Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VNgMg_obLdnLzbsi_nJ1WIg-ARE.roa
File: VNgMg_obLdnLzbsi_nJ1WIg-ARE.roa (raw, json)
Hash identifier: w4+mmBvpbMwDxRdTf9oyZC017isS+nwbJRZ/98v4EtA=
Subject key identifier: 54:D8:0C:83:FA:1B:2D:D9:CB:CD:BB:22:FE:72:75:58:88:3E:01:11
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0AF0
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VNgMg_obLdnLzbsi_nJ1WIg-ARE.roa
Signing time: Sun 07 Feb 2021 12:58:50 +0000
ROA not before: Sun 07 Feb 2021 12:58:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9922
IP address blocks: 118.150.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2800 (0xaf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 12:58:50 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=54D80C83FA1B2DD9CBCDBB22FE727558883E0111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:a2:a6:14:4d:68:88:24:8c:81:26:47:00:
85:93:4b:69:3d:77:37:7b:97:11:6c:a3:e6:9d:27:
4a:3a:37:2a:f1:ab:47:5b:9b:89:a5:57:c0:59:92:
b6:70:40:5b:65:cd:ec:bf:8d:3f:fc:63:b8:dd:9b:
c0:9f:69:12:75:59:bf:17:ef:50:29:da:41:b0:5f:
a7:fe:48:82:3c:0f:e7:00:e1:6c:a5:7d:1d:87:32:
2b:52:3b:14:1b:0a:ab:98:5a:f4:95:34:93:60:d1:
89:5f:89:fc:50:c7:28:cd:1e:68:f5:df:01:8a:19:
0f:6c:ed:38:78:ba:bd:ad:b5:81:dd:9c:f5:b1:61:
2f:25:73:2c:b0:1d:c6:93:f3:26:9e:17:69:59:17:
cd:38:2b:0b:b1:1e:5a:0d:5c:cd:47:15:5d:b8:e9:
c4:61:5d:ab:b8:70:5e:bd:01:d5:bf:75:87:a8:f4:
0a:3e:4a:e1:fb:c9:e9:f5:42:21:69:ca:d3:bf:a6:
83:de:96:b3:2d:b1:78:a5:00:01:06:8d:00:cd:87:
59:d3:ee:44:de:0a:6e:15:cc:c8:c3:67:a1:a2:29:
4e:18:3f:94:a1:78:79:02:4e:fe:bb:e1:87:a3:2e:
86:ca:b9:12:5b:d5:b6:75:76:15:cd:72:ed:3f:37:
50:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:0C:83:FA:1B:2D:D9:CB:CD:BB:22:FE:72:75:58:88:3E:01:11
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VNgMg_obLdnLzbsi_nJ1WIg-ARE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.244.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:e6:fb:d2:87:29:c6:c1:62:b4:b8:8a:57:70:f0:16:fb:51:
f0:e8:d2:ea:c4:33:54:15:48:e2:12:c0:35:60:0f:2f:38:03:
6e:94:dd:42:8b:35:8d:26:6d:1a:e1:90:e4:f9:20:cb:48:04:
1b:30:e9:4e:53:2b:f0:27:e2:6a:7b:c2:cb:03:75:ee:8c:88:
89:5a:3b:75:c8:7e:38:58:a6:db:ea:1d:c7:65:f0:b9:5c:05:
9a:69:34:0b:e7:aa:d4:f9:6b:bf:9a:c5:14:09:1f:51:52:9e:
34:7a:f8:03:9f:e6:60:77:ab:d1:33:06:08:39:4a:2b:16:eb:
38:83:c8:e4:67:ed:b8:9d:aa:ae:d0:89:88:06:66:07:a3:da:
53:9d:7a:46:cb:ba:1c:16:82:77:27:75:e5:7b:42:fd:d6:2b:
05:ad:e1:60:80:47:d7:30:e7:70:1f:d2:6a:86:09:fb:ee:56:
14:80:ad:66:0d:4f:85:78:1a:23:c7:bb:ff:1b:0a:a5:88:85:
06:bd:fd:2c:c4:fb:0b:6a:7d:e4:cb:f3:b8:05:e0:16:1e:01:
ff:54:90:82:1c:2e:c4:b4:8b:06:ca:ad:4c:07:f1:ed:dd:15:
c1:59:43:f0:2a:94:a9:8a:ca:a2:f0:e9:34:97:31:cc:b0:8b:
8e:97:f9:06
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCvAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTAyMDcx
MjU4NTBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU0RDgwQzgzRkExQjJE
RDlDQkNEQkIyMkZFNzI3NTU4ODgzRTAxMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaJKKmFE1oiCSMgSZHAIWTS2k9dzd7lxFso+adJ0o6Nyrxq0db
m4mlV8BZkrZwQFtlzey/jT/8Y7jdm8CfaRJ1Wb8X71Ap2kGwX6f+SII8D+cA4Wyl
fR2HMitSOxQbCquYWvSVNJNg0YlfifxQxyjNHmj13wGKGQ9s7Th4ur2ttYHdnPWx
YS8lcyywHcaT8yaeF2lZF804KwuxHloNXM1HFV246cRhXau4cF69AdW/dYeo9Ao+
SuH7yen1QiFpytO/poPelrMtsXilAAEGjQDNh1nT7kTeCm4VzMjDZ6GiKU4YP5Sh
eHkCTv674YejLobKuRJb1bZ1dhXNcu0/N1BLAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUVNgMg/obLdnLzbsi/nJ1WIg+AREwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9WTmdNZ19vYkxkbkx6
YnNpX25KMVdJZy1BUkUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCdpb0MA0GCSqGSIb3DQEBCwUAA4IBAQCt5vvShynGwWK0uIpXcPAW+1Hw6NLq
xDNUFUjiEsA1YA8vOANulN1CizWNJm0a4ZDk+SDLSAQbMOlOUyvwJ+Jqe8LLA3Xu
jIiJWjt1yH44WKbb6h3HZfC5XAWaaTQL56rU+Wu/msUUCR9RUp40evgDn+Zgd6vR
MwYIOUorFus4g8jkZ+24naqu0ImIBmYHo9pTnXpGy7ocFoJ3J3Xle0L91isFreFg
gEfXMOdwH9Jqhgn77lYUgK1mDU+FeBojx7v/GwqliIUGvf0sxPsLan3ky/O4BeAW
HgH/VJCCHC7EtIsGyq1MB/Ht3RXBWUPwKpSpisqi8Ok0lzHMsIuOl/kG
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:48 2023 by rpki-client on console-ams.rpki-client.org