Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1muzgPQXCX71oNJaJA09FFWm5T8.roa
File: 1muzgPQXCX71oNJaJA09FFWm5T8.roa (raw, json)
Hash identifier: 1Yvbm6pvz6sLSmjhu5VPV8NcmM+Htb/URdmrc6MMYzM=
Subject key identifier: D6:6B:B3:80:F4:17:09:7E:F5:A0:D2:5A:24:0D:3D:14:55:A6:E5:3F
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1muzgPQXCX71oNJaJA09FFWm5T8.roa
Signing time: Thu 15 Sep 2022 02:39:06 +0000
ROA not before: Thu 15 Sep 2022 02:39:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 55497
IP address blocks: 150.116.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D66BB380F417097EF5A0D25A240D3D1455A6E53F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7c:bc:be:49:be:46:7e:bb:ed:43:09:41:94:
59:c3:f1:4c:28:40:8c:62:16:4e:ac:59:31:a9:05:
75:17:9e:f4:25:4d:96:d4:4a:c4:af:cf:c4:52:f7:
39:bc:77:64:5a:f0:f4:d4:9c:73:3c:b3:0c:df:bb:
16:0b:47:64:b9:1e:cf:6b:ad:d2:1e:0d:a4:07:e4:
43:99:42:31:35:e2:18:a8:c5:82:ad:06:b9:fb:d8:
db:76:b1:7c:33:08:13:ae:69:bb:d6:8e:e2:25:31:
dd:e5:06:8b:0b:6d:05:89:7d:57:0e:f7:d2:c0:12:
cd:20:d8:fe:18:e8:0b:87:09:55:e0:15:8f:71:b6:
85:e4:49:23:47:f1:43:65:7b:fb:24:f5:6a:85:39:
b5:a7:cd:e9:34:c5:ab:1b:32:31:bf:11:e8:d6:b1:
63:4a:18:d5:44:21:bb:3f:65:39:db:26:8a:6e:92:
89:3c:b7:f7:79:47:d8:55:69:64:8e:db:e3:61:bb:
d9:00:5f:6f:5e:59:16:82:e1:b9:8f:ad:1e:a8:ad:
eb:c7:b7:ec:d8:9e:e1:af:03:c0:9c:36:27:45:d5:
af:31:55:96:64:78:c2:9a:3f:c5:55:79:e6:0b:5d:
f9:49:89:e6:da:87:8e:ac:e1:d6:52:2a:70:c5:40:
16:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6B:B3:80:F4:17:09:7E:F5:A0:D2:5A:24:0D:3D:14:55:A6:E5:3F
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1muzgPQXCX71oNJaJA09FFWm5T8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.9.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e4:fd:ea:7e:4a:8f:2b:cb:79:15:3a:f2:19:b4:60:47:91:
9d:ac:69:f0:58:c3:1a:0f:6e:07:a1:c0:8b:6d:be:83:e6:43:
77:9f:e4:bf:80:72:64:d3:9a:16:fb:4a:19:61:5d:34:ec:a8:
6a:90:6c:c8:7b:cd:58:63:47:ca:bb:66:d3:75:58:0c:3b:6e:
62:bc:c2:54:0a:b2:2d:ea:18:6b:82:9f:38:47:ff:26:80:49:
7d:44:1c:cc:8c:17:d9:c2:68:c8:89:9a:f9:f6:80:fc:05:7c:
46:c0:b7:42:8f:36:ad:5c:79:78:b3:aa:22:c7:45:53:18:41:
51:0a:37:f7:17:7c:92:5c:90:bc:12:f7:a1:89:ff:21:fa:49:
e6:8e:81:e0:e8:af:f8:90:49:1b:4e:b4:88:e4:bd:92:14:9d:
25:86:cf:b1:76:ab:9d:eb:b0:ef:bc:ba:49:b4:20:59:20:95:
76:0f:fc:52:c1:ad:83:bc:78:56:56:ab:ae:36:6f:6c:ae:9a:
45:b8:88:71:c8:6a:ee:74:a5:98:86:f5:59:a2:c1:b0:61:b6:
45:df:66:4e:6e:28:28:73:44:e4:2d:c2:58:05:03:3c:7e:6e:
1f:32:b4:c4:58:03:cf:58:63:43:1b:88:71:d1:07:cb:4e:86:
79:23:ce:53
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMjA5MTUw
MjM5MDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQ2NkJCMzgwRjQxNzA5
N0VGNUEwRDI1QTI0MEQzRDE0NTVBNkU1M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgfLy+Sb5GfrvtQwlBlFnD8UwoQIxiFk6sWTGpBXUXnvQlTZbU
SsSvz8RS9zm8d2Ra8PTUnHM8swzfuxYLR2S5Hs9rrdIeDaQH5EOZQjE14hioxYKt
Brn72Nt2sXwzCBOuabvWjuIlMd3lBosLbQWJfVcO99LAEs0g2P4Y6AuHCVXgFY9x
toXkSSNH8UNle/sk9WqFObWnzek0xasbMjG/EejWsWNKGNVEIbs/ZTnbJopukok8
t/d5R9hVaWSO2+Nhu9kAX29eWRaC4bmPrR6orevHt+zYnuGvA8CcNidF1a8xVZZk
eMKaP8VVeeYLXflJiebah46s4dZSKnDFQBZ1AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU1muzgPQXCX71oNJaJA09FFWm5T8wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy8xbXV6Z1BRWENYNzFv
TkphSkEwOUZGV201VDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnQJMA0GCSqGSIb3DQEBCwUAA4IBAQBR5P3qfkqPK8t5FTryGbRgR5GdrGnw
WMMaD24HocCLbb6D5kN3n+S/gHJk05oW+0oZYV007KhqkGzIe81YY0fKu2bTdVgM
O25ivMJUCrIt6hhrgp84R/8mgEl9RBzMjBfZwmjIiZr59oD8BXxGwLdCjzatXHl4
s6oix0VTGEFRCjf3F3ySXJC8Evehif8h+knmjoHg6K/4kEkbTrSI5L2SFJ0lhs+x
dqud67DvvLpJtCBZIJV2D/xSwa2DvHhWVquuNm9srppFuIhxyGrudKWYhvVZosGw
YbZF32ZObigoc0TkLcJYBQM8fm4fMrTEWAPPWGNDG4hx0QfLToZ5I85T
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:59 2025 by rpki-client