Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/C-H85fGEtCCgZOI8X893A7E-dhw.roa
File: C-H85fGEtCCgZOI8X893A7E-dhw.roa (raw, json)
Hash identifier: qkgxihtZ71kGGlc4msK4/kBbIDClv+wAXxeWA0xNOak=
Subject key identifier: 0B:E1:FC:E5:F1:84:B4:20:A0:64:E2:3C:5F:CF:77:03:B1:3E:76:1C
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BEC
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/C-H85fGEtCCgZOI8X893A7E-dhw.roa
Signing time: Wed 29 Sep 2021 02:38:51 +0000
ROA not before: Wed 29 Sep 2021 02:38:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18419
IP address blocks: 150.117.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3052 (0xbec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0BE1FCE5F184B420A064E23C5FCF7703B13E761C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fb:d3:f3:7a:f7:b1:d9:66:3c:1e:ec:0a:98:
74:ac:1c:81:ef:15:3b:94:0e:8e:c6:bd:a7:bc:8a:
9a:b6:50:ca:56:72:e5:d7:9e:0c:67:f7:31:8f:b4:
9f:a5:39:eb:06:b0:53:90:27:79:43:21:51:ff:e0:
cc:70:05:f4:52:39:83:16:4c:c5:84:4f:ec:c2:16:
33:bd:d8:c8:a8:3c:22:ae:f1:49:78:ce:ee:c5:45:
90:8e:34:1a:27:6c:39:81:82:ca:ae:d9:9f:ca:5d:
0a:68:f8:1c:ff:d8:33:c3:67:bd:91:7f:10:c6:9f:
53:62:85:58:69:7a:85:16:b3:8d:05:f5:57:75:39:
d4:10:3a:2b:3a:e6:aa:3b:68:bd:6c:16:07:b3:22:
14:8d:ff:fa:22:b2:95:4c:8f:d3:35:4e:7d:25:a2:
45:03:48:f1:3a:25:59:dc:ac:34:67:b5:d4:78:26:
87:2f:b5:39:0c:05:4c:7a:a0:33:5f:ad:48:f5:ac:
2c:4b:9f:86:df:c8:cd:0e:03:e4:76:10:84:46:2e:
41:03:7b:00:2e:81:a9:c7:af:e5:91:ed:82:ef:a3:
f6:b8:50:e3:29:b9:95:00:8c:56:46:2d:f7:89:40:
8b:c0:85:10:94:55:1e:1d:44:e8:f4:6e:f4:f9:1d:
21:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E1:FC:E5:F1:84:B4:20:A0:64:E2:3C:5F:CF:77:03:B1:3E:76:1C
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/C-H85fGEtCCgZOI8X893A7E-dhw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.32.0/20
Signature Algorithm: sha256WithRSAEncryption
35:f8:90:cf:d1:2c:8d:90:3d:67:c3:1f:c1:71:a8:7d:91:da:
1c:e5:3d:df:a9:aa:3d:78:c4:94:3b:a7:f0:ef:66:9d:99:d6:
18:61:7c:4a:bb:f3:eb:e2:ac:87:e1:cc:e9:6d:f5:a0:23:0a:
cf:e7:ef:09:2e:01:ea:4e:8e:55:63:14:d2:a9:de:9e:03:87:
38:ff:7f:2c:97:87:a2:48:52:ee:12:8f:47:6a:4a:79:13:57:
0b:33:69:b0:ad:dc:06:ea:ae:d9:c0:c5:ff:e1:6f:7a:d6:a1:
d0:2d:b2:70:29:20:f4:13:6b:a7:a5:28:aa:27:c6:62:dc:2c:
14:59:0a:f0:91:3a:20:01:36:54:78:1c:cd:ea:df:4c:c3:03:
2d:6f:83:af:c5:27:09:2f:c5:81:94:07:87:b6:a2:e7:be:c6:
98:92:ba:3a:a2:dc:75:f9:5d:af:61:eb:67:99:62:be:b8:32:
d5:51:e6:47:74:57:49:4d:02:0a:8c:c2:af:61:75:e1:9f:b8:
0d:84:60:5f:f4:58:fa:99:5d:90:7c:05:36:cd:d7:ae:1c:88:
76:0f:24:0d:e3:ba:e5:fe:f8:ac:ba:bb:8d:1f:34:43:7a:40:
28:40:26:0e:e8:c9:4f:cd:a4:24:10:c7:d8:5c:30:9b:d3:45:
0d:21:02:0d
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICC+wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTA5Mjkw
MjM4NTFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDBCRTFGQ0U1RjE4NEI0
MjBBMDY0RTIzQzVGQ0Y3NzAzQjEzRTc2MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDx+9Pzevex2WY8HuwKmHSsHIHvFTuUDo7Gvae8ipq2UMpWcuXX
ngxn9zGPtJ+lOesGsFOQJ3lDIVH/4MxwBfRSOYMWTMWET+zCFjO92MioPCKu8Ul4
zu7FRZCONBonbDmBgsqu2Z/KXQpo+Bz/2DPDZ72RfxDGn1NihVhpeoUWs40F9Vd1
OdQQOis65qo7aL1sFgezIhSN//oispVMj9M1Tn0lokUDSPE6JVncrDRntdR4Jocv
tTkMBUx6oDNfrUj1rCxLn4bfyM0OA+R2EIRGLkEDewAuganHr+WR7YLvo/a4UOMp
uZUAjFZGLfeJQIvAhRCUVR4dROj0bvT5HSHVAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUC+H85fGEtCCgZOI8X893A7E+dhwwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9DLUg4NWZHRXRDQ2da
T0k4WDg5M0E3RS1kaHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQElnUgMA0GCSqGSIb3DQEBCwUAA4IBAQA1+JDP0SyNkD1nwx/Bcah9kdoc5T3f
qao9eMSUO6fw72admdYYYXxKu/Pr4qyH4czpbfWgIwrP5+8JLgHqTo5VYxTSqd6e
A4c4/38sl4eiSFLuEo9Hakp5E1cLM2mwrdwG6q7ZwMX/4W961qHQLbJwKSD0E2un
pSiqJ8Zi3CwUWQrwkTogATZUeBzN6t9MwwMtb4OvxScJL8WBlAeHtqLnvsaYkro6
otx1+V2vYetnmWK+uDLVUeZHdFdJTQIKjMKvYXXhn7gNhGBf9Fj6mV2QfAU2zdeu
HIh2DyQN47rl/visuruNHzRDekAoQCYO6MlPzaQkEMfYXDCb00UNIQIN
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:11 2025 by rpki-client