Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/WeBIlcdCsW5DZu-QVM2EIB_42NU.roa
File: WeBIlcdCsW5DZu-QVM2EIB_42NU.roa (raw, json)
Hash identifier: huhVZx1ksTvq9OsheolOoPg15tYdV+H8kbtuRryacs0=
Subject key identifier: 59:E0:48:95:C7:42:B1:6E:43:66:EF:90:54:CD:84:20:1F:F8:D8:D5
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 08F2
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/WeBIlcdCsW5DZu-QVM2EIB_42NU.roa
Signing time: Sun 07 Feb 2021 11:37:09 +0000
ROA not before: Sun 07 Feb 2021 11:37:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24158
IP address blocks: 123.99.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2290 (0x8f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Feb 7 11:37:09 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=59E04895C742B16E4366EF9054CD84201FF8D8D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:4d:33:74:78:ab:4b:ef:01:49:b4:81:38:
ce:42:50:26:9e:c6:b1:e1:95:06:f7:c0:56:3e:22:
3c:a2:c8:da:f5:95:37:38:b4:0d:47:1c:f6:27:be:
b9:e1:90:ea:39:70:72:74:92:78:51:a4:50:ff:a5:
28:27:ff:04:c7:2c:fa:17:ed:11:f6:20:72:04:d6:
58:2f:b3:08:94:9e:ed:00:dc:7e:bd:ee:89:49:05:
eb:16:4c:a2:df:49:c1:08:40:28:4d:6d:32:f0:71:
54:15:b0:6e:82:b9:22:2d:11:d1:10:8a:66:76:1d:
f8:0d:54:cc:0b:a9:8a:9d:41:cc:50:f4:3b:8a:8c:
e0:1f:e9:b0:da:a4:1f:27:7d:43:e1:d2:ff:21:95:
97:2b:51:d4:37:16:3a:22:30:12:f3:a2:7f:90:5e:
0e:dd:07:db:e4:3e:5f:e5:16:f1:bf:09:db:1b:94:
ae:bd:e7:9c:eb:a4:ce:8b:fb:25:74:37:f0:e6:05:
70:1e:4b:25:76:ab:98:10:7d:cf:ca:4a:a7:f1:2f:
2b:91:49:95:ab:c0:35:fb:da:ac:4a:3f:0b:96:d4:
70:26:34:00:9f:f9:e1:55:45:28:ce:26:d4:80:c6:
60:99:5f:a0:8c:4c:24:4c:dc:98:45:05:8d:74:19:
ec:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E0:48:95:C7:42:B1:6E:43:66:EF:90:54:CD:84:20:1F:F8:D8:D5
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/WeBIlcdCsW5DZu-QVM2EIB_42NU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.99.0.0/19
Signature Algorithm: sha256WithRSAEncryption
16:b6:2e:7b:0b:bb:85:6a:4b:52:e4:d2:e1:73:85:a7:e6:07:
32:9a:1b:83:9a:57:83:e6:33:30:58:0e:89:5c:be:42:55:3c:
3e:5a:b0:82:ce:87:ef:d0:64:e5:71:94:c3:54:a8:24:ed:e5:
76:24:0f:08:77:b5:50:94:a5:1f:ac:17:9d:78:a6:b3:14:9b:
91:12:b8:7a:35:9b:f1:ac:3e:4c:21:63:ed:d7:5f:91:51:37:
4d:8e:9e:29:1b:6c:53:f8:e4:0c:cc:eb:38:3c:48:c1:ee:cd:
91:80:16:ec:d0:45:41:4e:48:d8:c5:14:f4:86:c9:97:7e:6e:
1e:64:85:31:f8:6d:1f:23:23:31:2b:6c:a3:76:39:e0:b3:3b:
ba:fd:20:5c:8a:d2:2f:78:07:9a:b6:25:43:12:7f:f0:bd:bc:
db:5b:76:6c:94:5e:8d:94:ab:47:ff:9a:f7:70:b6:0e:10:1f:
54:87:77:9e:79:a5:2b:1c:8a:e4:77:82:80:81:57:c2:c9:48:
5a:fe:80:48:25:86:f6:10:20:0e:b7:a8:6b:93:e1:06:a4:0b:
8e:00:d8:32:e8:4e:2b:d0:c8:ea:06:90:2b:25:e0:07:7f:d0:
34:1c:7e:5c:50:1e:69:3d:a7:df:ab:77:07:77:a8:07:8a:98:
59:68:28:2c
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yMTAyMDcx
MTM3MDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU5RTA0ODk1Qzc0MkIx
NkU0MzY2RUY5MDU0Q0Q4NDIwMUZGOEQ4RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCg1E0zdHirS+8BSbSBOM5CUCaexrHhlQb3wFY+IjyiyNr1lTc4
tA1HHPYnvrnhkOo5cHJ0knhRpFD/pSgn/wTHLPoX7RH2IHIE1lgvswiUnu0A3H69
7olJBesWTKLfScEIQChNbTLwcVQVsG6CuSItEdEQimZ2HfgNVMwLqYqdQcxQ9DuK
jOAf6bDapB8nfUPh0v8hlZcrUdQ3FjoiMBLzon+QXg7dB9vkPl/lFvG/CdsblK69
55zrpM6L+yV0N/DmBXAeSyV2q5gQfc/KSqfxLyuRSZWrwDX72qxKPwuW1HAmNACf
+eFVRSjOJtSAxmCZX6CMTCRM3JhFBY10GezhAgMBAAGjggH6MIIB9jAdBgNVHQ4E
FgQUWeBIlcdCsW5DZu+QVM2EIB/42NUwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL1dlQkls
Y2RDc1c1RFp1LVFWTTJFSUJfNDJOVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAV7YwAwDQYJKoZIhvcNAQELBQADggEBABa2LnsLu4VqS1Lk0uFz
hafmBzKaG4OaV4PmMzBYDolcvkJVPD5asILOh+/QZOVxlMNUqCTt5XYkDwh3tVCU
pR+sF514prMUm5ESuHo1m/GsPkwhY+3XX5FRN02OnikbbFP45AzM6zg8SMHuzZGA
FuzQRUFOSNjFFPSGyZd+bh5khTH4bR8jIzErbKN2OeCzO7r9IFyK0i94B5q2JUMS
f/C9vNtbdmyUXo2Uq0f/mvdwtg4QH1SHd555pSsciuR3goCBV8LJSFr+gEglhvYQ
IA63qGuT4QakC44A2DLoTivQyOoGkCsl4Ad/0DQcflxQHmk9p9+rdwd3qAeKmFlo
KCw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org