Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/46nAinZEACguo0oCfxmCUvjsUpQ.roa
File: 46nAinZEACguo0oCfxmCUvjsUpQ.roa (raw, json)
Hash identifier: h9pnkojJy7fCVGp9tK9Q/qdAfauIBNmfK7IvD0+yYfs=
Subject key identifier: E3:A9:C0:8A:76:44:00:28:2E:A3:4A:02:7F:19:82:52:F8:EC:52:94
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0AF4
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/46nAinZEACguo0oCfxmCUvjsUpQ.roa
Signing time: Sun 07 Feb 2021 12:58:54 +0000
ROA not before: Sun 07 Feb 2021 12:58:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131600
IP address blocks: 223.26.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2804 (0xaf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 12:58:54 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E3A9C08A764400282EA34A027F198252F8EC5294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:f6:31:b6:c4:b8:24:92:f3:cc:6c:13:ee:d1:
ed:cf:01:81:f5:cb:55:bd:12:44:54:22:43:71:d3:
dc:48:30:f4:d7:5e:e9:99:08:99:f3:99:8c:ed:f2:
9b:52:5d:87:9f:87:ac:04:9a:3f:70:93:0f:54:e8:
0a:f1:00:d0:3b:f0:17:d3:6d:af:d6:7c:b0:13:0c:
09:56:d9:c4:dc:e5:d1:05:2d:67:fa:84:ae:09:7c:
41:68:c2:ef:fb:31:73:b9:d7:63:d0:f9:25:8c:63:
58:6a:f9:80:39:21:f1:46:06:e3:df:3a:c1:f4:dc:
02:7f:bd:cb:92:13:6e:8b:78:f5:24:55:f5:c5:0b:
c0:d5:40:2c:0a:60:9b:34:f5:9c:a7:f1:27:f2:63:
91:14:35:94:29:c7:4c:25:78:0a:eb:cf:79:8d:2f:
fd:d2:01:64:9b:82:e5:7f:22:ef:f9:cf:7e:cc:6d:
46:1f:cd:e1:7d:15:e9:82:e3:5b:67:a9:32:b5:af:
1b:d3:e2:b1:0a:88:21:b7:d5:28:9f:14:43:ff:a1:
14:19:6b:11:a5:5b:77:14:95:df:77:bc:bf:1c:2b:
48:23:12:f6:28:73:2a:39:4b:19:2c:57:50:d5:f7:
5c:72:c2:a5:c5:a0:46:af:3c:eb:a1:0e:4b:38:d3:
2f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A9:C0:8A:76:44:00:28:2E:A3:4A:02:7F:19:82:52:F8:EC:52:94
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/46nAinZEACguo0oCfxmCUvjsUpQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.68.0/24
Signature Algorithm: sha256WithRSAEncryption
33:45:f0:fc:cb:b7:72:46:aa:3d:f9:4d:19:07:d8:9f:c1:4a:
71:f5:12:72:fe:0c:a8:78:99:c8:05:b6:e4:f8:1a:da:cb:e1:
a2:56:ca:09:28:f3:15:e5:d3:e0:b1:eb:12:90:79:82:c5:1a:
31:66:b1:44:72:3c:8a:28:d7:1a:ba:e2:95:12:c6:64:76:85:
4e:80:9b:47:ea:80:92:18:f1:75:e6:10:e5:10:38:3b:dd:0b:
5b:1a:60:66:84:01:28:96:4f:c4:8a:c4:18:c7:e0:6f:7d:b0:
79:f2:74:4e:d3:17:0e:ea:45:3a:b0:83:2b:e6:3f:6e:87:8a:
77:e3:36:ac:ec:c3:3d:7c:dc:70:71:37:ad:33:db:6a:9b:e4:
ee:d8:2c:cd:2b:ab:a7:8c:57:ce:c6:7d:84:5c:6e:99:52:24:
e2:00:ff:bb:6f:5b:4a:9d:fa:88:65:9d:ff:fa:2a:35:e9:0b:
e9:d0:67:76:51:e0:36:9e:89:fa:b8:23:22:c5:5c:46:f2:8a:
cd:9b:83:f1:ba:a7:2a:cf:32:37:0c:7e:53:de:a7:16:4a:1c:
79:20:03:5d:0e:fa:35:b8:74:a7:6b:d7:f9:fb:32:6c:e7:db:
e8:50:17:d6:d4:12:2b:57:b5:08:d0:0b:0b:3d:c0:25:c8:cf:
d1:12:36:91
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCvQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTAyMDcx
MjU4NTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEUzQTlDMDhBNzY0NDAw
MjgyRUEzNEEwMjdGMTk4MjUyRjhFQzUyOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD+9jG2xLgkkvPMbBPu0e3PAYH1y1W9EkRUIkNx09xIMPTXXumZ
CJnzmYzt8ptSXYefh6wEmj9wkw9U6ArxANA78BfTba/WfLATDAlW2cTc5dEFLWf6
hK4JfEFowu/7MXO512PQ+SWMY1hq+YA5IfFGBuPfOsH03AJ/vcuSE26LePUkVfXF
C8DVQCwKYJs09Zyn8SfyY5EUNZQpx0wleArrz3mNL/3SAWSbguV/Iu/5z37MbUYf
zeF9FemC41tnqTK1rxvT4rEKiCG31SifFEP/oRQZaxGlW3cUld93vL8cK0gjEvYo
cyo5SxksV1DV91xywqXFoEavPOuhDks40y8fAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU46nAinZEACguo0oCfxmCUvjsUpQwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy80Nm5BaW5aRUFDZ3Vv
MG9DZnhtQ1V2anNVcFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQA3xpEMA0GCSqGSIb3DQEBCwUAA4IBAQAzRfD8y7dyRqo9+U0ZB9ifwUpx9RJy
/gyoeJnIBbbk+Bray+GiVsoJKPMV5dPgsesSkHmCxRoxZrFEcjyKKNcauuKVEsZk
doVOgJtH6oCSGPF15hDlEDg73QtbGmBmhAEolk/EisQYx+BvfbB58nRO0xcO6kU6
sIMr5j9uh4p34zas7MM9fNxwcTetM9tqm+Tu2CzNK6unjFfOxn2EXG6ZUiTiAP+7
b1tKnfqIZZ3/+io16Qvp0Gd2UeA2non6uCMixVxG8orNm4PxuqcqzzI3DH5T3qcW
Shx5IANdDvo1uHSna9f5+zJs59voUBfW1BIrV7UI0AsLPcAlyM/REjaR
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org