Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/y7I6mR0Av9CJvQS-apQU0Ds21M4.roa
File: y7I6mR0Av9CJvQS-apQU0Ds21M4.roa (raw, json)
Hash identifier: BvjCS5adn6wIXTQiW3kIuO/0XdoyFfoOJ/l/4Y3TYkU=
Subject key identifier: CB:B2:3A:99:1D:00:BF:D0:89:BD:04:BE:6A:94:14:D0:3B:36:D4:CE
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E25
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/y7I6mR0Av9CJvQS-apQU0Ds21M4.roa
Signing time: Thu 29 Dec 2022 09:32:17 +0000
ROA not before: Thu 29 Dec 2022 09:32:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 103.5.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3621 (0xe25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CBB23A991D00BFD089BD04BE6A9414D03B36D4CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:bd:f6:1a:7d:4f:32:b7:74:5f:57:b7:30:
54:c8:69:e0:41:94:21:bb:cb:3d:fc:6c:96:65:34:
91:b8:88:99:ff:e2:f8:41:dc:dc:e2:bf:2f:66:f4:
e2:b9:41:36:72:3d:7b:92:0d:3a:93:b7:2d:77:65:
7e:21:f3:08:45:78:35:c1:b4:cc:fc:e5:eb:1c:e0:
77:9f:8f:f2:e3:1b:39:5d:69:b4:11:07:58:3e:54:
2f:f1:0c:6a:91:ad:c9:18:74:bb:d3:eb:5d:ba:fd:
b0:91:80:3f:9b:0d:7b:3f:b3:53:d0:4e:28:b0:e1:
52:8d:2c:e8:b1:03:77:60:74:5c:86:fa:81:98:2a:
33:e3:d2:c5:61:93:f7:9d:5c:83:3b:d7:66:f3:71:
50:40:09:bd:13:32:0a:14:ca:0b:65:99:48:9a:6f:
d1:a2:8e:cc:8c:18:2e:d0:3b:56:09:89:e8:ea:6e:
f9:ee:79:56:a4:ee:28:a2:2e:01:e8:e6:8a:0c:81:
a1:68:a8:82:89:82:dc:5a:92:ec:cb:2f:2e:5c:2e:
70:e8:16:f8:ab:c5:a9:87:e0:e8:58:14:b1:bc:98:
0c:95:cc:74:fb:dd:c5:88:07:f3:be:a2:39:c5:c8:
91:92:cb:ce:29:46:77:82:58:1b:7c:59:1f:93:e5:
5f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B2:3A:99:1D:00:BF:D0:89:BD:04:BE:6A:94:14:D0:3B:36:D4:CE
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/y7I6mR0Av9CJvQS-apQU0Ds21M4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:de:26:c3:ea:94:7e:90:9e:31:8d:b6:07:3c:e3:e4:1f:4d:
ec:d3:92:f5:ac:1a:13:3a:22:5e:9b:4d:df:27:76:7f:7a:ff:
9a:eb:9f:f0:05:6e:4c:00:24:cf:3d:59:10:8a:a4:08:ff:df:
43:0f:8e:49:f1:51:57:b8:aa:1d:84:7d:e6:d2:e7:94:41:f7:
3d:f4:7a:7d:a7:12:73:ea:b4:33:5d:64:92:ff:b4:31:b5:41:
82:ad:15:bb:ed:9f:68:7c:49:f3:2d:f1:b7:6d:ba:59:4a:cc:
44:1a:7d:94:f2:43:7a:1d:ac:68:1a:5c:f0:8c:cf:f9:52:be:
0f:39:c8:61:c4:52:01:8d:d5:9e:82:1f:7f:a7:de:d5:22:39:
19:6b:00:38:31:1f:65:73:36:48:f9:75:e1:ec:58:b2:af:10:
1d:04:2e:aa:66:ed:36:68:2c:69:10:a1:ef:25:ad:40:97:ab:
02:25:9e:89:14:93:8a:dd:b7:27:4a:83:df:41:cd:34:fe:cb:
5b:c0:b2:0d:8b:68:32:69:1d:98:31:ee:96:19:9d:2a:3c:35:
90:65:79:d4:29:d3:d3:8f:f2:42:2d:d3:90:49:05:7d:c6:f6:
98:47:e9:43:7f:bb:83:da:c5:39:1e:8b:0b:6b:45:7e:9b:09:
44:c4:eb:d1
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMjEyMjkw
OTMyMTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKENCQjIzQTk5MUQwMEJG
RDA4OUJEMDRCRTZBOTQxNEQwM0IzNkQ0Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1Pr32Gn1PMrd0X1e3MFTIaeBBlCG7yz38bJZlNJG4iJn/4vhB
3Nzivy9m9OK5QTZyPXuSDTqTty13ZX4h8whFeDXBtMz85esc4Hefj/LjGzldabQR
B1g+VC/xDGqRrckYdLvT6126/bCRgD+bDXs/s1PQTiiw4VKNLOixA3dgdFyG+oGY
KjPj0sVhk/edXIM712bzcVBACb0TMgoUygtlmUiab9GijsyMGC7QO1YJiejqbvnu
eVak7iiiLgHo5ooMgaFoqIKJgtxakuzLLy5cLnDoFvirxamH4OhYFLG8mAyVzHT7
3cWIB/O+ojnFyJGSy84pRneCWBt8WR+T5V+dAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUy7I6mR0Av9CJvQS+apQU0Ds21M4wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy95N0k2bVIwQXY5Q0p2
UVMtYXBRVTBEczIxTTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZwVkMA0GCSqGSIb3DQEBCwUAA4IBAQA+3ibD6pR+kJ4xjbYHPOPkH03s05L1
rBoTOiJem03fJ3Z/ev+a65/wBW5MACTPPVkQiqQI/99DD45J8VFXuKodhH3m0ueU
Qfc99Hp9pxJz6rQzXWSS/7QxtUGCrRW77Z9ofEnzLfG3bbpZSsxEGn2U8kN6Haxo
GlzwjM/5Ur4POchhxFIBjdWegh9/p97VIjkZawA4MR9lczZI+XXh7FiyrxAdBC6q
Zu02aCxpEKHvJa1Al6sCJZ6JFJOK3bcnSoPfQc00/stbwLINi2gyaR2YMe6WGZ0q
PDWQZXnUKdPTj/JCLdOQSQV9xvaYR+lDf7uD2sU5HosLa0V+mwlExOvR
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org