Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PSXrpWdgX4TPxP-BsYo2huzGyH8.roa
File: PSXrpWdgX4TPxP-BsYo2huzGyH8.roa (raw, json)
Hash identifier: fPeSdok8t7rPwLwv9J1WuBbumGK+oUPh21QzqfQvNbA=
Subject key identifier: 3D:25:EB:A5:67:60:5F:84:CF:C4:FF:81:B1:8A:36:86:EC:C6:C8:7F
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PSXrpWdgX4TPxP-BsYo2huzGyH8.roa
Signing time: Thu 15 Sep 2022 02:39:18 +0000
ROA not before: Thu 15 Sep 2022 02:39:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 150.116.168.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3D25EBA567605F84CFC4FF81B18A3686ECC6C87F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:d6:8b:d9:da:4f:50:fc:15:14:37:8e:c7:
eb:be:ab:69:df:33:96:8e:75:04:31:dd:2e:30:96:
9c:a6:14:b6:5b:e4:7f:e7:4d:94:48:30:e0:6b:8e:
97:32:3e:fb:e9:a5:96:d5:a4:89:28:d6:1e:2e:f3:
4d:53:8b:28:bf:c1:bb:58:7e:3d:81:2f:46:ad:f3:
3d:67:29:b0:d5:df:f2:c4:f2:0d:f7:02:02:9f:ec:
e1:3f:4a:f4:d1:1b:1f:53:03:30:0c:87:19:0f:dd:
e4:24:10:bf:3d:14:04:4d:bf:d3:84:c3:d6:29:ae:
ff:47:c2:07:12:c0:25:08:c3:5c:f4:6c:58:b4:2c:
31:bb:5b:0d:77:79:9c:e8:79:27:b3:6e:86:59:8a:
c2:f2:87:c2:e0:b3:a0:87:36:81:27:be:d6:a4:8f:
f5:1f:06:ee:2a:57:eb:5b:d6:7f:fa:14:6e:50:f9:
2e:6c:5c:8e:9d:e3:ee:44:1d:72:6f:2a:71:ec:9c:
cb:54:b3:f6:ca:df:ca:99:53:a1:99:d3:1b:af:12:
36:fc:10:03:ad:d3:e3:02:b8:96:c3:02:95:04:9a:
3d:f4:3f:4b:ec:36:ab:40:91:5c:29:2c:05:49:18:
6a:12:f8:c9:e9:21:2d:9a:cc:8d:98:f2:82:8c:64:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:25:EB:A5:67:60:5F:84:CF:C4:FF:81:B1:8A:36:86:EC:C6:C8:7F
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PSXrpWdgX4TPxP-BsYo2huzGyH8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.168.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:86:c0:8a:2d:dc:f5:62:95:83:46:66:50:6b:c7:f9:c1:70:
49:09:ae:bd:8d:6d:90:85:4d:9d:8c:1d:d4:8a:6b:e7:06:a8:
a6:22:22:6e:ff:48:bf:71:b9:c0:c9:9f:ae:b1:45:87:b4:9d:
4b:46:42:99:ce:03:2c:3e:70:91:a7:05:9a:f9:98:45:d1:5c:
10:93:47:24:cd:4b:f0:d1:ed:a1:75:e5:53:f0:9f:54:bb:95:
d8:0b:6a:3d:32:97:a4:78:4e:84:12:f1:83:0e:ee:fb:78:32:
46:1d:62:e4:76:28:f8:66:6a:37:bb:e9:f3:49:54:0f:f2:ef:
01:2f:9d:ff:59:87:25:12:e0:4a:10:10:d5:98:3c:7b:d2:2a:
c4:b0:c2:4e:9e:19:24:13:d7:6c:7f:eb:50:a3:30:d1:c2:4c:
44:c5:4e:5d:d5:75:0a:b8:1c:97:c6:99:64:78:ee:18:f5:f9:
91:64:66:76:fc:a7:9c:55:75:e0:c0:d4:7f:81:20:b7:59:d5:
16:b5:9c:56:99:eb:7a:9b:4a:ad:6e:24:5b:c9:10:3f:1a:94:
01:82:12:66:8f:41:2d:a9:5e:d4:ad:f1:24:21:71:e1:89:af:
1b:95:0e:cc:93:52:14:d7:31:8d:ce:46:e3:87:8f:c2:b4:bb:
b5:4a:72:04
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMjA5MTUw
MjM5MThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDNEMjVFQkE1Njc2MDVG
ODRDRkM0RkY4MUIxOEEzNjg2RUNDNkM4N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO2daL2dpPUPwVFDeOx+u+q2nfM5aOdQQx3S4wlpymFLZb5H/n
TZRIMOBrjpcyPvvppZbVpIko1h4u801Tiyi/wbtYfj2BL0at8z1nKbDV3/LE8g33
AgKf7OE/SvTRGx9TAzAMhxkP3eQkEL89FARNv9OEw9Yprv9HwgcSwCUIw1z0bFi0
LDG7Ww13eZzoeSezboZZisLyh8Lgs6CHNoEnvtakj/UfBu4qV+tb1n/6FG5Q+S5s
XI6d4+5EHXJvKnHsnMtUs/bK38qZU6GZ0xuvEjb8EAOt0+MCuJbDApUEmj30P0vs
NqtAkVwpLAVJGGoS+MnpIS2azI2Y8oKMZDJNAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUPSXrpWdgX4TPxP+BsYo2huzGyH8wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9QU1hycFdkZ1g0VFB4
UC1Cc1lvMmh1ekd5SDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBlnSoMA0GCSqGSIb3DQEBCwUAA4IBAQBbhsCKLdz1YpWDRmZQa8f5wXBJCa69
jW2QhU2djB3UimvnBqimIiJu/0i/cbnAyZ+usUWHtJ1LRkKZzgMsPnCRpwWa+ZhF
0VwQk0ckzUvw0e2hdeVT8J9Uu5XYC2o9MpekeE6EEvGDDu77eDJGHWLkdij4Zmo3
u+nzSVQP8u8BL53/WYclEuBKEBDVmDx70irEsMJOnhkkE9dsf+tQozDRwkxExU5d
1XUKuByXxplkeO4Y9fmRZGZ2/KecVXXgwNR/gSC3WdUWtZxWmet6m0qtbiRbyRA/
GpQBghJmj0EtqV7UrfEkIXHhia8blQ7Mk1IU1zGNzkbjh4/CtLu1SnIE
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org