Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/toEL_22MnzIy-SDxXf0J-PJ_Bpw.roa
File: toEL_22MnzIy-SDxXf0J-PJ_Bpw.roa (raw, json)
Hash identifier: y8aJC+S5eHZb1yPiZVa9FfHezwIB54VoOTEu3VuM3Aw=
Subject key identifier: B6:81:0B:FF:6D:8C:9F:32:32:F9:20:F1:5D:FD:09:F8:F2:7F:06:9C
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BED
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/toEL_22MnzIy-SDxXf0J-PJ_Bpw.roa
Signing time: Wed 29 Sep 2021 02:38:51 +0000
ROA not before: Wed 29 Sep 2021 02:38:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18419
IP address blocks: 150.117.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3053 (0xbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B6810BFF6D8C9F3232F920F15DFD09F8F27F069C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:6c:61:b3:52:68:6f:53:28:b8:b3:b7:f9:
14:b2:2e:63:80:27:07:c3:2b:43:1c:6c:d9:31:0f:
f2:78:81:24:8e:ec:68:dc:f6:f7:42:26:9e:04:2c:
89:85:c7:22:f2:4f:8e:f0:4b:5d:d3:f1:54:87:00:
fa:cf:98:3c:22:c8:e7:35:f5:71:7b:ef:65:95:0b:
96:d4:10:c1:15:69:54:43:a6:d1:a9:5a:6f:27:89:
c2:3e:ce:4f:f9:11:5f:6c:07:5b:a1:28:95:73:ea:
02:fa:5c:f7:fa:18:38:75:52:8a:4c:23:65:16:60:
1d:01:7b:ce:eb:9a:bb:76:ad:1c:b9:f7:1f:e1:5e:
b1:c8:96:b9:4d:0f:22:57:33:d9:7d:f9:ff:d2:62:
35:7d:23:c2:b8:33:4e:92:f1:a7:6c:39:3c:f7:61:
fa:1c:f3:ed:b4:9c:78:09:0b:46:6b:25:ce:0d:c1:
ff:b3:77:bb:eb:e7:fc:7c:95:79:ad:db:eb:14:87:
28:e0:93:dc:f7:8b:fc:bd:65:6c:2b:47:92:31:58:
97:1a:83:8e:94:02:f5:e5:ac:34:36:94:e2:e8:c7:
b1:03:0a:92:75:41:2b:15:62:89:f5:38:28:7d:dd:
08:fe:76:b3:96:10:68:ae:39:c9:54:04:2e:13:33:
7a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:81:0B:FF:6D:8C:9F:32:32:F9:20:F1:5D:FD:09:F8:F2:7F:06:9C
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/toEL_22MnzIy-SDxXf0J-PJ_Bpw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.48.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:9a:05:83:3e:83:88:22:7a:2d:48:0f:b9:f6:84:1a:81:36:
d4:d3:36:18:7a:f0:1e:1d:bf:d2:f7:cd:1b:e7:1e:8b:d7:fb:
55:50:0c:a3:51:a9:e5:f3:41:81:57:93:7e:08:40:64:8f:3b:
95:a3:9e:93:5a:51:31:db:07:46:1b:db:1d:19:f0:85:58:e6:
9d:a4:4e:f6:b1:6e:38:ba:1c:ab:3e:d7:e9:d1:0f:82:ac:82:
f8:5e:ef:97:09:6a:c2:4b:49:e4:85:fe:80:02:4f:83:e3:d4:
91:d6:32:07:48:58:45:8f:0e:24:c4:f7:2b:63:01:06:83:ad:
78:fc:ae:b5:a7:07:1e:9d:88:e7:fb:27:4a:ab:1e:1e:c3:a8:
8a:d2:3c:92:e0:5f:72:ae:8a:da:f7:0c:92:d3:73:e7:ef:49:
10:5a:e2:8b:1d:bf:51:76:15:2f:b2:0c:45:1d:69:1c:2e:b2:
3e:1b:6d:ed:d5:c2:f2:67:24:75:e4:3e:27:8f:d2:f7:7b:aa:
25:94:c0:5b:cf:8f:c3:d3:50:62:78:d6:13:01:3d:35:c2:e9:
65:60:30:63:00:af:a0:b4:d3:de:15:23:0f:b8:52:de:5f:bf:
82:e9:b1:85:bf:42:a4:f1:b6:4f:55:58:3a:9a:24:59:78:dc:
d1:f0:14:48
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTA5Mjkw
MjM4NTFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEI2ODEwQkZGNkQ4QzlG
MzIzMkY5MjBGMTVERkQwOUY4RjI3RjA2OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTDWxhs1Job1MouLO3+RSyLmOAJwfDK0McbNkxD/J4gSSO7Gjc
9vdCJp4ELImFxyLyT47wS13T8VSHAPrPmDwiyOc19XF772WVC5bUEMEVaVRDptGp
Wm8nicI+zk/5EV9sB1uhKJVz6gL6XPf6GDh1UopMI2UWYB0Be87rmrt2rRy59x/h
XrHIlrlNDyJXM9l9+f/SYjV9I8K4M06S8adsOTz3Yfoc8+20nHgJC0ZrJc4Nwf+z
d7vr5/x8lXmt2+sUhyjgk9z3i/y9ZWwrR5IxWJcag46UAvXlrDQ2lOLox7EDCpJ1
QSsVYon1OCh93Qj+drOWEGiuOclUBC4TM3olAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUtoEL/22MnzIy+SDxXf0J+PJ/BpwwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy90b0VMXzIyTW56SXkt
U0R4WGYwSi1QSl9CcHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQDlnUwMA0GCSqGSIb3DQEBCwUAA4IBAQCtmgWDPoOIInotSA+59oQagTbU0zYY
evAeHb/S980b5x6L1/tVUAyjUanl80GBV5N+CEBkjzuVo56TWlEx2wdGG9sdGfCF
WOadpE72sW44uhyrPtfp0Q+CrIL4Xu+XCWrCS0nkhf6AAk+D49SR1jIHSFhFjw4k
xPcrYwEGg614/K61pwcenYjn+ydKqx4ew6iK0jyS4F9yrora9wyS03Pn70kQWuKL
Hb9RdhUvsgxFHWkcLrI+G23t1cLyZyR15D4nj9L3e6ollMBbz4/D01BieNYTAT01
wullYDBjAK+gtNPeFSMPuFLeX7+C6bGFv0Kk8bZPVVg6miRZeNzR8BRI
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org