Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/v4S1mz09Fz9fgomf9v4J6eX4Gho.roa
File: v4S1mz09Fz9fgomf9v4J6eX4Gho.roa (raw, json)
Hash identifier: 3t5kzpqTd0OIZOVEYr4OgHZZF2fjiXswefEKASzbSCE=
Subject key identifier: BF:84:B5:9B:3D:3D:17:3F:5F:82:89:9F:F6:FE:09:E9:E5:F8:1A:1A
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DE7
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/v4S1mz09Fz9fgomf9v4J6eX4Gho.roa
Signing time: Thu 29 Dec 2022 09:32:00 +0000
ROA not before: Thu 29 Dec 2022 09:32:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 150.116.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3559 (0xde7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BF84B59B3D3D173F5F82899FF6FE09E9E5F81A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:ec:90:ea:76:cb:c8:9b:c3:d1:6a:30:f7:
8d:6d:33:77:9d:70:5b:11:08:8a:2d:66:d6:2f:03:
a2:f9:e9:67:48:99:c1:5f:82:48:b1:21:72:a0:07:
15:07:a3:9e:b4:03:ff:26:c0:e0:4f:b1:32:0d:b0:
cc:77:c0:05:f9:81:a0:bf:5f:cd:78:6f:84:bf:d9:
29:92:8c:24:20:37:3c:89:37:84:a0:b5:ad:f0:21:
b2:7c:29:a1:2c:60:51:47:f7:07:52:52:c6:b4:4e:
7d:6e:91:86:dc:1a:be:6f:8e:e3:19:91:3d:d3:e5:
cc:3a:95:dc:ef:52:ac:c1:74:f3:36:1b:65:69:f8:
ab:32:b4:99:ae:c8:67:11:5a:31:a5:ef:a0:8d:44:
7a:4d:07:67:68:88:dc:33:cd:91:b6:65:47:0d:9d:
05:84:ea:9b:bf:e1:8b:94:12:7a:cc:cf:c5:7f:d2:
d3:a9:c8:d1:d5:6a:3e:b0:d5:19:7e:02:b4:a9:c5:
20:e3:b5:d7:8d:c3:f7:15:99:90:e7:9a:c2:6c:48:
a8:46:91:ac:6d:81:00:d7:1d:ca:53:95:c2:c3:ad:
a6:f3:c3:08:f7:4b:da:d9:6c:01:bd:18:fb:c5:52:
bd:1d:ad:07:34:a1:5f:47:78:fe:a8:c8:ec:9f:50:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:84:B5:9B:3D:3D:17:3F:5F:82:89:9F:F6:FE:09:E9:E5:F8:1A:1A
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/v4S1mz09Fz9fgomf9v4J6eX4Gho.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.112.0/22
Signature Algorithm: sha256WithRSAEncryption
56:13:c8:49:b7:fe:fc:0f:6b:dd:e2:fd:a3:31:06:42:7b:38:
45:d2:9d:fa:36:df:4b:12:84:44:1e:c4:7d:c7:4f:6c:cc:a6:
a2:8d:2e:4b:86:27:18:6e:90:2f:b9:5e:da:b5:dc:fa:e0:0f:
7f:0d:97:3d:28:76:dd:c0:97:3a:c0:dc:7b:b3:41:d8:3a:39:
82:ca:1f:f2:51:7f:98:1e:c9:67:15:82:cf:ae:7f:db:34:c6:
6f:9f:75:be:9d:4b:b6:72:f9:5e:9a:02:02:6d:51:b2:30:15:
39:6a:c2:71:1d:f9:5b:b8:23:9d:d1:26:62:82:b5:ee:72:59:
19:b9:ce:b2:05:67:01:62:47:55:60:46:31:c3:92:bd:15:56:
06:c6:d0:59:af:9e:5a:70:35:ce:e4:9c:7b:1c:a4:35:34:17:
2e:24:a5:89:f4:53:dd:89:01:97:b7:8a:41:00:17:a0:f4:e4:
0a:c2:ee:70:66:44:51:53:32:3d:cb:ae:72:0d:b5:c6:a8:90:
98:02:e8:0e:b8:17:fb:c0:b0:7a:40:95:5b:89:5a:d2:bd:46:
7b:6a:cd:b8:7b:f1:1e:bb:ea:a6:8c:07:50:ca:d3:15:db:55:
58:b1:87:fb:09:a2:df:af:1c:59:43:20:e5:b0:5e:c0:be:5a:
f5:d2:32:c6
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDecwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMjEyMjkw
OTMyMDBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEJGODRCNTlCM0QzRDE3
M0Y1RjgyODk5RkY2RkUwOUU5RTVGODFBMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZCOyQ6nbLyJvD0Wow941tM3edcFsRCIotZtYvA6L56WdImcFf
gkixIXKgBxUHo560A/8mwOBPsTINsMx3wAX5gaC/X814b4S/2SmSjCQgNzyJN4Sg
ta3wIbJ8KaEsYFFH9wdSUsa0Tn1ukYbcGr5vjuMZkT3T5cw6ldzvUqzBdPM2G2Vp
+KsytJmuyGcRWjGl76CNRHpNB2doiNwzzZG2ZUcNnQWE6pu/4YuUEnrMz8V/0tOp
yNHVaj6w1Rl+ArSpxSDjtdeNw/cVmZDnmsJsSKhGkaxtgQDXHcpTlcLDrabzwwj3
S9rZbAG9GPvFUr0drQc0oV9HeP6oyOyfUMafAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUv4S1mz09Fz9fgomf9v4J6eX4GhowHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy92NFMxbXowOUZ6OWZn
b21mOXY0SjZlWDRHaG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQClnRwMA0GCSqGSIb3DQEBCwUAA4IBAQBWE8hJt/78D2vd4v2jMQZCezhF0p36
Nt9LEoREHsR9x09szKaijS5LhicYbpAvuV7atdz64A9/DZc9KHbdwJc6wNx7s0HY
OjmCyh/yUX+YHslnFYLPrn/bNMZvn3W+nUu2cvlemgICbVGyMBU5asJxHflbuCOd
0SZigrXuclkZuc6yBWcBYkdVYEYxw5K9FVYGxtBZr55acDXO5Jx7HKQ1NBcuJKWJ
9FPdiQGXt4pBABeg9OQKwu5wZkRRUzI9y65yDbXGqJCYAugOuBf7wLB6QJVbiVrS
vUZ7as24e/Eeu+qmjAdQytMV21VYsYf7CaLfrxxZQyDlsF7Avlr10jLG
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org