Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/x_RHQdTicoX1Peg3W459xBflKzA.roa
File: x_RHQdTicoX1Peg3W459xBflKzA.roa (raw, json)
Hash identifier: KWckBIQe0UroBe+O8pUcoWENbzHSGjf95jxsXQiV9fI=
Subject key identifier: C7:F4:47:41:D4:E2:72:85:F5:3D:E8:37:5B:8E:7D:C4:17:E5:2B:30
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0874
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/x_RHQdTicoX1Peg3W459xBflKzA.roa
Signing time: Tue 29 Sep 2020 10:02:29 +0000
ROA not before: Tue 29 Sep 2020 10:02:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131607
IP address blocks: 150.117.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:29 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C7F44741D4E27285F53DE8375B8E7DC417E52B30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:64:b1:e6:e9:7c:18:aa:81:ee:c6:5f:95:
0c:99:eb:37:24:f8:ef:cb:8f:ec:52:28:78:bf:89:
a2:38:bf:1f:8f:7c:ea:8c:b6:31:fa:20:39:10:15:
4e:81:dd:d4:de:94:17:05:35:6c:e2:12:9e:9c:3f:
ee:93:3e:b7:26:f6:dc:8d:63:61:10:26:f4:3b:22:
eb:e6:40:bf:d8:94:56:52:80:5d:fd:c8:a7:c0:f5:
84:67:da:8b:2f:09:46:a0:1c:2c:74:c9:ff:48:c3:
45:c0:89:8a:16:fe:ab:30:f3:81:57:25:74:b5:7c:
09:e9:61:9e:26:3c:61:f8:b6:14:05:1a:fa:98:a2:
99:21:cc:6d:e2:58:20:a5:da:fa:8c:02:7a:82:7d:
c5:60:e2:65:74:ca:8b:10:69:51:83:5d:a9:0d:59:
7c:b1:7b:21:5f:e2:b4:03:ae:17:13:39:a6:13:9b:
36:5e:a0:ad:e6:18:f6:b1:84:2d:bb:01:db:5d:e6:
24:2c:35:4b:62:d5:31:b0:5d:e4:53:7a:f5:8a:5e:
f7:95:7b:96:2e:67:79:51:4a:33:d4:ff:c5:73:ec:
3f:51:b0:0e:e8:ef:69:3f:ee:a7:b5:7c:2f:40:12:
1d:55:e2:c9:cf:7f:06:d5:4d:98:57:8a:1a:a2:76:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F4:47:41:D4:E2:72:85:F5:3D:E8:37:5B:8E:7D:C4:17:E5:2B:30
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/x_RHQdTicoX1Peg3W459xBflKzA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.224.0/21
Signature Algorithm: sha256WithRSAEncryption
60:f2:82:f1:cb:15:3b:24:7d:db:84:63:ab:fb:aa:0d:e6:b0:
67:1f:94:52:6a:02:94:cb:50:0e:0c:02:0d:34:9f:9d:5d:86:
f2:52:d9:0f:4f:65:2c:1a:41:fb:84:53:41:70:3a:0d:ac:22:
fa:90:94:26:54:b5:e8:7a:bc:3b:66:cb:83:49:42:13:f8:d6:
53:f8:e7:a8:ba:4d:1f:1b:74:c4:12:2f:c8:c0:4d:ad:17:c6:
ee:b1:d3:f6:0e:67:fb:ee:f4:3e:b1:b4:a9:53:59:86:87:ab:
d0:a7:08:95:d3:e6:93:1a:36:53:10:10:f3:cb:d1:b2:91:01:
ab:73:27:29:b2:d1:3c:43:a2:a3:76:23:2e:5f:48:b4:66:bb:
55:80:6a:01:b0:38:03:bc:fa:06:bb:62:07:a1:40:92:eb:0f:
21:c2:be:a6:ac:bc:ef:b7:9b:88:17:10:76:fa:1c:b9:5f:ad:
e1:2b:0a:bd:e9:0f:bc:40:29:3e:85:8d:61:7a:d5:9b:6f:0b:
f9:2b:7f:f6:17:52:3b:5f:98:52:b1:95:eb:66:43:ba:fc:62:
19:fc:2e:48:ea:d7:0e:ee:da:a3:b9:67:cb:62:3d:f4:86:02:
6a:c9:98:3b:6e:07:9b:16:d0:23:eb:de:be:63:36:74:c7:76:
1e:63:2a:64
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMDA5Mjkx
MDAyMjlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEM3RjQ0NzQxRDRFMjcy
ODVGNTNERTgzNzVCOEU3REM0MTdFNTJCMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFFmSx5ul8GKqB7sZflQyZ6zck+O/Lj+xSKHi/iaI4vx+PfOqM
tjH6IDkQFU6B3dTelBcFNWziEp6cP+6TPrcm9tyNY2EQJvQ7IuvmQL/YlFZSgF39
yKfA9YRn2osvCUagHCx0yf9Iw0XAiYoW/qsw84FXJXS1fAnpYZ4mPGH4thQFGvqY
opkhzG3iWCCl2vqMAnqCfcVg4mV0yosQaVGDXakNWXyxeyFf4rQDrhcTOaYTmzZe
oK3mGPaxhC27Adtd5iQsNUti1TGwXeRTevWKXveVe5YuZ3lRSjPU/8Vz7D9RsA7o
72k/7qe1fC9AEh1V4snPfwbVTZhXihqidmLVAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUx/RHQdTicoX1Peg3W459xBflKzAwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy94X1JIUWRUaWNvWDFQ
ZWczVzQ1OXhCZmxLekEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQDlnXgMA0GCSqGSIb3DQEBCwUAA4IBAQBg8oLxyxU7JH3bhGOr+6oN5rBnH5RS
agKUy1AODAINNJ+dXYbyUtkPT2UsGkH7hFNBcDoNrCL6kJQmVLXoerw7ZsuDSUIT
+NZT+Oeouk0fG3TEEi/IwE2tF8busdP2Dmf77vQ+sbSpU1mGh6vQpwiV0+aTGjZT
EBDzy9GykQGrcycpstE8Q6KjdiMuX0i0ZrtVgGoBsDgDvPoGu2IHoUCS6w8hwr6m
rLzvt5uIFxB2+hy5X63hKwq96Q+8QCk+hY1hetWbbwv5K3/2F1I7X5hSsZXrZkO6
/GIZ/C5I6tcO7tqjuWfLYj30hgJqyZg7bgebFtAj696+YzZ0x3YeYypk
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org