Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/BqCS5ZCYQ1Rt9UAB__iJc5vM72A.roa
File: BqCS5ZCYQ1Rt9UAB__iJc5vM72A.roa (raw, json)
Hash identifier: 5s3Oc4F3z0QGHqBJcw1Mi07qAF1A5JrO+ayTuFSnFFM=
Subject key identifier: 06:A0:92:E5:90:98:43:54:6D:F5:40:01:FF:F8:89:73:9B:CC:EF:60
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E02
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/BqCS5ZCYQ1Rt9UAB__iJc5vM72A.roa
Signing time: Thu 29 Dec 2022 09:32:07 +0000
ROA not before: Thu 29 Dec 2022 09:32:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 21859
IP address blocks: 223.26.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3586 (0xe02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=06A092E5909843546DF54001FFF889739BCCEF60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:37:3b:1a:20:26:25:33:b8:9e:f5:1f:79:
11:3c:80:dd:5f:2d:23:85:5c:34:43:5b:c2:a5:f4:
d5:5f:2f:b2:7c:99:8c:b8:5d:d1:64:da:65:e2:8d:
24:10:cf:e5:f6:09:a8:68:d1:5e:0a:b3:d7:50:ec:
6a:3e:2e:7f:2b:ef:a7:16:1f:66:cf:6c:92:a1:a4:
cf:54:09:db:8d:33:71:72:16:b4:40:f0:c1:ca:99:
47:b8:b3:0d:75:a1:ab:16:30:64:23:0a:31:be:41:
97:77:f0:4c:a2:1a:b5:fb:ae:62:e9:a4:77:d7:27:
6c:c7:f5:81:7d:71:b3:ad:f0:cb:49:44:9a:b2:f8:
90:27:9c:4d:68:df:06:19:84:fb:d4:61:31:50:bb:
6d:8c:99:08:ad:2d:04:6a:c9:ed:b1:28:0b:36:61:
2e:bb:f3:16:0b:13:e6:40:d5:8d:b4:49:12:80:3e:
88:ed:69:e7:72:5a:cc:46:c1:3f:c1:03:e3:40:fd:
bf:34:54:c4:8d:46:62:ee:e6:cd:f8:11:81:ba:50:
f1:b8:2f:0d:7e:3e:d8:e6:52:20:00:0c:9d:46:6e:
a6:03:44:8b:2c:5b:d8:d8:c4:55:eb:3c:c4:9b:bf:
67:55:74:43:1e:37:74:ba:08:1e:75:a8:90:47:20:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A0:92:E5:90:98:43:54:6D:F5:40:01:FF:F8:89:73:9B:CC:EF:60
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/BqCS5ZCYQ1Rt9UAB__iJc5vM72A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.72.0/22
Signature Algorithm: sha256WithRSAEncryption
af:b0:2a:05:e3:e6:21:9e:9c:43:05:b8:f2:07:81:9b:12:4e:
45:85:ea:40:0d:6a:48:9f:27:75:c1:7d:f5:2e:bd:31:12:53:
74:8b:ba:61:50:eb:62:03:2a:56:da:4f:58:ee:2d:59:fb:7f:
7b:a7:6c:5d:31:d0:49:35:56:03:f3:39:af:b4:e6:4d:b6:25:
f6:48:63:48:f6:d8:32:c6:a3:44:c9:13:f2:2c:0f:7c:1d:43:
60:cf:1c:1c:b3:c3:14:0f:b9:35:5f:01:6f:4e:0b:6d:e0:d3:
43:83:ec:23:d3:11:50:d9:50:4a:d6:42:7a:de:3c:3e:c3:2f:
a2:c6:0f:ce:48:7b:e9:8d:a0:26:30:a4:87:c6:e8:b7:6c:e5:
0b:a7:0b:da:c2:bd:fc:0d:f0:75:3c:47:e5:1f:fc:ee:d7:a2:
d9:12:0e:b0:93:a8:59:b9:65:29:88:bd:52:6a:24:b6:ba:00:
00:09:4c:dd:ac:6d:87:05:97:0e:25:5c:6e:d7:7f:69:2c:51:
27:c8:c2:04:10:53:e1:df:08:e8:74:be:44:f9:19:86:9d:2b:
f6:4f:4b:11:93:7a:80:0a:a6:9c:a9:09:28:45:24:fc:2c:93:
e4:a8:1c:a0:4e:84:59:5e:34:29:dc:e4:b8:ac:7e:54:25:ea:
81:fe:4a:35
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDgIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMjEyMjkw
OTMyMDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDA2QTA5MkU1OTA5ODQz
NTQ2REY1NDAwMUZGRjg4OTczOUJDQ0VGNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1ZTc7GiAmJTO4nvUfeRE8gN1fLSOFXDRDW8Kl9NVfL7J8mYy4
XdFk2mXijSQQz+X2Caho0V4Ks9dQ7Go+Ln8r76cWH2bPbJKhpM9UCduNM3FyFrRA
8MHKmUe4sw11oasWMGQjCjG+QZd38EyiGrX7rmLppHfXJ2zH9YF9cbOt8MtJRJqy
+JAnnE1o3wYZhPvUYTFQu22MmQitLQRqye2xKAs2YS678xYLE+ZA1Y20SRKAPojt
aedyWsxGwT/BA+NA/b80VMSNRmLu5s34EYG6UPG4Lw1+PtjmUiAADJ1GbqYDRIss
W9jYxFXrPMSbv2dVdEMeN3S6CB51qJBHIGCjAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUBqCS5ZCYQ1Rt9UAB//iJc5vM72AwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9CcUNTNVpDWVExUnQ5
VUFCX19pSmM1dk03MkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQC3xpIMA0GCSqGSIb3DQEBCwUAA4IBAQCvsCoF4+YhnpxDBbjyB4GbEk5FhepA
DWpInyd1wX31Lr0xElN0i7phUOtiAypW2k9Y7i1Z+397p2xdMdBJNVYD8zmvtOZN
tiX2SGNI9tgyxqNEyRPyLA98HUNgzxwcs8MUD7k1XwFvTgtt4NNDg+wj0xFQ2VBK
1kJ63jw+wy+ixg/OSHvpjaAmMKSHxui3bOULpwvawr38DfB1PEflH/zu16LZEg6w
k6hZuWUpiL1SaiS2ugAACUzdrG2HBZcOJVxu139pLFEnyMIEEFPh3wjodL5E+RmG
nSv2T0sRk3qACqacqQkoRST8LJPkqBygToRZXjQp3OS4rH5UJeqB/ko1
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org