Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/W3Fl4lApiahTEKNhHWz4_az0V1g.roa
File: W3Fl4lApiahTEKNhHWz4_az0V1g.roa (raw, json)
Hash identifier: Aq9iyGPtiDGN0wCIjqU010+LZgyXjIBMsYZPzMJ+xAg=
Subject key identifier: 5B:71:65:E2:50:29:89:A8:53:10:A3:61:1D:6C:F8:FD:AC:F4:57:58
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BDA
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/W3Fl4lApiahTEKNhHWz4_az0V1g.roa
Signing time: Wed 29 Sep 2021 02:38:45 +0000
ROA not before: Wed 29 Sep 2021 02:38:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 150.116.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3034 (0xbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5B7165E2502989A85310A3611D6CF8FDACF45758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:33:84:79:13:d1:9d:19:6c:9e:04:1f:34:3f:
1a:fd:9a:ac:d5:a3:52:f4:d0:6f:f4:83:73:14:05:
c7:a4:aa:a6:d3:d7:55:63:e2:da:cc:1a:70:88:0f:
ff:c8:0c:cf:77:d5:50:65:b5:70:09:77:95:4b:d4:
7b:bb:63:00:d6:49:7b:cf:4f:20:d9:26:c8:ce:73:
83:c5:89:bc:1c:cc:15:7a:8e:87:47:b8:14:8b:7f:
47:dc:c2:8e:5a:6f:d2:07:b9:5a:c8:d5:8f:7f:c2:
7f:18:45:8c:77:62:05:20:73:8c:92:96:cc:11:47:
5a:9c:2e:71:f6:41:dd:97:6b:8e:fa:19:98:7e:4f:
30:18:f9:4a:c4:89:78:42:9c:58:07:02:ee:e1:c4:
0f:e7:cb:56:83:75:1d:02:cc:7f:d7:53:32:ec:cd:
bc:bd:e7:92:09:ed:cf:84:be:2e:59:9c:ec:0a:54:
7c:75:a5:b0:64:e8:e6:95:d0:43:d5:23:4d:49:ab:
7b:75:b4:ee:db:a2:fc:dd:b8:84:cb:5a:42:33:fd:
9d:3c:a5:be:de:11:b9:ca:b6:44:0c:fb:f6:0f:9f:
b3:cb:1d:45:31:7a:06:5a:ad:ab:1c:b8:e6:4f:89:
9a:bd:a5:0f:43:e2:94:a9:fe:b9:ac:a6:06:f0:93:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:71:65:E2:50:29:89:A8:53:10:A3:61:1D:6C:F8:FD:AC:F4:57:58
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/W3Fl4lApiahTEKNhHWz4_az0V1g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.32.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:fe:27:96:13:12:b8:31:49:d0:a7:f2:e9:d9:8a:63:df:89:
e3:48:6d:52:bc:ec:86:62:99:17:0a:04:67:a7:94:dd:60:fe:
98:49:2d:6c:36:f3:6d:6a:43:74:70:06:4b:80:70:ed:fa:1b:
91:79:d9:8c:03:53:5e:3f:c5:83:49:d0:4b:c6:9f:e2:0c:f5:
f8:98:c9:25:de:77:cd:8f:47:b8:4f:7f:71:11:ad:e0:9b:83:
dd:5e:3f:8a:53:db:fb:27:b5:0a:68:bf:23:4d:8a:15:d0:7c:
ad:c6:9f:7f:9f:7e:fd:e5:c4:f3:29:bf:99:0e:89:e7:4c:00:
e5:bb:38:91:aa:10:69:6a:14:65:b5:ea:ee:b9:23:aa:98:b1:
74:95:e3:b8:72:65:07:38:e2:36:ca:be:ed:c8:f1:59:e0:57:
e5:bf:e0:37:42:3f:62:f9:1e:47:56:ad:90:c9:42:22:08:a6:
e6:4a:bd:78:f0:4b:5d:d9:97:02:15:7f:96:75:21:b5:ad:b3:
02:67:23:11:e4:04:c7:e3:2c:bc:6d:2d:ab:ea:8a:af:cf:a0:
40:35:8b:ca:73:da:e9:6c:b7:60:41:b1:3b:22:09:db:1b:a9:
f9:52:7c:24:14:2d:2e:df:98:f7:b8:c0:37:67:2d:7c:66:ef:
8b:25:c1:77
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICC9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTA5Mjkw
MjM4NDVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDVCNzE2NUUyNTAyOTg5
QTg1MzEwQTM2MTFENkNGOEZEQUNGNDU3NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcM4R5E9GdGWyeBB80Pxr9mqzVo1L00G/0g3MUBcekqqbT11Vj
4trMGnCID//IDM931VBltXAJd5VL1Hu7YwDWSXvPTyDZJsjOc4PFibwczBV6jodH
uBSLf0fcwo5ab9IHuVrI1Y9/wn8YRYx3YgUgc4ySlswRR1qcLnH2Qd2Xa476GZh+
TzAY+UrEiXhCnFgHAu7hxA/ny1aDdR0CzH/XUzLszby955IJ7c+Evi5ZnOwKVHx1
pbBk6OaV0EPVI01Jq3t1tO7bovzduITLWkIz/Z08pb7eEbnKtkQM+/YPn7PLHUUx
egZarascuOZPiZq9pQ9D4pSp/rmspgbwk0CRAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUW3Fl4lApiahTEKNhHWz4/az0V1gwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9XM0ZsNGxBcGlhaFRF
S05oSFd6NF9hejBWMWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQElnQgMA0GCSqGSIb3DQEBCwUAA4IBAQB8/ieWExK4MUnQp/Lp2Ypj34njSG1S
vOyGYpkXCgRnp5TdYP6YSS1sNvNtakN0cAZLgHDt+huRedmMA1NeP8WDSdBLxp/i
DPX4mMkl3nfNj0e4T39xEa3gm4PdXj+KU9v7J7UKaL8jTYoV0Hytxp9/n3795cTz
Kb+ZDonnTADluziRqhBpahRlteruuSOqmLF0leO4cmUHOOI2yr7tyPFZ4Fflv+A3
Qj9i+R5HVq2QyUIiCKbmSr148Etd2ZcCFX+WdSG1rbMCZyMR5ATH4yy8bS2r6oqv
z6BANYvKc9rpbLdgQbE7IgnbG6n5UnwkFC0u35j3uMA3Zy18Zu+LJcF3
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:15 2025 by rpki-client