Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/wrpWJ85-3kQPd1kSWf1ByqYTBIY.roa
File: wrpWJ85-3kQPd1kSWf1ByqYTBIY.roa (raw, json)
Hash identifier: zg2xDFKQggRhn/nyi3omj8+MMGArPzNNTfDeTfuDHZc=
Subject key identifier: C2:BA:56:27:CE:7E:DE:44:0F:77:59:12:59:FD:41:CA:A6:13:04:86
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0A74
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/wrpWJ85-3kQPd1kSWf1ByqYTBIY.roa
Signing time: Sun 07 Feb 2021 11:49:50 +0000
ROA not before: Sun 07 Feb 2021 11:49:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 63199
IP address blocks: 150.116.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2676 (0xa74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 7 11:49:50 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C2BA5627CE7EDE440F77591259FD41CAA6130486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:04:38:72:fb:db:b7:bc:30:90:59:93:4d:
41:ee:2f:12:87:4a:19:ce:53:0a:de:51:5d:4c:15:
b3:80:87:cf:94:73:62:41:bb:77:75:c6:13:81:cd:
9c:60:39:7a:96:b2:30:69:b5:36:39:25:ab:c2:56:
ae:a2:3e:f8:12:f6:53:a9:f4:79:e9:84:68:f6:0e:
ef:62:e3:70:80:65:a1:1e:07:16:db:1e:ef:5f:7f:
20:b6:d8:dd:73:02:16:93:21:6b:08:af:a0:59:70:
fe:32:9e:0c:4c:85:d6:ec:cf:fa:d8:c2:59:61:13:
96:b9:eb:f1:8d:47:3e:a8:9b:97:bc:c5:9b:ff:37:
a5:88:67:84:db:83:2e:66:b3:27:78:d4:57:6e:cd:
3b:29:5e:29:5c:d3:de:1d:c0:67:ad:cc:ce:b7:06:
78:28:d6:c0:53:52:ab:35:2b:16:91:ce:47:b3:d7:
01:4a:2e:56:c9:cc:14:d6:28:af:7e:4f:94:c6:e7:
9f:52:da:5f:f4:70:3f:44:9b:1c:29:e3:ef:36:0b:
6b:cf:f9:61:45:5c:bc:4c:a6:30:ba:42:ff:14:5b:
fa:56:88:6e:e0:e6:8a:6e:bb:f0:20:bd:6b:9c:56:
2c:90:ca:6a:1e:5b:81:ba:27:b5:55:23:4e:e6:35:
d1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BA:56:27:CE:7E:DE:44:0F:77:59:12:59:FD:41:CA:A6:13:04:86
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/wrpWJ85-3kQPd1kSWf1ByqYTBIY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.92.0/22
Signature Algorithm: sha256WithRSAEncryption
21:10:d3:8b:5a:e3:c4:9e:ca:31:9d:06:63:d1:29:c2:e8:73:
7a:46:49:05:55:3a:03:f3:11:d8:bf:f3:4b:35:17:42:11:76:
f8:91:01:2a:d2:a7:82:22:a1:ae:68:89:27:29:aa:98:37:5b:
ce:28:2a:42:1b:cb:82:3c:d4:35:ac:93:3e:69:b9:90:07:c7:
62:83:dd:23:6a:4e:4a:93:1d:2a:d5:02:07:a5:bc:11:a5:49:
68:d2:14:c5:64:ac:40:ea:0f:36:b9:b9:05:e3:36:8c:08:ac:
0f:c4:07:a1:c2:dd:b4:75:17:e9:08:a5:55:19:37:48:87:7d:
96:6b:2d:a1:c3:26:69:2b:fb:42:3e:03:e8:3c:c9:05:0b:4c:
5a:71:e8:57:dd:4a:89:0d:ba:24:32:e2:60:98:06:f3:e1:08:
0a:c0:a4:c8:07:bf:5b:7a:ef:f0:d6:4d:c2:d4:59:3c:4a:c1:
5b:79:28:0a:07:cc:ea:01:92:23:2a:74:72:e5:5d:b4:b5:22:
6d:5a:a0:a9:7a:d8:34:49:bd:4b:ce:76:3c:85:a8:d5:a8:53:
c6:10:ca:a0:db:16:67:00:c8:f5:11:36:27:27:c3:17:c1:7d:
d5:a7:f6:d5:d6:94:8a:b0:bc:5b:48:ca:d8:dd:a6:e9:05:41:
a2:60:2c:7b
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCnQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTAyMDcx
MTQ5NTBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEMyQkE1NjI3Q0U3RURF
NDQwRjc3NTkxMjU5RkQ0MUNBQTYxMzA0ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDatQQ4cvvbt7wwkFmTTUHuLxKHShnOUwreUV1MFbOAh8+Uc2JB
u3d1xhOBzZxgOXqWsjBptTY5JavCVq6iPvgS9lOp9HnphGj2Du9i43CAZaEeBxbb
Hu9ffyC22N1zAhaTIWsIr6BZcP4yngxMhdbsz/rYwllhE5a56/GNRz6om5e8xZv/
N6WIZ4Tbgy5msyd41FduzTspXilc094dwGetzM63Bngo1sBTUqs1KxaRzkez1wFK
LlbJzBTWKK9+T5TG559S2l/0cD9Emxwp4+82C2vP+WFFXLxMpjC6Qv8UW/pWiG7g
5opuu/AgvWucViyQymoeW4G6J7VVI07mNdF1AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUwrpWJ85+3kQPd1kSWf1ByqYTBIYwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy93cnBXSjg1LTNrUVBk
MWtTV2YxQnlxWVRCSVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQClnRcMA0GCSqGSIb3DQEBCwUAA4IBAQAhENOLWuPEnsoxnQZj0SnC6HN6RkkF
VToD8xHYv/NLNRdCEXb4kQEq0qeCIqGuaIknKaqYN1vOKCpCG8uCPNQ1rJM+abmQ
B8dig90jak5Kkx0q1QIHpbwRpUlo0hTFZKxA6g82ubkF4zaMCKwPxAehwt20dRfp
CKVVGTdIh32Way2hwyZpK/tCPgPoPMkFC0xacehX3UqJDbokMuJgmAbz4QgKwKTI
B79beu/w1k3C1Fk8SsFbeSgKB8zqAZIjKnRy5V20tSJtWqCpetg0Sb1LznY8hajV
qFPGEMqg2xZnAMj1ETYnJ8MXwX3Vp/bV1pSKsLxbSMrY3abpBUGiYCx7
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org