Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eY8bGXmDnJxH9CyLNhUoKt6ZfxI.roa
File: eY8bGXmDnJxH9CyLNhUoKt6ZfxI.roa (raw, json)
Hash identifier: FHOLXu08/SLy1cMn81Ge/lYKx7SOZDT8vNVdfZYGSN4=
Subject key identifier: 79:8F:1B:19:79:83:9C:9C:47:F4:2C:8B:36:15:28:2A:DE:99:7F:12
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C07
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eY8bGXmDnJxH9CyLNhUoKt6ZfxI.roa
Signing time: Wed 29 Sep 2021 02:38:58 +0000
ROA not before: Wed 29 Sep 2021 02:38:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17408
IP address blocks: 150.116.0.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3079 (0xc07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=798F1B1979839C9C47F42C8B3615282ADE997F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:c6:ac:06:38:66:80:cd:23:25:8d:c4:cb:
6f:f3:a3:07:7a:ab:b7:0e:28:0c:68:09:32:d5:a3:
4d:44:5e:8c:b0:38:be:d2:d5:4e:92:8c:9b:5f:0a:
ec:e2:c4:77:1c:51:dd:f4:50:70:54:f8:50:6f:4b:
3f:c5:d5:58:0b:7d:db:1b:36:2f:fe:56:76:3d:6d:
3b:af:ac:c9:28:f4:e1:45:b2:d1:9b:36:96:a7:26:
2a:c5:dd:9d:c2:d0:98:ed:cf:aa:ff:c2:14:1e:fc:
7e:77:7c:49:71:64:15:ab:b2:3b:07:60:a1:83:13:
d5:45:01:e0:5b:99:c4:ba:ad:d9:d3:86:e8:3d:ad:
b4:61:82:c6:e1:c0:c0:23:ce:d2:40:de:b6:9c:cb:
fd:20:f5:95:91:72:76:27:a1:2f:05:66:68:d8:e8:
85:84:81:74:38:d7:59:5a:f1:30:f8:a1:05:8a:2a:
fd:63:f3:a5:7f:37:57:bf:82:6e:99:99:97:b9:d8:
0f:bc:8c:bd:e4:30:66:3d:16:da:15:0c:cf:ab:18:
1c:bf:40:f6:55:41:84:47:9a:1d:52:bc:7b:09:33:
6b:f4:7c:e6:7a:80:db:46:b8:4f:1a:04:7b:a8:00:
a7:6b:3c:50:bf:f6:54:e3:b5:bb:1e:6e:e3:55:81:
b8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8F:1B:19:79:83:9C:9C:47:F4:2C:8B:36:15:28:2A:DE:99:7F:12
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eY8bGXmDnJxH9CyLNhUoKt6ZfxI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.0.0/21
Signature Algorithm: sha256WithRSAEncryption
80:96:4f:c8:79:71:6d:5f:00:75:ef:e2:69:1f:e6:ff:5e:0f:
5d:36:4f:95:dd:9f:bb:86:7e:f4:95:d4:7f:20:98:69:ce:83:
9f:e7:97:a6:36:6b:ad:e7:8d:09:54:52:61:a1:58:66:1c:cb:
a5:9c:41:e6:e5:12:1e:62:4f:1b:e0:d6:8c:dd:75:85:56:57:
8a:e3:14:54:73:95:1a:8a:25:34:f6:45:cb:34:5e:11:16:b3:
90:93:98:ca:50:87:53:5b:d0:9c:1e:32:56:87:49:f9:9b:90:
f1:c3:46:c3:8d:d2:0f:c6:8c:94:55:3d:62:7c:77:60:68:52:
8c:60:75:a6:a1:e7:bd:bf:5f:37:2a:6e:65:47:ba:d0:1a:a4:
79:6b:a7:77:77:c2:68:cb:97:7a:13:a2:cb:22:ab:3e:96:28:
74:ec:20:e8:aa:23:eb:83:d3:05:d5:55:aa:dd:ef:89:04:4d:
f5:28:56:cd:38:34:80:c0:a0:13:d6:d2:0b:e6:61:c3:74:cb:
a2:cd:3e:19:fb:90:18:cb:ec:43:ef:ad:28:1a:42:a7:a4:e9:
3c:af:92:c5:a7:58:bc:54:58:ab:68:6f:31:c3:48:e6:0e:df:
11:96:30:7c:d3:ba:52:84:d6:68:30:ac:94:b6:c3:db:54:35:
4d:a0:96:29
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDAcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTA5Mjkw
MjM4NThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDc5OEYxQjE5Nzk4MzlD
OUM0N0Y0MkM4QjM2MTUyODJBREU5OTdGMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA+sasBjhmgM0jJY3Ey2/zowd6q7cOKAxoCTLVo01EXoywOL7S
1U6SjJtfCuzixHccUd30UHBU+FBvSz/F1VgLfdsbNi/+VnY9bTuvrMko9OFFstGb
NpanJirF3Z3C0Jjtz6r/whQe/H53fElxZBWrsjsHYKGDE9VFAeBbmcS6rdnThug9
rbRhgsbhwMAjztJA3racy/0g9ZWRcnYnoS8FZmjY6IWEgXQ411la8TD4oQWKKv1j
86V/N1e/gm6ZmZe52A+8jL3kMGY9FtoVDM+rGBy/QPZVQYRHmh1SvHsJM2v0fOZ6
gNtGuE8aBHuoAKdrPFC/9lTjtbsebuNVgbizAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUeY8bGXmDnJxH9CyLNhUoKt6ZfxIwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9lWThiR1htRG5KeEg5
Q3lMTmhVb0t0NlpmeEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQDlnQAMA0GCSqGSIb3DQEBCwUAA4IBAQCAlk/IeXFtXwB17+JpH+b/Xg9dNk+V
3Z+7hn70ldR/IJhpzoOf55emNmut540JVFJhoVhmHMulnEHm5RIeYk8b4NaM3XWF
VleK4xRUc5UaiiU09kXLNF4RFrOQk5jKUIdTW9CcHjJWh0n5m5Dxw0bDjdIPxoyU
VT1ifHdgaFKMYHWmoee9v183Km5lR7rQGqR5a6d3d8Joy5d6E6LLIqs+lih07CDo
qiPrg9MF1VWq3e+JBE31KFbNODSAwKAT1tIL5mHDdMuizT4Z+5AYy+xD760oGkKn
pOk8r5LFp1i8VFiraG8xw0jmDt8RljB807pShNZoMKyUtsPbVDVNoJYp
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org