Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/I4pc3Jdw_lV5nmNVyBlWE7h-txI.roa
File: I4pc3Jdw_lV5nmNVyBlWE7h-txI.roa (raw, json)
Hash identifier: xhDE0a6XvMj0hrVtf/o+iExbPZ71vXSOVJgJX775HHc=
Subject key identifier: 23:8A:5C:DC:97:70:FE:55:79:9E:63:55:C8:19:56:13:B8:7E:B7:12
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E7B
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/I4pc3Jdw_lV5nmNVyBlWE7h-txI.roa
Signing time: Wed 19 Apr 2023 10:52:06 +0000
ROA not before: Wed 19 Apr 2023 10:52:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 32787
IP address blocks: 150.116.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3707 (0xe7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Apr 19 10:52:06 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=238A5CDC9770FE55799E6355C8195613B87EB712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8f:9e:8b:25:55:94:81:fe:e6:6e:b7:d5:f8:
05:3c:0f:9e:b9:5f:30:20:99:e3:47:08:bd:1c:07:
87:63:1a:7d:7f:de:07:fa:7d:e2:f3:ae:ab:5a:46:
fe:7c:49:86:6f:4e:e0:69:b9:53:6d:0b:cc:b4:4a:
8b:12:0c:4b:2d:94:d4:af:da:1f:5a:97:7c:7e:90:
dd:9b:9b:e1:d8:6b:e4:f5:af:fe:a1:d6:75:85:b4:
00:7e:14:59:0e:19:a3:26:0f:2f:c5:f3:d2:2c:bc:
8a:e7:f2:5e:11:a0:9b:33:d9:11:72:a6:1b:93:56:
89:6f:af:13:7d:78:66:8f:ee:a7:5c:04:db:fb:b0:
cb:c2:03:c2:2a:60:a1:c2:b2:63:fa:fd:30:37:68:
2e:a6:f5:db:bb:fe:7e:b0:95:f2:51:b5:79:92:21:
ad:9f:8e:81:0c:e4:bf:4a:a0:8f:58:55:69:7a:e8:
53:ae:94:6d:2a:6a:58:97:44:e0:51:4e:3a:2a:dd:
29:de:5e:38:7e:7c:a4:09:2e:70:81:20:7d:f0:fd:
cc:c7:ee:16:a6:f8:a4:f6:bc:02:a0:37:51:24:74:
41:73:c0:3b:3f:c8:40:32:49:33:12:9b:fd:8b:f9:
2f:83:a1:99:05:86:98:15:70:25:22:b0:29:a6:ee:
5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8A:5C:DC:97:70:FE:55:79:9E:63:55:C8:19:56:13:B8:7E:B7:12
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/I4pc3Jdw_lV5nmNVyBlWE7h-txI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:2d:be:a9:cd:f5:33:2d:f3:85:95:8f:59:5a:78:11:f1:94:
94:ee:82:09:8b:55:37:7a:e5:52:00:b7:41:d7:06:94:d4:58:
71:35:54:3c:28:04:e4:2a:41:41:4c:d5:36:e0:1b:c6:72:0d:
6c:8f:ea:a9:2e:e4:65:e3:c6:9f:50:48:4e:76:57:e0:16:23:
83:10:a7:22:97:68:95:f0:c6:f1:ad:2d:97:23:1d:71:f1:69:
63:08:40:1f:ea:be:f2:81:4e:1c:65:26:44:75:0d:5d:6b:5b:
96:9d:d2:d6:91:ce:a9:5c:78:b4:57:b3:b0:01:fe:82:86:17:
24:a8:2f:3f:84:b4:b3:02:1d:30:ac:d4:33:db:2f:bb:9f:cd:
53:2e:2c:eb:46:4d:b4:f5:17:bb:3a:e2:fa:b4:17:45:c0:0c:
b9:61:83:09:b2:15:6e:a9:2f:1b:31:3f:0b:f5:84:5d:e5:b4:
1c:c3:36:dd:be:04:a2:b1:c6:a2:c4:c0:66:b3:1f:83:12:d3:
4a:ae:58:5a:e3:3b:eb:41:73:cc:3d:5d:52:dc:d7:ae:a3:c3:
69:13:5c:4e:d0:c9:d6:54:95:99:6f:e3:e8:41:fe:f8:fc:64:
74:c9:da:1d:19:71:87:55:95:94:dc:0b:92:56:60:12:51:88:
ee:a5:7f:8a
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDnswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA0MTkx
MDUyMDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDIzOEE1Q0RDOTc3MEZF
NTU3OTlFNjM1NUM4MTk1NjEzQjg3RUI3MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcj56LJVWUgf7mbrfV+AU8D565XzAgmeNHCL0cB4djGn1/3gf6
feLzrqtaRv58SYZvTuBpuVNtC8y0SosSDEstlNSv2h9al3x+kN2bm+HYa+T1r/6h
1nWFtAB+FFkOGaMmDy/F89IsvIrn8l4RoJsz2RFyphuTVolvrxN9eGaP7qdcBNv7
sMvCA8IqYKHCsmP6/TA3aC6m9du7/n6wlfJRtXmSIa2fjoEM5L9KoI9YVWl66FOu
lG0qaliXROBRTjoq3SneXjh+fKQJLnCBIH3w/czH7ham+KT2vAKgN1EkdEFzwDs/
yEAySTMSm/2L+S+DoZkFhpgVcCUisCmm7l/VAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUI4pc3Jdw/lV5nmNVyBlWE7h+txIwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9JNHBjM0pkd19sVjVu
bU5WeUJsV0U3aC10eEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnQAMA0GCSqGSIb3DQEBCwUAA4IBAQAdLb6pzfUzLfOFlY9ZWngR8ZSU7oIJ
i1U3euVSALdB1waU1FhxNVQ8KATkKkFBTNU24BvGcg1sj+qpLuRl48afUEhOdlfg
FiODEKcil2iV8MbxrS2XIx1x8WljCEAf6r7ygU4cZSZEdQ1da1uWndLWkc6pXHi0
V7OwAf6ChhckqC8/hLSzAh0wrNQz2y+7n81TLizrRk209Re7OuL6tBdFwAy5YYMJ
shVuqS8bMT8L9YRd5bQcwzbdvgSiscaixMBmsx+DEtNKrlha4zvrQXPMPV1S3Neu
o8NpE1xO0MnWVJWZb+PoQf74/GR0ydodGXGHVZWU3AuSVmASUYjupX+K
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org