Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/zQib1dtlVvlbZ1uQg59V3I7s3_c.roa
File: zQib1dtlVvlbZ1uQg59V3I7s3_c.roa (raw, json)
Hash identifier: XWjmgHObPO2ajUgLHo7VXQV85/h1dmY7waoMGGALzTw=
Subject key identifier: CD:08:9B:D5:DB:65:56:F9:5B:67:5B:90:83:9F:55:DC:8E:EC:DF:F7
Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial: 0B38
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/zQib1dtlVvlbZ1uQg59V3I7s3_c.roa
Signing time: Sun 09 Jul 2023 05:52:45 +0000
ROA not before: Sun 09 Jul 2023 05:52:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24169
IP address blocks: 150.129.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2872 (0xb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
Validity
Not Before: Jul 9 05:52:45 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CD089BD5DB6556F95B675B90839F55DC8EECDFF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:8a:89:5a:64:c3:03:71:ab:49:a5:f6:98:
9a:0e:5b:c2:c2:80:3d:99:5b:02:ff:01:e2:c1:c0:
03:02:b6:db:41:43:32:b1:a4:e8:0b:84:27:d1:e5:
a9:2c:77:b7:06:44:02:13:1c:24:3d:17:a2:52:03:
f3:58:32:2d:da:ee:83:20:b4:f9:46:99:11:a9:ce:
8b:98:59:00:d9:d7:8d:8e:d9:ea:98:04:1c:0d:39:
79:29:77:68:72:d7:74:1b:c1:a2:50:8a:d6:5e:ee:
56:1a:12:d7:b0:c6:6c:e0:4e:b6:55:d1:26:f9:58:
cc:a5:c9:20:16:04:00:56:2f:d7:e7:ac:f7:5a:d7:
57:28:fe:7e:c1:1e:6e:91:c2:57:a7:cc:2f:63:20:
e6:9c:36:c5:dc:fe:b3:e2:f9:7f:54:73:a4:a9:8c:
dc:5f:da:42:91:39:6f:5f:a0:44:e1:d9:ce:09:18:
ee:40:da:83:da:fa:59:7b:af:bf:27:95:00:37:65:
a2:9f:e9:96:63:27:db:14:88:ec:4d:0d:0e:5c:af:
6d:d7:76:35:1f:f7:c7:86:32:21:c1:b4:1f:80:4e:
a9:47:d3:d4:8c:24:10:05:f8:f6:60:ba:a6:80:d6:
a1:ac:ab:0d:97:ba:00:3c:32:6c:04:16:63:f6:83:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:08:9B:D5:DB:65:56:F9:5B:67:5B:90:83:9F:55:DC:8E:EC:DF:F7
X509v3 Authority Key Identifier:
keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/zQib1dtlVvlbZ1uQg59V3I7s3_c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.129.36.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:c0:78:99:1c:2f:1b:20:b1:1e:23:10:70:0d:92:dc:6a:66:
04:41:1c:e8:09:c7:f7:70:de:64:3a:fd:13:1e:4e:1a:cc:b1:
27:c3:b1:2b:55:00:4e:8c:b6:16:47:89:d5:a2:cd:f4:38:bf:
3e:ec:9a:d3:e7:df:ad:4a:bb:e8:f5:56:6e:b3:8c:92:5a:8d:
a9:ce:dc:76:13:1d:86:10:62:18:e9:00:bb:d4:6a:a5:76:00:
05:81:8b:4a:bf:01:23:69:14:25:0a:d4:a4:54:1b:56:b3:6d:
77:f9:76:b6:a8:6f:62:c7:1c:50:c1:40:4d:f3:56:d5:e3:ba:
dc:6a:77:c2:9c:66:b1:f6:d8:e8:e6:17:3c:ba:a0:05:1e:31:
a1:2a:0a:80:d2:79:30:79:c8:dd:f5:48:a9:04:2d:f8:99:d1:
55:7e:9a:a0:6e:78:9a:ee:c3:9e:34:36:fc:6f:16:26:cb:58:
55:01:8f:0a:20:25:9e:85:a5:1c:a4:96:dd:a9:31:a6:b0:e4:
02:8f:77:6f:63:94:bb:d9:df:38:99:4f:c9:cd:67:06:02:73:
71:de:ce:6e:82:d6:d4:6f:84:e7:37:d7:7a:93:14:25:c5:b7:
04:13:25:e5:2a:22:81:db:7f:f4:9c:31:ed:ba:af:24:87:d1:
5a:fb:78:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org