Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/AX3ajOdZ1Wk5rebDVEFBRl7TU7E.roa
File: AX3ajOdZ1Wk5rebDVEFBRl7TU7E.roa (raw, json)
Hash identifier: zPYtiAhFWh47eJpEoQhcT1m11Nyu1HMp0wgfkoZxz+c=
Subject key identifier: 01:7D:DA:8C:E7:59:D5:69:39:AD:E6:C3:54:41:41:46:5E:D3:53:B1
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/AX3ajOdZ1Wk5rebDVEFBRl7TU7E.roa
Signing time: Thu 15 Sep 2022 02:39:18 +0000
ROA not before: Thu 15 Sep 2022 02:39:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10085
IP address blocks: 150.117.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=017DDA8CE759D56939ADE6C3544141465ED353B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:73:f0:b2:86:43:3f:b9:29:49:99:a3:15:1c:
fa:e5:bc:29:8e:ff:2d:10:ab:ce:0f:f9:53:50:c1:
cf:ae:ce:9c:e8:66:4a:ce:d3:a2:07:59:14:ca:eb:
50:b8:5f:d9:7c:16:96:78:47:7a:93:ee:27:73:12:
b3:41:86:f3:db:c8:6d:d9:a2:1a:78:25:2d:e7:98:
c9:2b:e4:f1:da:8f:2d:6c:a8:15:1f:a1:e4:73:bf:
59:6d:61:88:88:d6:21:78:59:53:cf:58:de:4f:4c:
95:bc:7c:e6:d3:d9:f6:53:bf:8a:23:79:a3:67:83:
4c:f1:de:a3:3f:0c:b4:b8:5d:75:77:49:8a:dc:1e:
a8:6e:36:12:90:0b:89:9d:91:fb:45:08:07:51:55:
7c:31:50:37:6d:24:1b:e8:c9:ed:a1:36:da:77:63:
79:97:d0:97:98:01:cb:ce:a6:29:e8:6c:0b:2f:78:
60:72:83:ea:4d:3f:9e:70:3f:21:53:15:9d:be:c7:
e9:86:de:26:8f:2a:61:ab:0c:4e:cc:42:20:86:da:
bb:de:99:45:5e:e4:27:b1:71:22:16:cb:30:53:aa:
b9:c8:bf:09:07:d1:2a:6b:c3:64:41:5f:8b:74:0a:
6b:4d:b3:f2:c7:c3:65:0d:2a:51:bf:72:aa:08:fd:
77:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7D:DA:8C:E7:59:D5:69:39:AD:E6:C3:54:41:41:46:5E:D3:53:B1
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/AX3ajOdZ1Wk5rebDVEFBRl7TU7E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.96.0/21
Signature Algorithm: sha256WithRSAEncryption
16:13:c6:c4:b5:1d:42:f5:a0:fd:b1:e8:d6:d3:97:f5:7c:1c:
c6:44:a7:9b:23:30:5b:19:ef:70:e8:9f:dd:3c:0f:16:9d:e5:
7d:6a:cd:ad:2e:57:18:18:2e:42:fb:a4:90:7f:ee:ae:de:b4:
1f:1d:8b:90:bb:7d:59:89:de:49:85:02:2d:60:57:b3:1b:89:
28:f0:07:40:ac:cb:87:e5:d9:3e:2e:ea:65:8b:12:e5:22:15:
59:8c:c4:48:fc:17:8e:fc:b1:44:53:8b:cd:31:02:9d:9f:e5:
9c:e6:61:75:94:42:66:9c:62:45:17:8f:2d:eb:0f:73:86:e5:
de:67:6c:75:72:1b:b3:1a:0d:9a:3b:22:8c:f9:31:fb:55:44:
0e:9c:5b:64:d3:65:4c:17:c9:07:d9:4d:72:9e:d6:d6:20:e4:
e9:11:84:2b:9f:08:5f:fd:b7:bf:15:fa:f4:55:12:4d:88:76:
81:3b:f4:a5:d9:e1:9c:fa:60:97:6e:cc:a1:c5:04:92:c2:b0:
16:2a:5d:0c:cd:2d:af:ce:35:2e:ac:a4:e0:65:66:0d:bf:cf:
61:75:31:ad:af:d6:ba:4e:c8:8b:ea:f3:8b:cc:91:32:ee:11:
25:18:27:fc:3e:5b:6d:12:21:08:13:66:94:b5:37:58:ac:f4:
72:71:0c:89
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMjA5MTUw
MjM5MThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDAxN0REQThDRTc1OUQ1
NjkzOUFERTZDMzU0NDE0MTQ2NUVEMzUzQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhc/CyhkM/uSlJmaMVHPrlvCmO/y0Qq84P+VNQwc+uzpzoZkrO
06IHWRTK61C4X9l8FpZ4R3qT7idzErNBhvPbyG3Zohp4JS3nmMkr5PHajy1sqBUf
oeRzv1ltYYiI1iF4WVPPWN5PTJW8fObT2fZTv4ojeaNng0zx3qM/DLS4XXV3SYrc
HqhuNhKQC4mdkftFCAdRVXwxUDdtJBvoye2hNtp3Y3mX0JeYAcvOpinobAsveGBy
g+pNP55wPyFTFZ2+x+mG3iaPKmGrDE7MQiCG2rvemUVe5CexcSIWyzBTqrnIvwkH
0Sprw2RBX4t0CmtNs/LHw2UNKlG/cqoI/Xf1AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUAX3ajOdZ1Wk5rebDVEFBRl7TU7EwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9BWDNhak9kWjFXazVy
ZWJEVkVGQlJsN1RVN0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQDlnVgMA0GCSqGSIb3DQEBCwUAA4IBAQAWE8bEtR1C9aD9sejW05f1fBzGRKeb
IzBbGe9w6J/dPA8WneV9as2tLlcYGC5C+6SQf+6u3rQfHYuQu31Zid5JhQItYFez
G4ko8AdArMuH5dk+LuplixLlIhVZjMRI/BeO/LFEU4vNMQKdn+Wc5mF1lEJmnGJF
F48t6w9zhuXeZ2x1chuzGg2aOyKM+TH7VUQOnFtk02VMF8kH2U1yntbWIOTpEYQr
nwhf/be/Ffr0VRJNiHaBO/Sl2eGc+mCXbsyhxQSSwrAWKl0MzS2vzjUurKTgZWYN
v89hdTGtr9a6TsiL6vOLzJEy7hElGCf8PlttEiEIE2aUtTdYrPRycQyJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org