Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/S-dO5Zx8w-Jz5tMF30UgM6CnL2c.roa
File: S-dO5Zx8w-Jz5tMF30UgM6CnL2c.roa (raw, json)
Hash identifier: ERtKB9ML37Ny9RTCLC7OTDqMbD+wCUDG1NBE0rj/YuU=
Subject key identifier: 4B:E7:4E:E5:9C:7C:C3:E2:73:E6:D3:05:DF:45:20:33:A0:A7:2F:67
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BFF
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/S-dO5Zx8w-Jz5tMF30UgM6CnL2c.roa
Signing time: Wed 29 Sep 2021 02:38:56 +0000
ROA not before: Wed 29 Sep 2021 02:38:56 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17408
IP address blocks: 150.116.168.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3071 (0xbff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:56 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4BE74EE59C7CC3E273E6D305DF452033A0A72F67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fa:34:bf:6f:dc:3a:c6:93:a2:fe:2e:7f:38:
73:cf:dd:07:96:a5:b7:2a:7a:95:3b:31:9d:0c:06:
51:09:ae:6b:ff:81:a5:5b:3f:d5:00:de:14:18:07:
8f:c7:b9:0a:ca:41:bc:a9:ff:21:d1:ef:d6:c1:cd:
bb:0a:07:2c:93:e6:d5:14:7d:be:79:b9:1f:ed:96:
cf:1f:08:93:46:bb:e6:ad:ab:e0:fd:0d:b3:60:98:
e0:57:06:b4:f1:2d:95:ea:01:0f:8d:72:da:aa:a0:
26:6e:b5:de:00:62:46:58:8c:eb:11:98:7e:3c:bc:
73:70:ce:86:3e:4c:a7:ee:fe:7d:a5:fc:86:99:c0:
ae:69:05:76:66:c1:8b:c2:42:dc:e3:99:45:ff:31:
fe:fa:8b:ea:57:3f:6d:05:f2:f2:47:b1:54:bf:f5:
ac:67:9e:5f:c6:75:29:cb:13:36:59:1d:bf:b2:ad:
fd:e2:35:5b:9a:f4:dd:31:fa:ab:f8:a3:30:0c:e3:
ef:45:64:c1:ae:9f:b7:85:1f:a8:18:e4:be:cb:7e:
aa:8c:2a:90:0d:7f:bc:61:7f:d6:6c:a6:85:84:36:
7d:65:e8:9d:56:bd:a3:7d:90:3a:7e:c5:5e:d3:6d:
bb:f4:31:4a:bb:0f:17:1c:84:72:0f:d1:a5:14:f5:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E7:4E:E5:9C:7C:C3:E2:73:E6:D3:05:DF:45:20:33:A0:A7:2F:67
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/S-dO5Zx8w-Jz5tMF30UgM6CnL2c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.168.0/23
Signature Algorithm: sha256WithRSAEncryption
11:24:50:d4:1a:99:41:aa:6f:cf:67:a0:a4:7e:cc:ec:ee:58:
cc:05:18:c0:70:42:45:9b:3c:d1:9c:24:2d:5d:5d:19:68:f8:
cc:1d:58:23:13:9b:d0:af:11:76:93:cd:eb:91:c7:0a:4b:db:
4b:c7:38:c9:4d:bb:ea:01:5d:a7:70:7a:85:7d:61:e6:93:cf:
2d:19:a6:10:92:16:23:27:f9:94:3a:28:b4:98:df:34:d4:2b:
47:cf:ac:c8:3d:d3:33:f3:7e:56:fa:56:4e:02:0a:54:d9:de:
f9:97:02:c5:c2:6f:67:66:b9:f0:12:8e:49:ef:7f:2b:fb:ca:
d7:83:5f:37:22:6b:f8:cb:7b:7e:72:d2:f3:2e:89:31:60:ee:
ee:dd:01:1e:29:70:7b:99:42:5b:a5:f3:b6:2b:a5:6c:79:0a:
75:b0:f8:d2:6d:6b:34:9e:ac:1c:46:37:1d:dd:3d:1d:52:3f:
a2:c0:45:4e:f4:39:ff:f9:e4:e2:ff:0d:6d:a0:2d:d9:d2:a6:
7b:07:c5:50:41:fb:11:d3:d1:f3:f7:0d:fa:25:10:9d:1c:46:
83:a2:c6:c4:83:82:10:72:e4:24:64:23:7e:4b:99:e3:04:7a:
11:f3:04:33:60:42:0f:24:e1:3c:0a:e3:a5:e0:e0:a7:24:f4:
97:f7:09:d9
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICC/8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTA5Mjkw
MjM4NTZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDRCRTc0RUU1OUM3Q0Mz
RTI3M0U2RDMwNURGNDUyMDMzQTBBNzJGNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDe+jS/b9w6xpOi/i5/OHPP3QeWpbcqepU7MZ0MBlEJrmv/gaVb
P9UA3hQYB4/HuQrKQbyp/yHR79bBzbsKByyT5tUUfb55uR/tls8fCJNGu+atq+D9
DbNgmOBXBrTxLZXqAQ+NctqqoCZutd4AYkZYjOsRmH48vHNwzoY+TKfu/n2l/IaZ
wK5pBXZmwYvCQtzjmUX/Mf76i+pXP20F8vJHsVS/9axnnl/GdSnLEzZZHb+yrf3i
NVua9N0x+qv4ozAM4+9FZMGun7eFH6gY5L7LfqqMKpANf7xhf9ZspoWENn1l6J1W
vaN9kDp+xV7Tbbv0MUq7DxcchHIP0aUU9e9nAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUS+dO5Zx8w+Jz5tMF30UgM6CnL2cwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9TLWRPNVp4OHctSno1
dE1GMzBVZ002Q25MMmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBlnSoMA0GCSqGSIb3DQEBCwUAA4IBAQARJFDUGplBqm/PZ6Ckfszs7ljMBRjA
cEJFmzzRnCQtXV0ZaPjMHVgjE5vQrxF2k83rkccKS9tLxzjJTbvqAV2ncHqFfWHm
k88tGaYQkhYjJ/mUOii0mN801CtHz6zIPdMz835W+lZOAgpU2d75lwLFwm9nZrnw
Eo5J738r+8rXg183Imv4y3t+ctLzLokxYO7u3QEeKXB7mUJbpfO2K6VseQp1sPjS
bWs0nqwcRjcd3T0dUj+iwEVO9Dn/+eTi/w1toC3Z0qZ7B8VQQfsR09Hz9w36JRCd
HEaDosbEg4IQcuQkZCN+S5njBHoR8wQzYEIPJOE8CuOl4OCnJPSX9wnZ
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:06 2025 by rpki-client