Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/qMK3k9AoMqhyGsKEh70XgRRYEXU.roa
File: qMK3k9AoMqhyGsKEh70XgRRYEXU.roa (raw, json)
Hash identifier: EDS/GdnagGR2HipMR698g9jTikI1inL/LBVrIMlKCIg=
Subject key identifier: A8:C2:B7:93:D0:28:32:A8:72:1A:C2:84:87:BD:17:81:14:58:11:75
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0C2F
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/qMK3k9AoMqhyGsKEh70XgRRYEXU.roa
Signing time: Wed 29 Sep 2021 02:39:07 +0000
ROA not before: Wed 29 Sep 2021 02:39:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 10085
IP address blocks: 223.26.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3119 (0xc2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:39:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A8C2B793D02832A8721AC28487BD178114581175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:5b:a3:65:02:2d:e9:44:c7:88:50:fe:7d:
48:a0:3d:47:d5:e8:b1:79:3a:f3:be:a0:74:84:82:
94:5c:34:15:c7:39:3e:7d:30:a6:d7:73:67:56:dc:
f9:c7:70:d3:5b:b2:49:b7:fa:83:0a:8f:a1:96:e4:
f6:e7:5c:76:9f:2a:2c:83:fc:ce:09:38:41:21:9f:
ee:0b:25:a1:94:e0:bf:a2:bc:67:67:62:b2:50:73:
f5:01:37:7e:1e:7a:27:df:c1:87:f8:23:7a:35:a8:
41:78:52:08:8c:d5:b9:57:81:2b:c3:9c:91:05:95:
3c:d6:82:7f:06:70:9a:90:45:93:24:bc:cb:49:1d:
5d:3d:d3:e8:c9:e3:22:87:a9:4b:f8:b5:1a:e1:94:
78:1b:e5:08:d2:32:3f:23:da:53:e8:0e:5a:25:45:
6a:bd:6b:b3:20:32:05:77:99:8c:05:f3:a0:e7:93:
ba:06:6c:1a:33:f2:70:8d:f5:9b:90:88:d8:c6:f1:
0c:a4:f5:d5:15:74:58:e7:be:83:fb:11:7b:45:2c:
9b:43:a4:b1:15:51:61:ab:7c:27:de:8c:af:13:d5:
8f:83:45:fa:91:2c:11:69:1b:8d:7d:3e:c2:57:13:
f6:df:30:66:bb:72:cb:ff:a7:f2:9b:8e:cf:1f:93:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C2:B7:93:D0:28:32:A8:72:1A:C2:84:87:BD:17:81:14:58:11:75
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/qMK3k9AoMqhyGsKEh70XgRRYEXU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.96.0/21
Signature Algorithm: sha256WithRSAEncryption
58:bb:18:c9:7e:00:15:c6:57:fe:08:2f:5a:bd:85:77:e4:db:
7d:00:94:e0:c5:13:3f:78:07:2c:e2:f9:60:91:89:1c:50:4c:
8c:57:19:c5:eb:a9:23:5f:c3:ea:11:67:d1:e1:ef:ae:e8:47:
ca:fe:f5:6d:67:22:dd:ab:7f:ef:94:26:8b:80:f2:50:38:07:
81:05:e9:a8:30:92:49:bb:d6:1d:d5:a1:fd:a7:e0:f5:7d:6d:
13:20:3f:36:6e:d7:f2:5b:e9:1d:7b:ff:7f:99:3e:f5:43:dc:
b2:03:5f:06:88:15:b7:40:6c:40:13:d2:4a:d8:57:e0:fb:b7:
93:8d:aa:50:d3:ed:ac:c6:33:61:0f:56:80:c2:c8:5d:c3:d9:
8c:7f:48:9e:c3:70:d5:a7:ba:87:9e:a8:4f:ba:1a:00:04:71:
61:7f:ef:ad:2a:3d:42:fa:a6:87:fe:94:30:72:04:c1:ab:8a:
41:e9:0d:c8:c1:93:ed:63:ca:17:24:fc:1c:22:6e:bc:5f:49:
71:9a:4e:47:5d:7b:56:ed:39:96:20:a9:dc:34:86:64:99:c3:
43:51:e4:c1:c7:76:e8:31:40:4e:07:0a:6f:b4:94:69:53:bd:
f8:68:16:e0:d8:57:93:c7:98:ce:bf:cb:92:a1:34:0e:52:3c:
2c:11:b9:4a
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTA5Mjkw
MjM5MDdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEE4QzJCNzkzRDAyODMy
QTg3MjFBQzI4NDg3QkQxNzgxMTQ1ODExNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCs1ujZQIt6UTHiFD+fUigPUfV6LF5OvO+oHSEgpRcNBXHOT59
MKbXc2dW3PnHcNNbskm3+oMKj6GW5PbnXHafKiyD/M4JOEEhn+4LJaGU4L+ivGdn
YrJQc/UBN34eeiffwYf4I3o1qEF4UgiM1blXgSvDnJEFlTzWgn8GcJqQRZMkvMtJ
HV090+jJ4yKHqUv4tRrhlHgb5QjSMj8j2lPoDlolRWq9a7MgMgV3mYwF86Dnk7oG
bBoz8nCN9ZuQiNjG8Qyk9dUVdFjnvoP7EXtFLJtDpLEVUWGrfCfejK8T1Y+DRfqR
LBFpG419PsJXE/bfMGa7csv/p/Kbjs8fkx01AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUqMK3k9AoMqhyGsKEh70XgRRYEXUwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9xTUszazlBb01xaHlH
c0tFaDcwWGdSUllFWFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQD3xpgMA0GCSqGSIb3DQEBCwUAA4IBAQBYuxjJfgAVxlf+CC9avYV35Nt9AJTg
xRM/eAcs4vlgkYkcUEyMVxnF66kjX8PqEWfR4e+u6EfK/vVtZyLdq3/vlCaLgPJQ
OAeBBemoMJJJu9Yd1aH9p+D1fW0TID82btfyW+kde/9/mT71Q9yyA18GiBW3QGxA
E9JK2Ffg+7eTjapQ0+2sxjNhD1aAwshdw9mMf0iew3DVp7qHnqhPuhoABHFhf++t
Kj1C+qaH/pQwcgTBq4pB6Q3IwZPtY8oXJPwcIm68X0lxmk5HXXtW7TmWIKncNIZk
mcNDUeTBx3boMUBOBwpvtJRpU734aBbg2FeTx5jOv8uSoTQOUjwsEblK
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:43 2025 by rpki-client