Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/zczcbpWoZNyn_rilyj994NaleT8.roa
File: zczcbpWoZNyn_rilyj994NaleT8.roa (raw, json)
Hash identifier: R/zcTiHqcyDnDHGL+pXIPvZcafmf/GQyx1J2T+QP5SM=
Subject key identifier: CD:CC:DC:6E:95:A8:64:DC:A7:FE:B8:A5:CA:3F:7D:E0:D6:A5:79:3F
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 087C
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/zczcbpWoZNyn_rilyj994NaleT8.roa
Signing time: Tue 29 Sep 2020 10:02:30 +0000
ROA not before: Tue 29 Sep 2020 10:02:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.117.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172 (0x87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:30 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CDCCDC6E95A864DCA7FEB8A5CA3F7DE0D6A5793F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:22:1a:d9:b7:f5:79:2d:bc:dd:db:b8:b9:
59:d9:11:e5:f1:c7:39:bf:ae:37:d4:08:d0:9f:8c:
68:a9:c4:90:c3:07:d7:2c:a2:29:ce:d2:05:68:95:
cc:54:5c:b5:2f:6f:61:57:6d:57:0d:4a:29:cd:c8:
00:43:97:99:a0:41:1c:46:c7:e3:69:10:fc:bb:2c:
22:de:14:0b:65:b2:b1:01:98:2b:01:97:40:bf:35:
84:1c:64:78:3b:78:ed:f1:63:11:8c:97:ab:1d:ca:
7b:e4:5e:2f:16:fe:2a:2b:1e:9a:49:1c:c1:b4:fd:
21:ef:22:35:a5:a2:6a:98:24:c4:82:65:4f:79:5e:
50:16:80:c0:08:7c:8d:52:3d:d2:a9:55:c9:8c:e0:
89:65:38:ba:91:77:72:5e:8d:27:60:55:53:a2:52:
5a:a8:67:02:2a:a9:6f:2c:4e:a3:60:07:5b:72:f5:
0f:c2:5b:b9:bb:e7:c8:53:3c:96:c3:a8:ed:bb:f4:
52:cc:af:81:44:13:dc:86:01:a9:f7:cd:38:e8:f5:
38:4f:60:0e:85:f6:c5:4e:a9:8f:0b:36:00:04:ce:
f4:7d:f3:7c:24:30:56:90:2e:c3:a2:86:73:10:97:
d6:08:fe:84:0e:1b:ba:e2:69:cc:ec:6f:9a:3b:d7:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CC:DC:6E:95:A8:64:DC:A7:FE:B8:A5:CA:3F:7D:E0:D6:A5:79:3F
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/zczcbpWoZNyn_rilyj994NaleT8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.160.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:75:41:3c:9c:d1:98:bc:67:e8:67:01:da:de:59:02:c1:20:
0a:ff:14:b9:a3:e6:21:94:17:34:b5:b6:68:c2:6b:c8:20:ac:
e7:1f:bb:11:55:4c:f9:c9:e5:1f:cb:5c:c4:dd:af:20:17:e5:
45:f2:02:42:2e:14:20:ea:fd:ee:4c:7c:85:2a:a4:b3:b6:c4:
33:a3:26:a9:3c:5c:75:bb:12:cb:5d:70:54:da:e0:a5:25:97:
2e:1c:96:96:6a:85:b0:12:32:91:7f:23:90:b3:b2:e9:b5:9c:
2b:c9:1e:14:13:0e:2a:3f:50:a1:eb:f8:bd:c6:df:d2:64:01:
0c:3c:b1:ba:a8:31:df:cb:8b:63:97:d3:6b:a0:53:c1:61:01:
0a:78:43:3f:93:2b:04:56:e8:ad:a2:46:8e:cf:09:3a:57:ec:
12:dd:ca:d3:3e:38:23:a1:3b:27:54:2e:f5:f7:cd:2e:50:4c:
0f:f6:df:95:7e:6c:83:e9:63:18:9d:75:78:eb:24:68:b7:ae:
f3:d0:54:ae:76:a0:62:df:94:0a:9c:d9:3f:f8:58:11:cb:d7:
02:31:58:40:77:c2:c1:34:27:70:43:cd:c2:97:02:fb:51:1b:
5a:63:3f:7c:8d:e9:72:82:db:ff:69:a0:dc:9f:56:8b:24:8a:
4e:f8:c3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org