Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ycdNZnJqwMnwdXSv25AF4EeeVAk.roa
File: ycdNZnJqwMnwdXSv25AF4EeeVAk.roa (raw, json)
Hash identifier: A/4N+TquRP0lX3qj2J1ChF+vwoIc2QeVWYvUkW8hNvo=
Subject key identifier: C9:C7:4D:66:72:6A:C0:C9:F0:75:74:AF:DB:90:05:E0:47:9E:54:09
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0CEB
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ycdNZnJqwMnwdXSv25AF4EeeVAk.roa
Signing time: Thu 21 Apr 2022 00:52:31 +0000
ROA not before: Thu 21 Apr 2022 00:52:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 63199
IP address blocks: 150.116.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3307 (0xceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Apr 21 00:52:31 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C9C74D66726AC0C9F07574AFDB9005E0479E5409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:8a:ff:6d:c3:7d:36:25:c5:b4:7e:1f:8b:
fd:60:46:a1:69:ea:c4:70:a7:f9:5a:8b:2c:dc:39:
e7:0f:5b:d4:de:18:19:5b:3f:f9:3f:b3:6d:eb:0b:
15:88:f0:9b:47:99:e6:03:d1:b6:51:96:33:3d:82:
ed:03:4e:a5:58:5f:9a:e6:aa:31:6c:1e:d1:bf:8f:
84:d5:92:a9:fa:33:bf:05:bd:06:fc:c1:67:3b:51:
ac:dc:0f:e0:17:b2:eb:f5:8c:76:0d:29:d8:2c:cf:
29:4a:2d:b4:ce:6e:5e:95:9a:80:6a:f1:9c:39:41:
36:b3:46:99:ee:5b:2e:29:17:2c:10:b7:40:da:7d:
a1:18:1d:27:68:e8:01:1b:09:86:46:c7:30:f6:17:
f4:51:1f:ca:42:90:08:2b:86:0f:64:52:e8:59:d1:
4c:1d:81:7c:fd:7e:e0:2a:88:17:dc:9e:68:dd:f5:
2a:1c:cd:d8:01:83:8c:d1:bc:53:b0:14:3d:6c:d2:
ee:61:f7:2d:4e:bb:4c:ac:91:2a:c7:1f:d2:2b:cc:
fc:2a:55:bf:7f:6b:05:b8:10:68:1e:31:4b:e9:34:
0f:a2:ce:8e:be:1c:28:e7:7b:b5:e9:ca:df:0f:38:
14:6b:ce:09:76:ec:04:30:d4:f5:03:32:8f:31:81:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C7:4D:66:72:6A:C0:C9:F0:75:74:AF:DB:90:05:E0:47:9E:54:09
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ycdNZnJqwMnwdXSv25AF4EeeVAk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.4.0/24
Signature Algorithm: sha256WithRSAEncryption
07:8d:4c:8b:dc:e2:61:8a:35:46:2c:f7:9f:08:45:48:7b:26:
0f:d0:0b:dc:5c:a8:52:45:09:21:fb:38:4e:d7:7b:4d:8b:e7:
56:ef:e3:90:ac:a0:9d:13:b1:b7:0c:cc:1e:a7:e0:34:12:3b:
0a:57:8f:d3:88:63:08:9a:2d:58:e2:91:9b:3b:09:31:41:e9:
ca:e8:78:38:eb:ed:fe:bd:07:b8:01:3e:0e:29:8e:79:c8:62:
24:54:8c:06:f7:27:7a:f6:7f:b4:c9:c7:c9:ed:f9:97:7f:0d:
a4:58:5f:63:3c:97:a0:3b:60:ab:69:30:5b:36:92:9b:42:66:
a1:c6:5b:af:9e:0e:df:ed:9f:84:de:e2:2c:3d:80:7c:56:3d:
56:d6:d2:b1:6a:83:7f:a4:94:ad:b3:01:07:2d:63:d9:ba:e9:
50:a4:5d:a0:a2:04:b2:7b:44:1e:40:c8:39:a2:54:66:c0:39:
a5:32:58:03:fa:43:51:01:0c:6e:55:00:67:26:74:98:c1:43:
70:7d:8c:8f:f8:6f:4a:dd:b2:48:49:82:54:2a:6a:da:ac:1f:
c6:a6:8b:ba:4b:5f:86:66:09:bf:66:a5:2b:12:d5:b0:ba:1f:
0e:a7:d0:dc:1a:15:b9:ad:40:22:b7:ef:21:bd:e3:95:41:91:
fe:b2:fe:95
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMjA0MjEw
MDUyMzFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEM5Qzc0RDY2NzI2QUMw
QzlGMDc1NzRBRkRCOTAwNUUwNDc5RTU0MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCe3or/bcN9NiXFtH4fi/1gRqFp6sRwp/laiyzcOecPW9TeGBlb
P/k/s23rCxWI8JtHmeYD0bZRljM9gu0DTqVYX5rmqjFsHtG/j4TVkqn6M78FvQb8
wWc7UazcD+AXsuv1jHYNKdgszylKLbTObl6VmoBq8Zw5QTazRpnuWy4pFywQt0Da
faEYHSdo6AEbCYZGxzD2F/RRH8pCkAgrhg9kUuhZ0UwdgXz9fuAqiBfcnmjd9Soc
zdgBg4zRvFOwFD1s0u5h9y1Ou0yskSrHH9IrzPwqVb9/awW4EGgeMUvpNA+izo6+
HCjne7Xpyt8POBRrzgl27AQw1PUDMo8xgbl1AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUycdNZnJqwMnwdXSv25AF4EeeVAkwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy95Y2ROWm5KcXdNbndk
WFN2MjVBRjRFZWVWQWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnQEMA0GCSqGSIb3DQEBCwUAA4IBAQAHjUyL3OJhijVGLPefCEVIeyYP0Avc
XKhSRQkh+zhO13tNi+dW7+OQrKCdE7G3DMwep+A0EjsKV4/TiGMImi1Y4pGbOwkx
QenK6Hg46+3+vQe4AT4OKY55yGIkVIwG9yd69n+0ycfJ7fmXfw2kWF9jPJegO2Cr
aTBbNpKbQmahxluvng7f7Z+E3uIsPYB8Vj1W1tKxaoN/pJStswEHLWPZuulQpF2g
ogSye0QeQMg5olRmwDmlMlgD+kNRAQxuVQBnJnSYwUNwfYyP+G9K3bJISYJUKmra
rB/Gpou6S1+GZgm/ZqUrEtWwuh8Op9DcGhW5rUAit+8hveOVQZH+sv6V
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org