Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DP5P4I9G0Ct8C69XYyuN0r6TfFQ.roa
File: DP5P4I9G0Ct8C69XYyuN0r6TfFQ.roa (raw, json)
Hash identifier: DzSU3KXxgjCVXLtwpmTYh/HnuXzY0BcvzNpGKjIFKqU=
Subject key identifier: 0C:FE:4F:E0:8F:46:D0:2B:7C:0B:AF:57:63:2B:8D:D2:BE:93:7C:54
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BF2
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DP5P4I9G0Ct8C69XYyuN0r6TfFQ.roa
Signing time: Wed 29 Sep 2021 02:38:52 +0000
ROA not before: Wed 29 Sep 2021 02:38:52 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 10085
IP address blocks: 150.117.104.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3058 (0xbf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:52 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0CFE4FE08F46D02B7C0BAF57632B8DD2BE937C54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:bb:ca:df:1d:d2:bf:76:d3:c3:18:45:82:
15:f2:40:8e:23:94:48:cc:91:01:81:16:bf:94:6a:
41:cd:7b:1c:f2:9f:ce:3c:78:bf:fc:75:f6:2d:bc:
2b:d1:1a:b2:e3:3b:b5:73:4d:9a:b9:1c:7e:a4:b7:
5a:ed:94:82:9d:e6:6c:8d:a6:b3:d9:35:69:11:5e:
cf:20:25:bb:38:88:5d:c5:fb:76:0e:60:f2:37:a6:
94:3d:78:83:8c:af:9e:fd:2e:66:d4:5d:ef:2b:75:
08:75:34:ed:37:b3:b8:9c:91:b7:7a:d2:da:e2:fe:
a0:22:43:6e:67:31:a0:58:c5:a1:16:b0:eb:a4:5e:
85:e0:fb:45:1d:46:7a:00:57:40:e1:05:f1:46:61:
2b:dd:16:b7:07:9c:44:5c:6a:3a:73:c3:38:e2:1e:
27:df:eb:89:4b:2d:0f:ae:a1:53:bf:90:6c:c1:de:
52:9b:e3:ad:7d:00:e6:38:c3:08:61:77:56:3b:57:
b8:2a:d8:75:b3:26:0c:42:ac:cd:73:a4:cd:f6:47:
74:9e:3c:3f:f5:8e:dc:6c:2c:20:d3:b3:17:a0:92:
ab:b2:fb:c5:e1:0a:7e:58:bd:e9:97:4c:c7:49:2f:
b2:bc:05:7e:23:ba:eb:c1:b5:e5:47:7d:70:3e:45:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FE:4F:E0:8F:46:D0:2B:7C:0B:AF:57:63:2B:8D:D2:BE:93:7C:54
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DP5P4I9G0Ct8C69XYyuN0r6TfFQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.104.0/21
Signature Algorithm: sha256WithRSAEncryption
07:e0:e1:df:c8:5c:ed:e3:33:15:6a:cd:e2:aa:41:ca:d7:12:
71:b3:0a:6d:08:a4:5d:09:33:c7:50:62:d9:f7:76:de:66:ac:
e1:c8:d8:9f:69:b1:95:28:25:5f:eb:5c:b1:5d:a7:22:82:6d:
5a:0d:cc:3d:ae:fd:7d:5c:3f:3a:fe:cc:f5:b0:a8:4d:4c:9e:
d0:b2:5e:68:35:a0:fb:cf:fd:0a:48:ed:d8:69:ae:bd:2e:e7:
e2:e3:b2:74:18:9e:90:60:2d:6d:19:27:c1:53:62:88:64:33:
ec:29:b7:01:7e:6a:db:f1:41:55:8d:c1:11:e2:d8:74:42:fe:
e7:15:85:42:ea:8b:54:d4:ea:d0:77:28:ef:be:77:01:f2:c7:
ac:21:82:80:07:4f:34:03:16:ab:20:a8:2b:d3:92:10:e7:8d:
2f:27:52:3d:ca:f9:7d:a7:ad:a9:e3:6a:05:cc:8f:69:9f:72:
39:e7:0d:71:72:4f:b1:8a:fd:51:03:d4:6d:a2:85:9d:da:4d:
32:7c:dc:88:ce:05:ca:65:c2:fb:7e:d3:75:c2:41:b7:c4:7f:
d8:d5:d3:e2:15:2b:4f:b9:2a:2a:06:30:59:68:93:29:dd:c2:
22:fe:ed:1d:56:0c:57:61:de:1a:5e:b5:9c:67:b2:c3:df:c6:
a9:ef:f8:aa
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTA5Mjkw
MjM4NTJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDBDRkU0RkUwOEY0NkQw
MkI3QzBCQUY1NzYzMkI4REQyQkU5MzdDNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDANbvK3x3Sv3bTwxhFghXyQI4jlEjMkQGBFr+UakHNexzyn848
eL/8dfYtvCvRGrLjO7VzTZq5HH6kt1rtlIKd5myNprPZNWkRXs8gJbs4iF3F+3YO
YPI3ppQ9eIOMr579LmbUXe8rdQh1NO03s7ickbd60tri/qAiQ25nMaBYxaEWsOuk
XoXg+0UdRnoAV0DhBfFGYSvdFrcHnERcajpzwzjiHiff64lLLQ+uoVO/kGzB3lKb
4619AOY4wwhhd1Y7V7gq2HWzJgxCrM1zpM32R3SePD/1jtxsLCDTsxegkquy+8Xh
Cn5YvemXTMdJL7K8BX4juuvBteVHfXA+RdfZAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUDP5P4I9G0Ct8C69XYyuN0r6TfFQwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9EUDVQNEk5RzBDdDhD
NjlYWXl1TjByNlRmRlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQDlnVoMA0GCSqGSIb3DQEBCwUAA4IBAQAH4OHfyFzt4zMVas3iqkHK1xJxswpt
CKRdCTPHUGLZ93beZqzhyNifabGVKCVf61yxXacigm1aDcw9rv19XD86/sz1sKhN
TJ7Qsl5oNaD7z/0KSO3Yaa69Lufi47J0GJ6QYC1tGSfBU2KIZDPsKbcBfmrb8UFV
jcER4th0Qv7nFYVC6otU1OrQdyjvvncB8sesIYKAB080AxarIKgr05IQ540vJ1I9
yvl9p62p42oFzI9pn3I55w1xck+xiv1RA9RtooWd2k0yfNyIzgXKZcL7ftN1wkG3
xH/Y1dPiFStPuSoqBjBZaJMp3cIi/u0dVgxXYd4aXrWcZ7LD38ap7/iq
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org