Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/uM_oqR7T9GZGn1uQd9yePqJckLk.roa
File: uM_oqR7T9GZGn1uQd9yePqJckLk.roa (raw, json)
Hash identifier: /gCMXpny4f+al8wcRgr+CJul8KFyEKrfQl0umzrKr3Q=
Subject key identifier: B8:CF:E8:A9:1E:D3:F4:66:46:9F:5B:90:77:DC:9E:3E:A2:5C:90:B9
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0BD6
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/uM_oqR7T9GZGn1uQd9yePqJckLk.roa
Signing time: Wed 29 Sep 2021 02:38:44 +0000
ROA not before: Wed 29 Sep 2021 02:38:44 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18419
IP address blocks: 118.150.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3030 (0xbd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 02:38:44 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B8CFE8A91ED3F466469F5B9077DC9E3EA25C90B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:53:b6:5c:ae:d0:23:75:e9:f7:45:83:4d:e6:
dc:1c:f0:82:c8:b3:a9:f6:d0:31:b3:7d:2c:7e:99:
12:e9:d1:5a:9b:4e:9b:e9:bc:2b:65:27:30:ce:3a:
9b:97:5b:d3:9d:25:c4:f6:a8:5a:9e:57:be:fe:46:
98:4f:5b:e3:70:ec:70:39:f9:fa:a5:b8:cd:13:8d:
a8:89:f6:21:f6:14:ab:72:0e:ba:8a:95:2b:68:1f:
14:06:91:0f:e0:f5:f5:5d:26:80:4f:6e:b6:8e:17:
c4:92:e8:2b:01:c7:83:8d:c7:f3:57:20:f3:b8:3f:
97:ff:9f:d5:b0:e2:38:10:8b:19:7c:11:c2:4d:a3:
0a:f2:78:9e:be:47:e7:71:d8:f8:09:2e:b0:97:35:
dc:a3:53:7f:d9:af:ee:3f:38:77:d5:af:42:f2:b3:
2e:fa:0f:f4:af:65:ac:01:f7:8f:e8:7d:8e:30:38:
2d:12:83:16:20:63:c7:f7:a1:6a:e5:24:ea:46:ae:
73:9a:d5:f1:da:5b:32:31:40:4e:28:ad:0b:eb:00:
e3:28:d9:7f:ca:26:80:64:76:6c:33:82:78:0b:bf:
19:30:d6:39:d7:c0:8d:70:04:05:a4:b8:29:e9:b7:
75:29:7e:d0:a4:59:84:7a:fd:d0:52:3a:04:60:04:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CF:E8:A9:1E:D3:F4:66:46:9F:5B:90:77:DC:9E:3E:A2:5C:90:B9
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/uM_oqR7T9GZGn1uQd9yePqJckLk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.192.0/19
Signature Algorithm: sha256WithRSAEncryption
01:17:06:4a:24:d6:fc:35:50:63:60:01:8b:dd:f7:8a:0d:2e:
0e:e6:0a:27:1f:27:b5:0e:28:23:c1:2c:ca:53:0d:76:09:14:
c4:a7:ab:ce:c7:fa:be:d1:d4:dc:58:fc:ff:3c:33:8f:7a:cd:
f8:71:a1:34:71:57:98:ed:c2:cc:72:eb:cb:17:e9:06:6a:e6:
0e:66:9a:e1:ac:fa:87:49:47:c7:6f:1d:2c:1f:cf:d9:bc:b8:
eb:49:ad:e5:c4:6b:31:78:33:c0:6b:c4:13:1e:92:62:47:34:
c3:d5:4c:ac:60:c5:9a:ae:cb:67:9b:a6:62:a4:d2:d0:1f:73:
a9:7f:02:03:80:fe:47:43:cd:05:c9:ca:d4:1b:6d:7a:90:6f:
5a:ab:91:ad:79:4a:45:a2:4e:2f:de:8c:4a:b6:fd:de:26:61:
ac:08:af:0d:05:0f:48:fa:71:75:21:c4:e5:da:c5:76:8a:db:
a9:d0:6d:fa:c7:70:36:30:20:5b:e1:b1:c8:c6:91:85:7c:54:
09:51:1d:06:b1:9c:c7:37:b7:92:1b:cd:8d:de:31:af:25:fb:
26:5c:dd:c9:2a:d4:3b:92:cb:c0:05:86:3b:17:46:d9:c9:01:
3f:53:80:33:c4:70:8e:74:73:6f:f5:16:68:62:29:ed:24:36:
ff:0c:de:db
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICC9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTA5Mjkw
MjM4NDRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEI4Q0ZFOEE5MUVEM0Y0
NjY0NjlGNUI5MDc3REM5RTNFQTI1QzkwQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfU7ZcrtAjden3RYNN5twc8ILIs6n20DGzfSx+mRLp0VqbTpvp
vCtlJzDOOpuXW9OdJcT2qFqeV77+RphPW+Nw7HA5+fqluM0TjaiJ9iH2FKtyDrqK
lStoHxQGkQ/g9fVdJoBPbraOF8SS6CsBx4ONx/NXIPO4P5f/n9Ww4jgQixl8EcJN
owryeJ6+R+dx2PgJLrCXNdyjU3/Zr+4/OHfVr0Lysy76D/SvZawB94/ofY4wOC0S
gxYgY8f3oWrlJOpGrnOa1fHaWzIxQE4orQvrAOMo2X/KJoBkdmwzgngLvxkw1jnX
wI1wBAWkuCnpt3UpftCkWYR6/dBSOgRgBPyNAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUuM/oqR7T9GZGn1uQd9yePqJckLkwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy91TV9vcVI3VDlHWkdu
MXVRZDl5ZVBxSmNrTGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQFdpbAMA0GCSqGSIb3DQEBCwUAA4IBAQABFwZKJNb8NVBjYAGL3feKDS4O5gon
Hye1DigjwSzKUw12CRTEp6vOx/q+0dTcWPz/PDOPes34caE0cVeY7cLMcuvLF+kG
auYOZprhrPqHSUfHbx0sH8/ZvLjrSa3lxGsxeDPAa8QTHpJiRzTD1UysYMWarstn
m6ZipNLQH3OpfwIDgP5HQ80FycrUG216kG9aq5GteUpFok4v3oxKtv3eJmGsCK8N
BQ9I+nF1IcTl2sV2itup0G36x3A2MCBb4bHIxpGFfFQJUR0GsZzHN7eSG82N3jGv
JfsmXN3JKtQ7ksvABYY7F0bZyQE/U4AzxHCOdHNv9RZoYintJDb/DN7b
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:02 2025 by rpki-client