Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cwy7zTxxVAnyRua0xSXKHJ9b3CE.roa
File: cwy7zTxxVAnyRua0xSXKHJ9b3CE.roa (raw, json)
Hash identifier: pHG9gcXjdPNU3Sr+P/Q5CHE4w4sFhmfPvgaZPgYgS8A=
Subject key identifier: 73:0C:BB:CD:3C:71:54:09:F2:46:E6:B4:C5:25:CA:1C:9F:5B:DC:21
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 085C
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cwy7zTxxVAnyRua0xSXKHJ9b3CE.roa
Signing time: Tue 29 Sep 2020 10:02:22 +0000
ROA not before: Tue 29 Sep 2020 10:02:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 10085
IP address blocks: 223.26.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140 (0x85c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:22 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=730CBBCD3C715409F246E6B4C525CA1C9F5BDC21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:59:22:e2:b1:3a:5d:d7:8c:d3:1c:54:23:
01:3d:0c:5b:53:a0:3f:33:ac:4e:99:91:75:ad:cd:
d5:f3:dc:8e:48:6a:18:18:55:a2:42:8b:c0:b4:34:
2c:9d:5a:96:97:fd:5b:43:00:61:5d:c1:b9:ac:43:
a6:70:5e:45:24:7c:87:9c:bb:f5:e1:25:23:38:0b:
05:47:b8:00:42:1a:79:a5:94:29:3a:a7:a3:6e:bc:
23:34:48:6f:9a:ec:80:17:13:af:12:01:8e:75:9d:
7e:bb:61:82:b4:32:0b:8c:e0:69:2e:6d:b9:30:ea:
8b:78:45:d7:7f:89:1f:f0:09:d5:78:78:f6:52:5a:
73:60:4f:ac:eb:36:1e:78:71:9f:8f:88:51:dd:71:
7b:bc:86:49:15:e2:b7:00:c3:e1:80:21:60:e2:5a:
38:52:29:ab:ae:ee:30:f9:a8:c7:99:95:8c:1e:4b:
db:32:f9:4a:f9:24:62:f2:ae:53:d0:7e:ba:3b:1f:
f3:aa:05:7e:2f:d3:57:92:1e:ae:a6:10:8b:bc:c4:
01:3e:7b:62:84:88:d6:ad:7a:f6:97:71:75:d5:9d:
5a:72:ff:ff:91:83:5b:c5:b9:48:28:86:db:46:8f:
46:2f:14:86:3e:fb:36:8e:22:cf:ea:8b:aa:17:d0:
6e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0C:BB:CD:3C:71:54:09:F2:46:E6:B4:C5:25:CA:1C:9F:5B:DC:21
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cwy7zTxxVAnyRua0xSXKHJ9b3CE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.96.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:a3:60:6d:00:0a:e6:17:69:97:2d:e5:bf:1a:fc:d9:d7:59:
19:1c:bf:26:a1:17:ed:fa:5b:ce:44:75:ab:4d:70:f4:4b:0f:
32:30:2d:39:05:82:25:3b:50:bf:df:8d:52:7b:fb:7c:82:1a:
6f:f5:8c:78:36:41:c9:2a:15:7a:90:b7:59:0e:d1:bd:41:61:
a5:d4:5a:fb:e8:33:fa:0a:c0:03:28:01:20:f0:ca:b8:36:b3:
98:2b:b4:32:b2:06:4c:a9:a9:5b:ca:62:9c:10:e2:8d:25:a2:
ad:bb:57:31:55:af:11:fb:5d:7c:78:93:5a:b4:dd:be:1e:c5:
bb:be:51:d4:88:c7:82:6b:3c:54:f2:4f:96:46:2d:26:40:8e:
dd:a0:f1:29:6f:a1:61:44:b9:1d:23:75:6d:a7:b2:b3:2f:2d:
74:1c:33:ec:df:79:37:99:7d:de:1a:87:60:6e:cb:ea:f8:25:
04:df:cb:9b:9e:07:fc:c5:0a:e9:9a:73:22:f5:0d:b5:1e:07:
59:2f:6f:a4:9e:98:d0:a0:7a:b9:c5:82:a0:07:f4:69:da:78:
5e:a3:81:81:af:8d:7a:63:40:3f:1d:32:c5:bb:a6:97:ad:77:
a6:21:17:2b:d3:8e:b7:e5:d8:1c:0e:64:48:d3:26:92:a3:7c:
96:51:1b:b5
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMDA5Mjkx
MDAyMjJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDczMENCQkNEM0M3MTU0
MDlGMjQ2RTZCNEM1MjVDQTFDOUY1QkRDMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3H1ki4rE6XdeM0xxUIwE9DFtToD8zrE6ZkXWtzdXz3I5IahgY
VaJCi8C0NCydWpaX/VtDAGFdwbmsQ6ZwXkUkfIecu/XhJSM4CwVHuABCGnmllCk6
p6NuvCM0SG+a7IAXE68SAY51nX67YYK0MguM4Gkubbkw6ot4Rdd/iR/wCdV4ePZS
WnNgT6zrNh54cZ+PiFHdcXu8hkkV4rcAw+GAIWDiWjhSKauu7jD5qMeZlYweS9sy
+Ur5JGLyrlPQfro7H/OqBX4v01eSHq6mEIu8xAE+e2KEiNatevaXcXXVnVpy//+R
g1vFuUgohttGj0YvFIY++zaOIs/qi6oX0G5xAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUcwy7zTxxVAnyRua0xSXKHJ9b3CEwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9jd3k3elR4eFZBbnlS
dWEweFNYS0hKOWIzQ0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQD3xpgMA0GCSqGSIb3DQEBCwUAA4IBAQB/o2BtAArmF2mXLeW/GvzZ11kZHL8m
oRft+lvORHWrTXD0Sw8yMC05BYIlO1C/341Se/t8ghpv9Yx4NkHJKhV6kLdZDtG9
QWGl1Fr76DP6CsADKAEg8Mq4NrOYK7QysgZMqalbymKcEOKNJaKtu1cxVa8R+118
eJNatN2+HsW7vlHUiMeCazxU8k+WRi0mQI7doPEpb6FhRLkdI3Vtp7KzLy10HDPs
33k3mX3eGodgbsvq+CUE38ubngf8xQrpmnMi9Q21HgdZL2+knpjQoHq5xYKgB/Rp
2nheo4GBr416Y0A/HTLFu6aXrXemIRcr04635dgcDmRI0yaSo3yWURu1
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org