Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/c6pMThSr73ldZryPDFQFXSbF5wY.roa
File: c6pMThSr73ldZryPDFQFXSbF5wY.roa (raw, json)
Hash identifier: 8z2mk167sOA7GOQhZZopjNfdON9H/Mz1urDDfI0P2n8=
Subject key identifier: 73:AA:4C:4E:14:AB:EF:79:5D:66:BC:8F:0C:54:05:5D:26:C5:E7:06
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0FB7
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/c6pMThSr73ldZryPDFQFXSbF5wY.roa
Signing time: Fri 01 Sep 2023 08:29:28 +0000
ROA not before: Fri 01 Sep 2023 08:29:28 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 150.116.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4023 (0xfb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:28 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=73AA4C4E14ABEF795D66BC8F0C54055D26C5E706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1c:6b:eb:ff:e5:41:99:f5:39:3f:56:f1:aa:
40:16:52:38:03:2e:9a:c1:ea:6b:53:55:79:c6:2b:
42:99:7e:73:dd:cc:da:c9:56:7f:12:e8:b2:3c:df:
62:2f:bd:bf:24:cd:66:d7:05:6e:2d:40:d8:a5:84:
52:1f:61:4a:dc:f9:bc:ea:08:42:e2:ff:94:dd:9e:
3c:5e:1a:10:19:2e:52:b5:07:3c:c1:1b:83:73:62:
fb:90:5b:8e:d4:7c:c4:c1:e2:1f:66:f2:52:b9:0a:
af:34:1a:23:c2:77:f3:55:56:61:61:a7:c3:9e:5d:
35:c4:7d:dc:96:9a:5d:e9:ae:48:d0:0e:48:41:f7:
d9:f4:61:77:55:9c:eb:64:20:ed:f5:96:9b:9c:e0:
81:5c:08:3f:41:64:37:5b:af:01:b2:3a:d1:c4:31:
a3:44:1e:80:98:b1:30:85:23:c7:23:c7:0e:73:e7:
fe:d2:4d:ca:30:8f:dd:61:c2:14:54:36:65:ba:bb:
a6:db:84:18:06:a4:9a:1c:32:48:04:d2:ca:f3:4b:
cf:5e:47:7b:70:63:91:ba:b6:53:89:58:d0:40:19:
a6:a5:6b:f8:d5:72:f1:a9:26:48:e1:b3:29:cc:7b:
a0:64:15:21:8c:8e:5e:9d:f1:23:51:6b:0b:b9:c7:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AA:4C:4E:14:AB:EF:79:5D:66:BC:8F:0C:54:05:5D:26:C5:E7:06
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/c6pMThSr73ldZryPDFQFXSbF5wY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.238.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:43:be:73:1a:5d:24:ad:dc:56:34:32:14:c4:c1:f2:1d:31:
8a:9c:3e:46:f2:6f:9c:d0:3b:aa:bc:89:38:01:35:95:17:1e:
b9:95:91:6f:21:9e:cf:aa:49:cd:14:c3:dc:fe:1d:5e:ce:eb:
96:58:3b:cc:97:ed:29:0c:b4:9f:5c:24:15:75:13:46:3c:c4:
19:a8:d3:7a:ac:b7:91:6b:c9:1b:dc:6e:77:44:39:6a:20:e3:
42:db:a2:64:90:68:81:04:60:2b:93:f2:42:93:05:7e:33:3b:
29:c7:88:ee:27:d0:77:87:89:c8:6d:08:31:b4:8d:30:1f:ce:
f6:5b:6c:bf:eb:c1:a7:41:15:4f:87:ff:be:85:f8:b8:36:48:
90:28:21:53:d6:44:cc:0a:01:a3:d1:07:45:a3:28:6d:cf:3e:
82:10:60:47:0b:45:1a:3d:71:de:44:2e:fe:45:30:42:d5:10:
e6:39:15:c4:6f:a5:9e:7b:9e:b0:c0:62:26:65:c9:28:2e:da:
6b:dd:c8:93:65:22:6b:f8:73:86:12:32:ac:69:36:62:2e:e7:
5c:fa:76:5f:8f:1c:a1:d1:7d:0d:4a:77:49:e5:41:40:3c:b2:
a5:79:f6:d7:16:35:25:15:77:12:7c:a6:b5:69:1c:60:92:c6:
ee:ce:14:78
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICD7cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw
ODI5MjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDczQUE0QzRFMTRBQkVG
Nzk1RDY2QkM4RjBDNTQwNTVEMjZDNUU3MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlHGvr/+VBmfU5P1bxqkAWUjgDLprB6mtTVXnGK0KZfnPdzNrJ
Vn8S6LI832Ivvb8kzWbXBW4tQNilhFIfYUrc+bzqCELi/5TdnjxeGhAZLlK1BzzB
G4NzYvuQW47UfMTB4h9m8lK5Cq80GiPCd/NVVmFhp8OeXTXEfdyWml3prkjQDkhB
99n0YXdVnOtkIO31lpuc4IFcCD9BZDdbrwGyOtHEMaNEHoCYsTCFI8cjxw5z5/7S
Tcowj91hwhRUNmW6u6bbhBgGpJocMkgE0srzS89eR3twY5G6tlOJWNBAGaala/jV
cvGpJkjhsynMe6BkFSGMjl6d8SNRawu5x7HNAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUc6pMThSr73ldZryPDFQFXSbF5wYwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9jNnBNVGhTcjczbGRa
cnlQREZRRlhTYkY1d1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnTuMA0GCSqGSIb3DQEBCwUAA4IBAQBrQ75zGl0krdxWNDIUxMHyHTGKnD5G
8m+c0DuqvIk4ATWVFx65lZFvIZ7PqknNFMPc/h1ezuuWWDvMl+0pDLSfXCQVdRNG
PMQZqNN6rLeRa8kb3G53RDlqIONC26JkkGiBBGArk/JCkwV+Mzspx4juJ9B3h4nI
bQgxtI0wH872W2y/68GnQRVPh/++hfi4NkiQKCFT1kTMCgGj0QdFoyhtzz6CEGBH
C0UaPXHeRC7+RTBC1RDmORXEb6Wee56wwGImZckoLtpr3ciTZSJr+HOGEjKsaTZi
Ludc+nZfjxyh0X0NSndJ5UFAPLKlefbXFjUlFXcSfKa1aRxgksbuzhR4
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:48 2025 by rpki-client