Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/e4eroBAWeXnlpjhq9HedNCkR6iA.roa
File: e4eroBAWeXnlpjhq9HedNCkR6iA.roa (raw, json)
Hash identifier: 3z64NCc/LoTseVH6OchB51n+z2C5jFnMo+/vDVriEPs=
Subject key identifier: 7B:87:AB:A0:10:16:79:79:E5:A6:38:6A:F4:77:9D:34:29:11:EA:20
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/e4eroBAWeXnlpjhq9HedNCkR6iA.roa
Signing time: Thu 15 Sep 2022 02:39:10 +0000
ROA not before: Thu 15 Sep 2022 02:39:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9831
IP address blocks: 203.163.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7B87ABA010167979E5A6386AF4779D342911EA20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:98:29:5e:e0:31:45:9f:90:3e:43:d3:83:8b:
dd:94:10:3b:73:ce:58:f3:8a:fa:41:19:c6:c6:1b:
6b:79:2a:6d:96:d2:85:27:5c:67:e8:53:4a:9f:87:
c4:af:2a:13:b1:6c:2b:a3:c9:b7:78:dc:5c:4f:26:
77:5c:d4:d2:54:7a:1d:58:00:f7:bf:8c:bf:42:61:
5e:d0:d4:ac:50:a6:5d:81:c7:04:9e:94:f4:cf:5a:
15:f5:55:72:e3:1f:c6:75:b6:42:a0:2d:33:e1:27:
47:ce:2a:a5:45:6d:68:db:af:d0:64:f6:8a:da:04:
e8:79:c5:19:cd:fd:b9:52:56:9a:c8:01:0f:bd:d6:
0b:40:c7:c9:e5:62:41:9b:3a:f0:8a:cb:a1:58:08:
54:ca:01:f3:5b:8f:40:d1:1b:22:c3:b8:12:2e:e9:
71:14:9b:be:fb:b3:8d:95:f9:59:8c:c5:41:76:2d:
e6:20:84:1d:2b:3f:b9:dd:e0:15:95:0c:b7:e7:97:
e8:7f:bb:85:4a:a0:c3:28:a7:f4:e5:42:10:c4:c9:
82:74:05:46:c9:3c:86:f1:f4:af:69:87:40:f4:c4:
47:ec:fd:12:2e:8b:c6:e4:b8:c1:20:2f:63:e3:e7:
21:75:92:40:fc:92:08:d0:86:8f:51:4e:f0:ac:08:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:87:AB:A0:10:16:79:79:E5:A6:38:6A:F4:77:9D:34:29:11:EA:20
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/e4eroBAWeXnlpjhq9HedNCkR6iA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.201.0/24
Signature Algorithm: sha256WithRSAEncryption
79:da:a6:ba:dc:c7:09:3b:29:6d:03:19:0e:58:64:cb:79:54:
5f:91:4a:fa:fb:fa:22:95:cc:c3:e5:7a:1e:1c:61:16:8b:4e:
12:dc:4b:ff:cc:05:d8:5e:9a:d4:03:d1:df:52:26:03:ea:bd:
b3:9d:47:3a:f2:5f:c7:31:2d:da:13:0d:ca:e7:61:61:8b:ac:
5e:3d:f4:ef:39:ef:c4:d8:2f:61:b9:69:4f:f9:95:e0:af:65:
91:5d:11:25:b8:ed:69:0c:ad:51:45:7b:d7:a1:65:ff:8a:a9:
5d:54:4d:0d:bd:48:c9:69:79:ab:fa:0a:e4:98:35:9c:80:3d:
94:38:02:77:f0:5a:c9:cb:33:d1:71:0a:e4:b0:2d:1c:c2:10:
e3:96:0c:9b:cb:a3:c3:5e:8d:ff:ed:27:18:ce:43:4c:79:70:
d3:5e:28:3f:06:b1:09:52:7e:d4:45:81:3c:eb:1c:5e:fa:df:
44:ab:be:66:75:78:5d:6f:9b:e2:05:91:83:0d:7f:c7:fe:9d:
64:38:93:c9:4c:6e:ad:f2:44:c6:e3:84:88:6d:8d:ed:bd:9d:
53:88:f0:3f:58:63:12:f0:be:47:03:1c:ea:5f:84:cc:75:93:
0b:55:a5:20:c2:94:ed:ab:c5:92:f6:d5:f7:4b:e3:22:a0:55:
d8:fb:1c:c3
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMjA5MTUw
MjM5MTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDdCODdBQkEwMTAxNjc5
NzlFNUE2Mzg2QUY0Nzc5RDM0MjkxMUVBMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdmCle4DFFn5A+Q9ODi92UEDtzzljzivpBGcbGG2t5Km2W0oUn
XGfoU0qfh8SvKhOxbCujybd43FxPJndc1NJUeh1YAPe/jL9CYV7Q1KxQpl2BxwSe
lPTPWhX1VXLjH8Z1tkKgLTPhJ0fOKqVFbWjbr9Bk9oraBOh5xRnN/blSVprIAQ+9
1gtAx8nlYkGbOvCKy6FYCFTKAfNbj0DRGyLDuBIu6XEUm777s42V+VmMxUF2LeYg
hB0rP7nd4BWVDLfnl+h/u4VKoMMop/TlQhDEyYJ0BUbJPIbx9K9ph0D0xEfs/RIu
i8bkuMEgL2Pj5yF1kkD8kgjQho9RTvCsCLi3AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUe4eroBAWeXnlpjhq9HedNCkR6iAwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9lNGVyb0JBV2VYbmxw
amhxOUhlZE5Da1I2aUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAy6PJMA0GCSqGSIb3DQEBCwUAA4IBAQB52qa63McJOyltAxkOWGTLeVRfkUr6
+/oilczD5XoeHGEWi04S3Ev/zAXYXprUA9HfUiYD6r2znUc68l/HMS3aEw3K52Fh
i6xePfTvOe/E2C9huWlP+ZXgr2WRXREluO1pDK1RRXvXoWX/iqldVE0NvUjJaXmr
+grkmDWcgD2UOAJ38FrJyzPRcQrksC0cwhDjlgyby6PDXo3/7ScYzkNMeXDTXig/
BrEJUn7URYE86xxe+t9Eq75mdXhdb5viBZGDDX/H/p1kOJPJTG6t8kTG44SIbY3t
vZ1TiPA/WGMS8L5HAxzqX4TMdZMLVaUgwpTtq8WS9tX3S+MioFXY+xzD
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:11 2025 by rpki-client