Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/bCa8K7UygEhwtur9xv33MKwV7lA.roa
File: bCa8K7UygEhwtur9xv33MKwV7lA.roa (raw, json)
Hash identifier: iaKy90BQrQPLiZ38511lzYWx6avHdED+iAseZOO+tHg=
Subject key identifier: 6C:26:BC:2B:B5:32:80:48:70:B6:EA:FD:C6:FD:F7:30:AC:15:EE:50
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0AB0
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/bCa8K7UygEhwtur9xv33MKwV7lA.roa
Signing time: Sun 07 Feb 2021 11:50:53 +0000
ROA not before: Sun 07 Feb 2021 11:50:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17408
IP address blocks: 113.21.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2736 (0xab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:50:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6C26BC2BB532804870B6EAFDC6FDF730AC15EE50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:4f:22:8b:00:1f:da:c7:02:30:b8:74:84:
ed:89:b0:42:a4:60:ee:1d:0b:61:aa:f0:76:d7:d9:
a5:37:ef:d1:96:65:f9:e8:3b:2e:62:9a:54:bb:cc:
8a:1c:a5:c5:8b:fe:6a:40:55:1d:a9:00:ae:1f:05:
49:70:9c:ff:c3:46:22:23:2d:43:1a:27:eb:1f:e5:
74:5e:97:51:19:aa:3e:ca:1c:50:cd:b3:41:17:16:
39:08:87:5e:ad:13:cf:2a:08:ce:e7:c8:cb:ca:b6:
cc:d2:93:a3:aa:02:07:0f:96:a6:b7:c2:69:c2:c5:
1f:37:fa:f7:4e:99:84:1e:ae:87:51:a9:cf:8f:61:
18:9f:5e:91:b4:e9:32:22:c2:a3:af:a6:b8:b6:24:
30:6e:22:32:b7:5f:0a:5d:fe:eb:4d:31:65:d5:3f:
c7:b1:6e:4b:15:b3:41:2c:57:ff:e3:11:aa:57:0c:
b9:b5:fc:e3:64:01:53:72:ae:96:d8:bc:d9:52:39:
5e:46:73:69:1b:52:50:84:21:c3:e2:32:16:d2:c6:
b2:84:83:84:3c:c3:89:52:3d:da:ef:73:01:3f:a9:
39:82:e9:5e:bb:cc:90:8f:a0:8e:28:ee:92:56:67:
14:5b:dd:ea:bf:28:0d:ea:de:9a:cb:6b:ed:5e:74:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:26:BC:2B:B5:32:80:48:70:B6:EA:FD:C6:FD:F7:30:AC:15:EE:50
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/bCa8K7UygEhwtur9xv33MKwV7lA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.80.0/21
Signature Algorithm: sha256WithRSAEncryption
35:f0:40:d5:9b:7e:f1:10:50:64:08:cb:9e:c1:08:88:ae:64:
4c:d5:6d:13:04:3a:1d:1f:63:fa:3e:3e:4f:ca:84:b5:5f:76:
86:2c:b0:36:00:cc:f8:b7:0d:ab:8c:d8:1e:bd:23:28:9e:e0:
b7:e6:cf:1b:e3:f9:f3:0d:64:5d:a2:b7:7e:c9:bc:5d:cb:ee:
c8:6f:5c:5a:e5:fd:bb:f8:2c:3e:1f:b0:f0:a3:1e:c5:e3:87:
ce:21:91:15:7e:77:26:48:b4:85:b6:90:cd:9c:eb:54:62:65:
87:41:68:fb:5c:d4:7b:fc:26:1f:82:86:9b:8c:37:b4:aa:4b:
b1:f0:82:96:4f:96:ac:58:5b:af:91:ac:72:fe:3c:65:7e:43:
eb:03:c6:c8:2a:70:6c:a3:3e:cc:92:25:99:29:13:81:3f:17:
66:33:cb:29:a9:94:d4:ea:f8:b0:4d:fe:fc:7e:54:0e:ae:93:
2b:26:35:82:8c:9c:d9:d0:37:72:2d:4e:27:59:7a:94:62:d9:
0a:43:d9:b6:ea:ac:41:2d:0b:4a:60:a2:75:ed:8b:c4:a5:d0:
ee:ed:a1:48:3f:28:87:66:27:64:88:96:ec:d5:77:d9:7e:77:
08:51:44:3e:d1:ee:74:d9:b3:a7:0e:ae:0a:c1:7d:a5:51:83:
23:82:d2:93
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCrAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTAyMDcx
MTUwNTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZDMjZCQzJCQjUzMjgw
NDg3MEI2RUFGREM2RkRGNzMwQUMxNUVFNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC70U8iiwAf2scCMLh0hO2JsEKkYO4dC2Gq8HbX2aU379GWZfno
Oy5imlS7zIocpcWL/mpAVR2pAK4fBUlwnP/DRiIjLUMaJ+sf5XRel1EZqj7KHFDN
s0EXFjkIh16tE88qCM7nyMvKtszSk6OqAgcPlqa3wmnCxR83+vdOmYQerodRqc+P
YRifXpG06TIiwqOvpri2JDBuIjK3Xwpd/utNMWXVP8exbksVs0EsV//jEapXDLm1
/ONkAVNyrpbYvNlSOV5Gc2kbUlCEIcPiMhbSxrKEg4Q8w4lSPdrvcwE/qTmC6V67
zJCPoI4o7pJWZxRb3eq/KA3q3prLa+1edGwhAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUbCa8K7UygEhwtur9xv33MKwV7lAwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9iQ2E4SzdVeWdFaHd0
dXI5eHYzM01Ld1Y3bEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQDcRVQMA0GCSqGSIb3DQEBCwUAA4IBAQA18EDVm37xEFBkCMuewQiIrmRM1W0T
BDodH2P6Pj5PyoS1X3aGLLA2AMz4tw2rjNgevSMonuC35s8b4/nzDWRdord+ybxd
y+7Ib1xa5f27+Cw+H7Dwox7F44fOIZEVfncmSLSFtpDNnOtUYmWHQWj7XNR7/CYf
goabjDe0qkux8IKWT5asWFuvkaxy/jxlfkPrA8bIKnBsoz7MkiWZKROBPxdmM8sp
qZTU6viwTf78flQOrpMrJjWCjJzZ0DdyLU4nWXqUYtkKQ9m26qxBLQtKYKJ17YvE
pdDu7aFIPyiHZidkiJbs1XfZfncIUUQ+0e502bOnDq4KwX2lUYMjgtKT
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:14 2025 by rpki-client