Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/zcuNJP_z5EdlHWCJRus7zDVIAjM.roa
File: zcuNJP_z5EdlHWCJRus7zDVIAjM.roa (raw, json)
Hash identifier: RuiDD/zaVYyGH5TYCP2DGVZnppwADFrkg8yixBMqg0M=
Subject key identifier: CD:CB:8D:24:FF:F3:E4:47:65:1D:60:89:46:EB:3B:CC:35:48:02:33
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DAE
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/zcuNJP_z5EdlHWCJRus7zDVIAjM.roa
Signing time: Thu 29 Dec 2022 08:32:07 +0000
ROA not before: Thu 29 Dec 2022 08:32:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131273
IP address blocks: 150.116.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3502 (0xdae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 08:32:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CDCB8D24FFF3E447651D608946EB3BCC35480233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:8f:fc:17:ab:c0:60:76:17:94:bf:85:93:
56:96:e4:a5:77:a9:3a:16:02:ae:cf:8a:2b:c5:b0:
28:c8:e9:cb:2a:37:e7:81:d8:38:8d:32:bb:dc:49:
f4:1d:19:91:fe:29:a1:f8:df:85:e3:f4:67:0e:41:
a2:bc:17:94:bb:ea:cc:bd:d9:c5:b0:ed:88:84:3a:
17:f3:de:70:4d:bc:80:f5:e5:ac:6d:52:bd:37:3e:
c2:c1:05:8e:53:3f:ef:da:01:88:4f:3e:ef:71:cd:
b7:4c:16:b5:57:b8:f4:0d:b0:38:6a:24:6d:11:27:
3d:31:44:ea:d7:93:4f:76:3f:a4:c9:0e:ae:0b:c7:
1e:5f:bb:19:a3:03:6e:ea:52:03:5a:13:96:bf:bb:
3e:22:0a:b4:b7:13:bc:79:52:fa:97:23:f0:63:e8:
bd:2d:78:ec:07:5c:0c:01:6b:c3:fc:c0:6f:96:ed:
70:10:3c:bf:3a:69:b6:70:ba:98:a7:34:36:fb:80:
a7:9d:e7:da:d3:2c:47:97:9f:ac:a3:50:45:2f:4a:
47:e6:f6:72:41:4c:97:5d:23:04:b5:a5:da:b6:ff:
b6:5c:98:59:a5:84:d0:85:6b:88:42:74:70:69:16:
12:3f:c1:b7:f2:d1:1d:d8:ee:66:3a:ca:e5:93:61:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CB:8D:24:FF:F3:E4:47:65:1D:60:89:46:EB:3B:CC:35:48:02:33
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/zcuNJP_z5EdlHWCJRus7zDVIAjM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.81.0/24
Signature Algorithm: sha256WithRSAEncryption
18:99:26:6a:c9:5d:f0:85:27:7c:e4:50:ed:73:88:c0:6e:65:
c4:92:85:35:3a:4c:00:cd:81:2b:f5:fb:9c:74:59:5d:e9:f0:
ab:fe:82:d5:76:8a:2b:78:a3:1e:5b:f8:3e:15:29:ac:f3:22:
ae:24:85:15:a8:35:75:7c:86:45:cc:e1:79:a9:86:29:b1:8a:
24:44:79:12:4f:ba:4f:94:7b:05:e5:d1:7f:71:5a:33:08:0b:
31:83:a6:4d:57:33:55:c0:ff:87:69:3d:aa:a5:a1:ca:95:87:
48:4e:c3:2c:85:72:6e:7c:13:ca:97:1c:48:f9:ab:bc:c5:1d:
70:2b:42:bd:f8:f6:12:49:01:8c:d7:06:ce:09:71:ca:16:b8:
fa:ea:5c:b8:e3:91:2f:d3:d9:dd:9e:e9:4c:7a:60:4a:ab:bf:
80:86:6f:c9:9f:13:a8:be:9d:ab:26:b9:df:16:fe:5c:76:cc:
f1:d5:ff:33:a7:d3:d4:54:36:2f:2c:87:44:7f:4b:75:7a:80:
76:f1:40:77:ca:9c:48:40:b1:24:45:f0:29:a8:8d:a0:50:cc:
28:3d:88:d2:02:1b:3c:ac:92:83:ba:46:e7:cb:a3:10:2a:06:
71:38:ad:12:72:80:c3:b9:3e:61:27:2b:18:5a:a5:c0:f5:0b:
04:42:5e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org