Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/qFVQp8eSVZrx93Lm1V5oYd3B2c0.roa
File: qFVQp8eSVZrx93Lm1V5oYd3B2c0.roa (raw, json)
Hash identifier: JWr4KVe2rxY+fTrZ1mhY3oDg5fzC1X9fpyvWGgNuUEk=
Subject key identifier: A8:55:50:A7:C7:92:55:9A:F1:F7:72:E6:D5:5E:68:61:DD:C1:D9:CD
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0AAE
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/qFVQp8eSVZrx93Lm1V5oYd3B2c0.roa
Signing time: Sun 07 Feb 2021 11:50:52 +0000
ROA not before: Sun 07 Feb 2021 11:50:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.117.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2734 (0xaae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:50:52 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A85550A7C792559AF1F772E6D55E6861DDC1D9CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d9:e2:0e:a8:b1:94:39:4f:53:23:0e:66:22:
a8:d0:eb:15:2d:20:cc:01:27:ee:5a:7e:a9:6a:e4:
ab:4b:fd:e7:a6:9e:48:53:58:48:6b:f4:6a:c3:96:
ea:fe:4f:e6:d4:e3:05:b7:ea:73:87:f8:6f:e0:8e:
9f:46:ff:cc:f2:50:36:4c:b7:ce:01:a8:17:63:0c:
e1:46:90:7a:3d:86:d9:19:b2:04:e8:b1:26:a1:0b:
b9:b8:d9:43:e8:1b:ce:dd:c2:18:c1:67:50:fd:32:
3f:ad:db:ec:c9:59:97:94:12:ed:4f:15:8d:d6:e0:
51:d0:92:4f:b5:f8:41:dd:60:3b:32:74:bd:3a:fb:
28:cf:12:e3:36:06:cf:23:3e:06:87:4c:92:e1:13:
0f:34:c1:ae:82:a8:8d:8d:0d:46:85:13:28:a2:d4:
d4:e0:8d:b1:c6:93:c7:b6:8b:7a:a2:02:14:3b:f1:
f1:ea:cd:a1:f8:64:ba:ca:7a:e0:f3:b0:d3:e8:39:
c4:c5:75:f6:bd:6d:f9:ac:69:f8:68:80:19:81:71:
9b:01:ab:58:95:bd:fd:ad:c9:9e:e3:3a:66:b3:9a:
93:e5:75:04:bf:48:ab:0b:8c:42:43:69:bf:1b:50:
ab:5a:c6:5b:ba:da:17:07:42:e2:bf:48:8c:b9:ee:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:55:50:A7:C7:92:55:9A:F1:F7:72:E6:D5:5E:68:61:DD:C1:D9:CD
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/qFVQp8eSVZrx93Lm1V5oYd3B2c0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.240.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:a5:86:0d:1e:e7:39:1d:86:ca:40:33:28:cd:32:c4:7f:bf:
e3:9a:f1:b5:16:c3:07:99:07:3b:f7:78:cf:5c:ca:32:f4:d0:
7f:4d:11:c4:c5:d6:99:e8:5c:55:b1:48:32:59:15:bc:1f:c0:
3e:27:b0:41:75:59:4c:1f:64:59:bd:29:6b:8b:e8:f5:b3:73:
08:eb:38:b5:83:0a:21:a2:b4:f8:67:19:8c:67:94:7e:c3:85:
36:e4:7a:50:05:20:85:a8:7d:2a:e0:4b:e8:0a:ae:d4:f6:c6:
6c:e1:09:30:46:6b:d9:5d:8e:9d:e8:8b:d7:9c:74:58:aa:fe:
83:88:f5:41:f1:5b:e9:f6:94:4e:3c:bc:5e:58:f8:97:91:72:
f4:e4:68:28:39:5e:35:cc:a8:cd:3c:2e:fc:93:40:5d:8a:8e:
7d:83:bc:7b:05:08:50:54:09:c9:6c:ec:2a:cd:b6:ac:5f:10:
93:d2:12:fc:91:83:7f:34:d3:2c:40:3c:42:79:d0:eb:2d:26:
b6:63:c1:e6:28:2d:df:45:de:9e:06:92:77:a5:74:1a:1d:7d:
91:63:02:20:26:fc:98:5d:1f:74:b7:e4:e6:b5:8e:a8:b7:85:
c7:bd:e0:77:d2:9e:12:ae:3b:77:71:4c:f1:bb:c1:05:0d:ac:
0b:bc:62:a5
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCq4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTAyMDcx
MTUwNTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE4NTU1MEE3Qzc5MjU1
OUFGMUY3NzJFNkQ1NUU2ODYxRERDMUQ5Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDh2eIOqLGUOU9TIw5mIqjQ6xUtIMwBJ+5afqlq5KtL/eemnkhT
WEhr9GrDlur+T+bU4wW36nOH+G/gjp9G/8zyUDZMt84BqBdjDOFGkHo9htkZsgTo
sSahC7m42UPoG87dwhjBZ1D9Mj+t2+zJWZeUEu1PFY3W4FHQkk+1+EHdYDsydL06
+yjPEuM2Bs8jPgaHTJLhEw80wa6CqI2NDUaFEyii1NTgjbHGk8e2i3qiAhQ78fHq
zaH4ZLrKeuDzsNPoOcTFdfa9bfmsafhogBmBcZsBq1iVvf2tyZ7jOmazmpPldQS/
SKsLjEJDab8bUKtaxlu62hcHQuK/SIy57vwZAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUqFVQp8eSVZrx93Lm1V5oYd3B2c0wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9xRlZRcDhlU1Zacng5
M0xtMVY1b1lkM0IyYzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQElnXwMA0GCSqGSIb3DQEBCwUAA4IBAQAKpYYNHuc5HYbKQDMozTLEf7/jmvG1
FsMHmQc793jPXMoy9NB/TRHExdaZ6FxVsUgyWRW8H8A+J7BBdVlMH2RZvSlri+j1
s3MI6zi1gwohorT4ZxmMZ5R+w4U25HpQBSCFqH0q4EvoCq7U9sZs4QkwRmvZXY6d
6IvXnHRYqv6DiPVB8Vvp9pROPLxeWPiXkXL05GgoOV41zKjNPC78k0Bdio59g7x7
BQhQVAnJbOwqzbasXxCT0hL8kYN/NNMsQDxCedDrLSa2Y8HmKC3fRd6eBpJ3pXQa
HX2RYwIgJvyYXR90t+TmtY6ot4XHveB30p4Srjt3cUzxu8EFDawLvGKl
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org