Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/OEmV4GUGKkC8OqeR9owdlvArDDo.roa
File: OEmV4GUGKkC8OqeR9owdlvArDDo.roa (raw, json)
Hash identifier: C0j8PtyoIpHVYmz9OM9Jx2O8DYcFHSOjegB8yNple98=
Subject key identifier: 38:49:95:E0:65:06:2A:40:BC:3A:A7:91:F6:8C:1D:96:F0:2B:0C:3A
Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial: 08CB
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/OEmV4GUGKkC8OqeR9owdlvArDDo.roa
Signing time: Sun 07 Feb 2021 12:43:15 +0000
ROA not before: Sun 07 Feb 2021 12:43:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131611
IP address blocks: 121.50.184.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251 (0x8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
Validity
Not Before: Feb 7 12:43:15 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=384995E065062A40BC3AA791F68C1D96F02B0C3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c5:76:64:6c:6e:ea:f9:d4:66:b5:6f:6a:39:
81:c8:66:b6:f5:b5:ce:a0:d8:86:84:0e:1c:92:f9:
3f:c7:23:de:97:d8:91:cb:da:e4:11:8b:b8:ce:62:
15:9a:05:01:4f:67:fc:81:e0:96:ee:97:29:3c:63:
16:97:80:f1:cb:f9:df:39:82:88:98:6d:93:b7:84:
ad:6b:0f:c9:7e:db:f5:92:7e:c9:08:39:bb:a3:b3:
8d:b6:93:9d:58:7f:96:ba:b1:ff:56:2b:19:ea:ed:
6f:55:ed:9d:a0:39:f3:ba:45:3a:03:fc:1c:4c:66:
9e:8c:a5:03:db:5a:78:1f:00:4e:5a:6e:40:bb:83:
97:88:c4:13:f9:dd:65:f0:a7:4d:23:f2:c8:99:29:
c8:ba:dd:46:3c:3d:fe:43:12:ea:a5:4b:b6:af:af:
83:f4:9f:ac:30:06:f1:11:a3:99:37:f6:6d:04:57:
55:0b:fb:00:a8:13:8d:1b:b5:2e:bb:77:c3:d1:be:
79:6c:28:98:a3:e7:f7:37:d3:87:b9:1e:e5:c8:09:
8f:42:39:9a:aa:4e:b3:d7:ba:38:c9:c7:23:1d:3a:
08:83:ed:bc:1b:8d:f9:4b:e5:4f:cd:47:7a:69:ab:
24:da:8e:93:d7:31:58:3b:e2:a1:5f:91:90:9c:4d:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:95:E0:65:06:2A:40:BC:3A:A7:91:F6:8C:1D:96:F0:2B:0C:3A
X509v3 Authority Key Identifier:
keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/OEmV4GUGKkC8OqeR9owdlvArDDo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.184.0/22
Signature Algorithm: sha256WithRSAEncryption
69:ff:28:73:1b:e6:5a:c7:ee:f5:44:62:54:0d:79:7e:b3:a7:
dd:c4:44:5c:b7:3d:df:76:10:99:b3:2e:af:be:82:c9:07:b8:
5b:41:24:1a:4c:bd:03:41:41:c6:b0:23:9b:b1:bb:16:d0:c6:
6a:48:d1:46:aa:f3:1b:ee:d2:0a:a4:5f:56:b6:32:71:56:f8:
da:db:ad:0e:10:93:29:b6:34:6a:dd:fb:ab:66:98:0d:de:bc:
a0:49:4e:bb:ba:2a:04:12:cf:cc:ef:cd:45:13:9c:14:98:90:
8f:a0:3c:3f:00:15:af:22:dd:ab:71:98:eb:b7:de:10:21:45:
75:36:56:4e:f1:49:c9:d9:10:a4:b9:0b:52:c5:41:95:55:ac:
56:5e:73:6f:2f:68:8e:32:d9:26:8d:f2:bb:e5:d9:89:f5:19:
cc:61:30:1e:62:18:cc:57:4d:ff:e8:73:ba:1e:c8:be:d4:76:
bf:1f:cc:fe:ab:5e:aa:4e:af:24:9a:60:56:75:4d:bb:04:ed:
ca:fb:9d:d0:0e:ab:22:22:1b:b9:c9:79:fb:be:90:51:ac:ff:
e2:2a:22:3f:00:5e:29:ce:0e:57:27:4e:bf:87:38:e1:92:3d:
57:c9:ea:e0:61:73:9f:29:1e:9c:a4:0b:66:88:81:e8:69:86:
25:1c:3c:e6
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICCMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1
NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yMTAyMDcx
MjQzMTVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM4NDk5NUUwNjUwNjJB
NDBCQzNBQTc5MUY2OEMxRDk2RjAyQjBDM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDyxXZkbG7q+dRmtW9qOYHIZrb1tc6g2IaEDhyS+T/HI96X2JHL
2uQRi7jOYhWaBQFPZ/yB4Jbulyk8YxaXgPHL+d85goiYbZO3hK1rD8l+2/WSfskI
Obujs422k51Yf5a6sf9WKxnq7W9V7Z2gOfO6RToD/BxMZp6MpQPbWngfAE5abkC7
g5eIxBP53WXwp00j8siZKci63UY8Pf5DEuqlS7avr4P0n6wwBvERo5k39m0EV1UL
+wCoE40btS67d8PRvnlsKJij5/c304e5HuXICY9COZqqTrPXujjJxyMdOgiD7bwb
jflL5U/NR3ppqyTajpPXMVg74qFfkZCcTUvVAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUOEmV4GUGKkC8OqeR9owdlvArDDowHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU
LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t
Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4vT0VtVjRHVUdL
a0M4T3FlUjlvd2RsdkFyRERvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAnkyuDANBgkqhkiG9w0BAQsFAAOCAQEAaf8ocxvmWsfu9URiVA15frOn
3cREXLc933YQmbMur76CyQe4W0EkGky9A0FBxrAjm7G7FtDGakjRRqrzG+7SCqRf
VrYycVb42tutDhCTKbY0at37q2aYDd68oElOu7oqBBLPzO/NRROcFJiQj6A8PwAV
ryLdq3GY67feECFFdTZWTvFJydkQpLkLUsVBlVWsVl5zby9ojjLZJo3yu+XZifUZ
zGEwHmIYzFdN/+hzuh7IvtR2vx/M/qteqk6vJJpgVnVNuwTtyvud0A6rIiIbucl5
+76QUaz/4ioiPwBeKc4OVydOv4c44ZI9V8nq4GFznykenKQLZoiB6GmGJRw85g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:32 2025 by rpki-client