Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/3wDM0OVfuBwi1I41JbPp40xg700.roa
File: 3wDM0OVfuBwi1I41JbPp40xg700.roa (raw, json)
Hash identifier: 1uY104GQCpjd/8zzcH/Wmgeg4BUV6kBUnqBASynqhCg=
Subject key identifier: DF:00:CC:D0:E5:5F:B8:1C:22:D4:8E:35:25:B3:E9:E3:4C:60:EF:4D
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/3wDM0OVfuBwi1I41JbPp40xg700.roa
Signing time: Thu 15 Sep 2022 02:39:10 +0000
ROA not before: Thu 15 Sep 2022 02:39:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 223.26.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DF00CCD0E55FB81C22D48E3525B3E9E34C60EF4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:dd:71:69:e1:de:93:3c:21:a7:e3:e1:c1:
ab:79:2b:5f:48:f1:d9:63:5d:9c:0f:15:9d:bf:3b:
97:2d:0b:ed:07:34:65:55:6b:9f:d0:77:e7:63:10:
ee:22:a9:25:bd:ce:26:9d:28:0f:5d:1e:1c:40:53:
ec:02:e8:34:a4:ea:f1:e1:94:9b:a5:d7:0a:57:89:
be:08:f9:ed:7e:46:c9:57:7a:42:18:bd:b9:8d:ff:
62:8e:5f:71:cd:ed:c3:e9:b3:3b:21:2b:79:9d:9b:
62:31:ec:27:dc:6b:96:94:eb:25:6c:a7:cf:7f:68:
7b:da:46:3b:46:2a:d4:1c:11:16:e9:51:05:81:cb:
49:13:a3:a4:37:83:50:b8:f1:26:7d:ea:ec:ad:83:
e2:57:84:26:08:9a:1c:f7:1e:12:f9:d7:11:b6:5b:
bb:d7:09:e2:ee:c1:08:b1:10:43:89:53:f4:c9:da:
7b:b3:fd:2f:a1:d2:1e:24:65:5e:3e:49:7a:71:00:
d4:39:78:db:51:43:4d:65:89:dd:3a:c7:a7:a8:82:
6c:b1:bf:6b:5e:e6:75:26:49:37:bd:2c:fe:32:d3:
93:1e:cb:91:a1:9c:a8:81:0c:c4:16:4d:5c:04:fc:
30:1a:ba:83:a8:28:2b:55:d0:68:e8:a4:b1:1d:09:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:00:CC:D0:E5:5F:B8:1C:22:D4:8E:35:25:B3:E9:E3:4C:60:EF:4D
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/3wDM0OVfuBwi1I41JbPp40xg700.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.104.0/22
Signature Algorithm: sha256WithRSAEncryption
89:f6:66:54:55:ea:9f:c5:de:f2:62:c6:5d:2e:2b:83:f0:13:
08:02:88:9d:62:d3:4e:08:fb:4e:b8:3e:70:8e:8f:65:1d:b9:
5e:8c:39:c5:a0:77:34:62:f9:79:b3:30:93:3b:de:fc:76:b9:
04:94:cf:54:31:e1:1a:24:f1:bb:dd:93:88:aa:13:d5:eb:79:
6e:5d:2e:9e:26:05:21:12:4b:89:10:9c:3b:59:34:fd:ae:1e:
d7:89:db:63:c2:7d:95:c2:c4:40:a7:c9:60:b5:69:62:b0:f2:
da:ee:39:ed:6d:a8:04:a7:73:1c:c3:a4:55:e0:10:22:99:1e:
86:1f:ab:82:b0:80:42:f8:a1:28:67:b5:0f:65:46:51:a8:62:
25:d5:ce:62:fd:e8:d7:8c:94:26:e8:14:44:5f:32:b7:8c:0d:
4b:4b:1f:5b:97:2a:75:cf:01:8f:03:9a:19:81:50:f3:b8:b3:
37:82:94:b8:a6:67:eb:5d:48:2c:c0:47:e4:98:13:b7:d7:e1:
49:5e:0d:3c:b9:e5:ca:2e:b4:89:80:f3:05:b8:b3:0e:3c:07:
4c:2e:e6:86:42:ff:53:d4:b2:09:8c:c3:60:81:89:52:a4:2a:
7c:c8:76:8d:4b:50:55:88:66:3d:d2:ab:79:9d:1a:3c:58:28:
1d:ea:d3:22
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMjA5MTUw
MjM5MTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKERGMDBDQ0QwRTU1RkI4
MUMyMkQ0OEUzNTI1QjNFOUUzNEM2MEVGNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCv091xaeHekzwhp+Phwat5K19I8dljXZwPFZ2/O5ctC+0HNGVV
a5/Qd+djEO4iqSW9ziadKA9dHhxAU+wC6DSk6vHhlJul1wpXib4I+e1+RslXekIY
vbmN/2KOX3HN7cPpszshK3mdm2Ix7Cfca5aU6yVsp89/aHvaRjtGKtQcERbpUQWB
y0kTo6Q3g1C48SZ96uytg+JXhCYImhz3HhL51xG2W7vXCeLuwQixEEOJU/TJ2nuz
/S+h0h4kZV4+SXpxANQ5eNtRQ01lid06x6eogmyxv2te5nUmSTe9LP4y05Mey5Gh
nKiBDMQWTVwE/DAauoOoKCtV0GjopLEdCQBBAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU3wDM0OVfuBwi1I41JbPp40xg700wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy8zd0RNME9WZnVCd2kx
STQxSmJQcDQweGc3MDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQC3xpoMA0GCSqGSIb3DQEBCwUAA4IBAQCJ9mZUVeqfxd7yYsZdLiuD8BMIAoid
YtNOCPtOuD5wjo9lHblejDnFoHc0Yvl5szCTO978drkElM9UMeEaJPG73ZOIqhPV
63luXS6eJgUhEkuJEJw7WTT9rh7Xidtjwn2VwsRAp8lgtWlisPLa7jntbagEp3Mc
w6RV4BAimR6GH6uCsIBC+KEoZ7UPZUZRqGIl1c5i/ejXjJQm6BREXzK3jA1LSx9b
lyp1zwGPA5oZgVDzuLM3gpS4pmfrXUgswEfkmBO31+FJXg08ueXKLrSJgPMFuLMO
PAdMLuaGQv9T1LIJjMNggYlSpCp8yHaNS1BViGY90qt5nRo8WCgd6tMi
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org