Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1XQkv8WO3vxMVY6v_bdpLNNYN1Q.roa
File: 1XQkv8WO3vxMVY6v_bdpLNNYN1Q.roa (raw, json)
Hash identifier: ju+LlM4BcjbrHQlzfSefYSfH51rqk11eIxaIhwgVJIg=
Subject key identifier: D5:74:24:BF:C5:8E:DE:FC:4C:55:8E:AF:FD:B7:69:2C:D3:58:37:54
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 084F
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1XQkv8WO3vxMVY6v_bdpLNNYN1Q.roa
Signing time: Tue 29 Sep 2020 10:02:18 +0000
ROA not before: Tue 29 Sep 2020 10:02:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.116.104.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2127 (0x84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:18 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D57424BFC58EDEFC4C558EAFFDB7692CD3583754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:fd:c7:f1:3d:77:6d:ac:0b:b5:ed:fc:71:
dd:e4:2d:80:6d:f0:04:3e:48:82:a4:8e:5f:3d:f7:
a3:88:e5:74:4d:72:56:e2:b6:d2:78:7a:bc:e8:7c:
09:7e:56:68:a1:d8:de:5b:64:b7:14:0a:2f:d4:1e:
77:5c:3d:b8:64:33:04:df:59:63:5d:ae:f8:76:34:
d9:5f:e4:ef:d2:18:58:6b:5f:d4:fc:1c:e3:89:af:
08:e6:a2:66:af:d9:48:c3:d8:77:bb:83:d5:3b:aa:
62:fa:2e:30:5a:b0:39:25:4c:c0:45:8a:e7:6c:c5:
b0:84:1a:1e:27:f2:48:3c:58:17:ee:d2:60:4f:52:
75:86:e0:fd:41:48:61:72:6b:c2:74:94:f0:d0:4c:
0b:26:9b:a6:42:84:46:bd:fb:79:de:ed:6d:78:25:
6b:92:6b:d3:af:8e:f9:08:4b:97:0a:c1:aa:4d:c8:
f0:2b:46:5c:e3:f8:44:92:74:4f:fa:b8:5a:c5:55:
93:69:88:54:46:04:a7:b7:8f:f0:ef:b2:86:08:c2:
b3:71:3c:13:0f:92:74:e7:f4:f0:09:47:11:4a:0a:
31:fb:0d:fa:c9:ef:15:8a:e1:3c:fc:4e:af:11:39:
4b:57:ef:0f:31:d2:c0:1b:55:9e:5e:43:36:8c:f8:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:74:24:BF:C5:8E:DE:FC:4C:55:8E:AF:FD:B7:69:2C:D3:58:37:54
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1XQkv8WO3vxMVY6v_bdpLNNYN1Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.104.0/21
Signature Algorithm: sha256WithRSAEncryption
59:3a:ae:58:6c:8c:dc:52:c2:61:83:13:97:dd:9c:a4:9e:07:
f2:1d:1c:91:c9:bf:bd:96:5e:39:4e:52:37:6d:ad:95:24:e4:
64:fb:43:ce:15:c4:74:02:e8:87:31:69:c7:ae:42:46:67:a9:
b0:c9:f8:90:79:d2:26:8c:22:ac:e7:1a:c6:0a:a5:c6:a4:f2:
62:93:ef:37:30:74:8b:92:96:cf:78:95:90:61:67:b3:45:9a:
27:62:17:41:a5:1f:3d:e0:a4:c8:97:7d:a7:24:c7:03:a1:b4:
00:88:a9:2d:40:cf:0f:48:77:ec:0b:a7:f7:04:b0:ec:6e:35:
4b:31:44:66:97:8a:e0:ae:ba:70:5c:b1:80:5a:de:0e:86:6f:
52:e5:87:24:32:7b:0e:a4:04:bc:95:5c:41:1c:eb:17:a0:7f:
39:be:1d:2e:06:bb:ce:7e:4a:8e:49:80:41:a8:11:fb:69:ef:
24:57:0e:77:3c:8d:99:bc:a8:66:99:bb:27:63:5a:74:29:42:
d6:9d:2d:95:a8:d2:28:19:38:5c:1a:22:f8:4a:e9:16:c3:4f:
0c:ef:15:f3:33:7d:76:e8:de:fd:10:3a:9e:17:4d:c4:ab:08:
0f:cb:b0:23:22:24:d6:b7:7f:c8:73:e8:1e:2a:aa:f1:4a:42:
18:3e:11:e5
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMDA5Mjkx
MDAyMThaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQ1NzQyNEJGQzU4RURF
RkM0QzU1OEVBRkZEQjc2OTJDRDM1ODM3NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxrv3H8T13bawLte38cd3kLYBt8AQ+SIKkjl8996OI5XRNclbi
ttJ4erzofAl+Vmih2N5bZLcUCi/UHndcPbhkMwTfWWNdrvh2NNlf5O/SGFhrX9T8
HOOJrwjmomav2UjD2He7g9U7qmL6LjBasDklTMBFiudsxbCEGh4n8kg8WBfu0mBP
UnWG4P1BSGFya8J0lPDQTAsmm6ZChEa9+3ne7W14JWuSa9OvjvkIS5cKwapNyPAr
Rlzj+ESSdE/6uFrFVZNpiFRGBKe3j/DvsoYIwrNxPBMPknTn9PAJRxFKCjH7DfrJ
7xWK4Tz8Tq8ROUtX7w8x0sAbVZ5eQzaM+KGTAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU1XQkv8WO3vxMVY6v/bdpLNNYN1QwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy8xWFFrdjhXTzN2eE1W
WTZ2X2JkcExOTllOMVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQDlnRoMA0GCSqGSIb3DQEBCwUAA4IBAQBZOq5YbIzcUsJhgxOX3ZykngfyHRyR
yb+9ll45TlI3ba2VJORk+0POFcR0AuiHMWnHrkJGZ6mwyfiQedImjCKs5xrGCqXG
pPJik+83MHSLkpbPeJWQYWezRZonYhdBpR894KTIl32nJMcDobQAiKktQM8PSHfs
C6f3BLDsbjVLMURml4rgrrpwXLGAWt4Ohm9S5YckMnsOpAS8lVxBHOsXoH85vh0u
BrvOfkqOSYBBqBH7ae8kVw53PI2ZvKhmmbsnY1p0KULWnS2VqNIoGThcGiL4SukW
w08M7xXzM3126N79EDqeF03EqwgPy7AjIiTWt3/Ic+geKqrxSkIYPhHl
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org