Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5DnB9tCMwdkBne-AJsGRj2GHILI.roa
File: 5DnB9tCMwdkBne-AJsGRj2GHILI.roa (raw, json)
Hash identifier: /LIststJQHlmk4vS/8Vw3h2J8ZmWCQ5CxCmiTCbtrl8=
Subject key identifier: E4:39:C1:F6:D0:8C:C1:D9:01:9D:EF:80:26:C1:91:8F:61:87:20:B2
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0B24
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5DnB9tCMwdkBne-AJsGRj2GHILI.roa
Signing time: Sun 07 Feb 2021 13:08:24 +0000
ROA not before: Sun 07 Feb 2021 13:08:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131273
IP address blocks: 150.116.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2852 (0xb24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 13:08:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E439C1F6D08CC1D9019DEF8026C1918F618720B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3b:69:44:a7:e0:3c:5b:6f:c0:46:b8:fe:2a:
6b:f8:56:07:19:93:7c:97:86:11:e0:7b:92:10:e8:
94:c7:87:4f:31:49:a9:19:64:b0:9b:67:e6:75:74:
bc:11:58:4a:e9:bf:71:c0:0a:fa:56:12:b9:cb:ae:
6f:40:33:32:91:b7:32:c1:0c:8b:80:a5:fd:eb:2d:
7d:46:1c:03:bd:fe:56:cc:70:4c:a0:61:91:78:ad:
28:77:1f:2b:86:ef:c2:5b:ad:9a:3c:e3:45:93:ca:
7b:31:ca:4a:2c:96:e2:be:62:4f:7f:f8:29:99:ff:
cb:02:15:c1:d5:fd:ae:99:5e:af:22:4f:81:5e:36:
bc:03:bd:06:d2:66:20:b8:e4:ab:0d:e5:24:87:f8:
37:39:6f:24:35:45:2d:b1:9d:4f:da:31:a6:5e:f3:
18:2c:90:e3:6a:95:6c:a3:8b:b9:bf:c2:79:ac:61:
cd:eb:f2:12:36:58:2d:ef:6d:ab:2b:35:66:9e:9f:
aa:86:8d:3c:1c:61:2a:1b:3f:6b:0d:7d:3f:c7:a9:
fa:8e:e7:6c:e6:fe:d6:63:96:c3:ca:00:84:f0:b4:
c9:a2:02:8f:d8:39:75:56:fb:d1:1a:2b:fb:11:86:
f5:c9:7a:2e:e2:a3:c7:12:6c:a1:6d:f4:5d:0b:58:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:39:C1:F6:D0:8C:C1:D9:01:9D:EF:80:26:C1:91:8F:61:87:20:B2
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5DnB9tCMwdkBne-AJsGRj2GHILI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:9d:19:00:58:ce:ab:0b:19:b2:0c:3e:d3:ab:05:90:cf:ab:
1a:19:c3:92:6b:99:57:a9:a9:45:00:6f:3a:f2:16:18:65:7d:
aa:36:63:20:7e:c6:11:69:34:3c:1b:07:c1:21:d7:54:bc:62:
d1:67:fc:84:d0:dd:51:89:32:99:ca:65:36:f7:ba:94:96:0e:
c5:4d:ba:8b:8d:56:16:2e:68:5c:fd:6a:5f:40:06:5b:5a:7e:
48:5c:4a:18:93:ea:3a:21:e3:be:c6:3a:97:6e:a2:4b:a6:fb:
83:ac:73:76:17:93:66:e9:f8:fb:b9:10:45:65:15:3b:74:7d:
06:3e:0b:74:93:50:5b:45:3b:d3:8f:56:98:fe:a2:d2:b0:42:
9b:29:29:6f:20:96:c3:f5:90:7e:b3:21:ea:74:b8:79:a7:c7:
45:49:e9:97:61:ce:74:97:97:cf:4b:25:0c:dd:f0:01:51:ed:
ab:7a:29:f0:16:7f:ae:fb:51:a8:58:d0:8a:74:ff:eb:a1:41:
31:00:bd:c0:c9:57:df:03:39:87:51:aa:b3:c2:23:39:d7:75:
6d:b6:4e:e0:db:72:7f:12:c5:a3:48:58:58:b3:f8:b4:05:f3:
55:d5:36:55:aa:5d:60:70:6a:df:3f:0d:1b:c9:88:81:9b:08:
59:e1:2c:a1
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCyQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTAyMDcx
MzA4MjRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEU0MzlDMUY2RDA4Q0Mx
RDkwMTlERUY4MDI2QzE5MThGNjE4NzIwQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4O2lEp+A8W2/ARrj+Kmv4VgcZk3yXhhHge5IQ6JTHh08xSakZ
ZLCbZ+Z1dLwRWErpv3HACvpWErnLrm9AMzKRtzLBDIuApf3rLX1GHAO9/lbMcEyg
YZF4rSh3HyuG78JbrZo840WTynsxykosluK+Yk9/+CmZ/8sCFcHV/a6ZXq8iT4Fe
NrwDvQbSZiC45KsN5SSH+Dc5byQ1RS2xnU/aMaZe8xgskONqlWyji7m/wnmsYc3r
8hI2WC3vbasrNWaen6qGjTwcYSobP2sNfT/HqfqO52zm/tZjlsPKAITwtMmiAo/Y
OXVW+9EaK/sRhvXJei7io8cSbKFt9F0LWILjAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU5DnB9tCMwdkBne+AJsGRj2GHILIwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy81RG5COXRDTXdka0Ju
ZS1BSnNHUmoyR0hJTEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnRQMA0GCSqGSIb3DQEBCwUAA4IBAQCjnRkAWM6rCxmyDD7TqwWQz6saGcOS
a5lXqalFAG868hYYZX2qNmMgfsYRaTQ8GwfBIddUvGLRZ/yE0N1RiTKZymU297qU
lg7FTbqLjVYWLmhc/WpfQAZbWn5IXEoYk+o6IeO+xjqXbqJLpvuDrHN2F5Nm6fj7
uRBFZRU7dH0GPgt0k1BbRTvTj1aY/qLSsEKbKSlvIJbD9ZB+syHqdLh5p8dFSemX
Yc50l5fPSyUM3fABUe2reinwFn+u+1GoWNCKdP/roUExAL3AyVffAzmHUaqzwiM5
13Vttk7g23J/EsWjSFhYs/i0BfNV1TZVql1gcGrfPw0byYiBmwhZ4Syh
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org