Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OdlBaIEi_IkQulWmBr9hzimCTlg.roa
File: OdlBaIEi_IkQulWmBr9hzimCTlg.roa (raw, json)
Hash identifier: 4Q0kR6Kqi7KEAh3DUAJFaqdhoWw2+dQUBc1CRMCO9Bo=
Subject key identifier: 39:D9:41:68:81:22:FC:89:10:BA:55:A6:06:BF:61:CE:29:82:4E:58
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0847
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OdlBaIEi_IkQulWmBr9hzimCTlg.roa
Signing time: Tue 29 Sep 2020 10:02:16 +0000
ROA not before: Tue 29 Sep 2020 10:02:16 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9922
IP address blocks: 118.150.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2119 (0x847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:16 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=39D941688122FC8910BA55A606BF61CE29824E58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:ae:69:a7:f0:54:13:c5:e0:14:8d:2f:ab:
79:1f:3a:5b:39:53:5e:f0:c7:52:5a:7c:7a:3e:f0:
53:3e:be:66:a9:b7:6d:6e:70:6c:17:e1:3a:84:2d:
8f:67:ec:5e:48:bb:b7:b5:14:30:8a:ae:4b:fb:34:
d4:a2:4d:45:38:fd:a6:d5:b3:e3:90:35:41:af:a4:
29:47:70:2b:4a:a2:40:80:66:4f:9d:92:08:c3:66:
3a:be:3b:81:ed:ee:d2:9f:9c:4f:87:2b:c7:db:5c:
8c:12:bb:d7:dd:aa:95:78:d3:4a:0b:d0:31:f2:69:
d3:29:1b:4f:7f:99:8a:3d:5c:80:dd:e9:3a:f2:24:
32:c6:cd:57:43:46:e1:79:48:eb:f3:e1:b5:c1:f5:
4e:6e:87:3c:10:8a:f1:16:70:96:3a:9e:3b:08:5a:
c6:22:ed:88:f4:75:bf:1e:bb:f2:64:a9:93:1f:25:
3d:52:03:c3:58:7e:46:da:64:7f:d9:76:fe:82:75:
b0:f5:54:3b:41:31:59:3f:8f:33:3b:8a:c4:fe:62:
e0:14:0a:fa:28:6b:0b:45:11:9b:93:48:0c:e0:2e:
48:08:65:f7:66:37:ad:1c:b8:5d:af:ee:d6:67:01:
3d:97:af:8d:08:65:25:73:f8:9f:4e:fd:60:60:c7:
78:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D9:41:68:81:22:FC:89:10:BA:55:A6:06:BF:61:CE:29:82:4E:58
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OdlBaIEi_IkQulWmBr9hzimCTlg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.224.0/21
Signature Algorithm: sha256WithRSAEncryption
44:23:e5:24:c0:47:c1:81:fb:39:49:8b:13:54:6d:02:fd:2e:
78:6e:ab:d5:bc:54:fe:18:e0:71:c2:c3:2b:2f:4a:43:c9:78:
f0:22:06:98:c0:24:f9:bf:ba:a4:2f:e9:a8:5d:47:8a:6d:03:
da:91:4a:1f:ac:97:2f:fa:1a:b4:c3:83:d0:d2:58:90:b1:7d:
8b:c4:3d:0a:ee:d3:ca:12:24:34:77:2a:08:13:6e:a0:39:e5:
8a:78:52:62:a5:d0:d6:a3:ee:ee:8a:97:d8:79:8e:40:a9:71:
fb:e7:07:7a:ac:52:27:19:33:57:b4:3d:97:81:e2:09:f6:f6:
4e:8d:99:44:71:17:9d:de:00:94:fa:eb:f7:0c:d5:16:83:0a:
42:10:77:4e:b6:1b:95:01:fe:86:36:9d:55:77:50:bb:0b:9f:
15:70:5e:ba:c2:c3:a2:50:b3:65:bf:77:09:62:45:4d:71:83:
79:3e:24:89:28:31:ee:78:26:b3:d6:27:2c:3e:00:33:5c:b5:
fe:87:66:ef:6f:e9:bd:0f:28:95:2d:99:01:6f:dd:e3:f0:b4:
a8:63:17:85:43:48:20:51:0c:2d:3a:4b:c3:c4:46:3d:50:c3:
60:4a:98:ec:30:42:85:07:2d:f7:5c:6f:f6:ca:76:ed:2e:ff:
f7:81:3e:83
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCEcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMDA5Mjkx
MDAyMTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM5RDk0MTY4ODEyMkZD
ODkxMEJBNTVBNjA2QkY2MUNFMjk4MjRFNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRkK5pp/BUE8XgFI0vq3kfOls5U17wx1JafHo+8FM+vmapt21u
cGwX4TqELY9n7F5Iu7e1FDCKrkv7NNSiTUU4/abVs+OQNUGvpClHcCtKokCAZk+d
kgjDZjq+O4Ht7tKfnE+HK8fbXIwSu9fdqpV400oL0DHyadMpG09/mYo9XIDd6Try
JDLGzVdDRuF5SOvz4bXB9U5uhzwQivEWcJY6njsIWsYi7Yj0db8eu/JkqZMfJT1S
A8NYfkbaZH/Zdv6CdbD1VDtBMVk/jzM7isT+YuAUCvooawtFEZuTSAzgLkgIZfdm
N60cuF2v7tZnAT2Xr40IZSVz+J9O/WBgx3jFAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUOdlBaIEi/IkQulWmBr9hzimCTlgwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9PZGxCYUlFaV9Ja1F1
bFdtQnI5aHppbUNUbGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQDdpbgMA0GCSqGSIb3DQEBCwUAA4IBAQBEI+UkwEfBgfs5SYsTVG0C/S54bqvV
vFT+GOBxwsMrL0pDyXjwIgaYwCT5v7qkL+moXUeKbQPakUofrJcv+hq0w4PQ0liQ
sX2LxD0K7tPKEiQ0dyoIE26gOeWKeFJipdDWo+7uipfYeY5AqXH75wd6rFInGTNX
tD2XgeIJ9vZOjZlEcRed3gCU+uv3DNUWgwpCEHdOthuVAf6GNp1Vd1C7C58VcF66
wsOiULNlv3cJYkVNcYN5PiSJKDHueCaz1icsPgAzXLX+h2bvb+m9DyiVLZkBb93j
8LSoYxeFQ0ggUQwtOkvDxEY9UMNgSpjsMEKFBy33XG/2ynbtLv/3gT6D
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:44 2025 by rpki-client