CA:16:27:F9:E0:57:F5:9E:89:2C:76:B3:9D:C7:23:C9:30:8A:07:CF
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0865
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yhYn-eBX9Z6JLHaznccjyTCKB88.roa
Signing time: Tue 29 Sep 2020 10:02:25 +0000
ROA not before: Tue 29 Sep 2020 10:02:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2149 (0x865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:25 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CA1627F9E057F59E892C76B39DC723C9308A07CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:cd:9d:2a:09:8f:27:22:f5:17:ec:56:32:
43:87:85:df:6e:ac:25:8a:bd:91:6a:69:ca:11:a0:
13:bc:0b:df:19:85:fb:f6:13:e3:56:86:5e:41:86:
81:6a:4f:bf:6f:4d:6d:f6:f3:04:11:dd:ab:5a:62:
7e:5c:61:81:33:d8:34:53:b5:37:87:6f:f2:48:0a:
37:3e:ea:69:bf:2c:79:36:ba:48:17:1e:fe:53:21:
36:4f:f3:0c:d0:a3:bc:5b:bc:ab:37:dc:f5:0d:e0:
aa:af:cb:3a:aa:93:65:6a:e6:3a:c1:a1:97:15:a0:
d7:63:72:5a:be:58:83:d7:ae:40:e3:77:ff:ba:22:
d8:b9:dd:1e:56:6e:6c:cc:00:43:37:c8:ce:ee:7d:
d6:07:2a:64:4a:81:f3:6f:fa:82:ff:0a:00:10:8c:
99:df:c6:0e:7a:a4:11:54:c5:dc:b1:99:d0:fc:b6:
20:06:df:71:e2:8a:5c:a2:c8:f3:ca:44:5c:bc:0b:
db:ec:fe:ee:fe:4a:d3:f2:b7:65:6f:21:d4:1f:12:
17:64:c7:c0:c7:6e:30:03:7f:b0:83:9b:8b:2b:db:
d2:66:df:46:77:a6:e4:3b:cb:32:ec:72:74:c5:4d:
84:b6:a9:cf:88:a5:f1:89:86:bc:96:2a:46:97:8f:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:16:27:F9:E0:57:F5:9E:89:2C:76:B3:9D:C7:23:C9:30:8A:07:CF
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yhYn-eBX9Z6JLHaznccjyTCKB88.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a6:e7:9f:3b:d2:17:86:39:35:78:9e:c1:0d:aa:4e:b5:e9:f7:
00:71:10:31:e7:a3:00:f0:f0:f3:1c:ae:9e:4b:37:1c:51:30:
b6:72:d4:24:9a:1d:92:3c:fa:ed:22:f8:db:fa:ba:6a:ef:e3:
93:f6:53:8b:9a:28:54:8b:f8:27:08:59:8a:1b:35:e8:cb:72:
a6:23:4d:e7:05:12:a0:20:2c:94:ef:0d:86:c2:90:79:d3:86:
93:18:41:a0:dd:05:2d:fc:23:72:56:51:f3:23:b1:1a:b8:1a:
ba:81:99:ad:cd:f8:b3:8c:25:55:49:d7:47:ef:d8:36:e9:b2:
24:69:bf:60:8d:07:f1:b8:67:fa:4f:91:ff:45:13:7c:91:1e:
8f:5a:dc:74:8f:e1:4d:fb:b0:dc:87:08:8b:69:b3:bf:2f:0f:
db:23:25:92:c7:f6:6c:6d:3c:7c:b8:c5:de:fa:d2:92:d0:29:
63:4b:e5:6e:37:80:e8:7a:34:77:cf:b0:ec:47:af:b2:4e:7d:
46:92:20:03:d4:d5:1d:cf:50:b7:0e:88:56:9b:f3:0f:4b:f2:
49:bb:88:7f:6e:a4:ea:e1:08:76:1c:d5:e3:d5:2b:a6:b0:9c:
6c:b7:ee:31:3e:4b:3d:ed:c1:b9:c8:46:29:61:7c:d1:db:29:
b9:80:36:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org