Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/mwbdnRFxGjTypiJm87k6N0_fvdQ.roa
File: mwbdnRFxGjTypiJm87k6N0_fvdQ.roa (raw, json)
Hash identifier: 7h+I84tvtdqsInE7E/KgjKy4k42Z8Trh4WAENR+gqLY=
Subject key identifier: 9B:06:DD:9D:11:71:1A:34:F2:A6:22:66:F3:B9:3A:37:4F:DF:BD:D4
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0C6C
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/mwbdnRFxGjTypiJm87k6N0_fvdQ.roa
Signing time: Fri 01 Sep 2023 10:20:41 +0000
ROA not before: Fri 01 Sep 2023 10:20:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18424
IP address blocks: 121.50.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3180 (0xc6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Sep 1 10:20:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9B06DD9D11711A34F2A62266F3B93A374FDFBDD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:59:58:f0:1f:f1:03:f7:55:0d:65:6b:0d:
6d:00:06:db:b9:83:44:20:01:d2:74:bb:1e:10:fb:
9a:82:d8:73:a6:e8:ff:1a:0c:0d:c2:5a:06:ae:40:
bb:d5:ce:a1:07:f7:e3:58:17:9a:c0:76:56:cd:57:
9a:a1:b0:6c:f7:8d:a2:f4:38:a9:c9:94:a5:bd:33:
f1:52:bf:36:b7:c7:5f:20:1c:b8:2d:4b:c8:12:b1:
65:52:2a:ee:1d:ba:b0:a7:9b:7e:19:e9:f2:97:35:
8a:15:f5:98:3d:b4:dd:e1:16:c3:5f:98:1a:50:a5:
76:a0:07:19:c1:1d:fb:99:2b:b9:61:72:20:0b:a1:
43:55:7c:f7:65:01:e3:c5:6a:d5:94:7b:dd:1b:0d:
7b:6f:c9:97:f3:18:43:39:0e:03:82:49:b9:4b:7a:
f4:87:9f:d5:4c:4a:e4:d8:f1:08:09:4b:93:22:f9:
9a:7e:ed:96:4d:f8:03:6c:f3:84:9b:5a:a0:72:39:
0b:2a:90:75:c8:67:3f:d1:18:95:6c:fd:88:db:95:
4c:72:e7:f9:14:d9:bc:93:4a:49:8a:23:28:df:db:
b1:48:24:0e:4c:8b:76:bc:0a:5a:3f:68:aa:cc:cc:
51:19:27:24:72:d8:5f:ce:6c:6b:82:e2:b8:7e:1c:
38:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:06:DD:9D:11:71:1A:34:F2:A6:22:66:F3:B9:3A:37:4F:DF:BD:D4
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/mwbdnRFxGjTypiJm87k6N0_fvdQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.146.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:9e:ee:2c:c3:b6:15:2b:17:49:7e:c4:d7:cb:8b:49:e6:91:
cf:cb:4a:ca:b3:a6:49:75:e1:a5:36:34:bd:86:c4:c4:f5:a1:
68:dc:12:03:dc:eb:84:8c:92:33:ce:79:50:4b:82:83:dc:bc:
05:27:3c:5f:89:75:17:0b:c4:31:59:dd:28:59:da:14:20:89:
56:6a:a9:36:96:5e:b0:d1:19:51:82:d3:c0:0f:85:e1:63:ea:
9e:18:25:1d:0a:12:1e:1b:a2:e9:01:57:64:1e:51:f2:04:ec:
e0:37:45:79:d5:80:ac:81:68:c6:4c:f3:d1:29:47:27:9a:a8:
9f:66:51:18:56:cf:87:fb:82:4c:45:31:69:1a:69:72:0a:bc:
b1:ac:b1:08:12:a3:da:01:d3:bc:7a:74:88:24:6b:2a:4e:70:
80:82:fb:e0:f4:1d:3d:30:10:bf:8a:92:34:0c:dc:ad:20:bd:
3d:26:1c:1f:26:aa:d4:d4:34:2f:32:3f:d4:76:87:d1:b5:91:
9c:cc:35:88:9f:05:17:43:d1:37:3c:1e:0b:72:bc:a8:c6:0f:
4e:2d:fc:97:ac:39:b8:c5:14:2b:15:36:03:b3:97:76:9f:37:
41:e8:25:9c:05:22:1d:ec:96:d9:00:e2:fb:6d:7e:d7:5f:be:
9b:27:ec:dc
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMzA5MDEx
MDIwNDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlCMDZERDlEMTE3MTFB
MzRGMkE2MjI2NkYzQjkzQTM3NEZERkJERDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4WllY8B/xA/dVDWVrDW0ABtu5g0QgAdJ0ux4Q+5qC2HOm6P8a
DA3CWgauQLvVzqEH9+NYF5rAdlbNV5qhsGz3jaL0OKnJlKW9M/FSvza3x18gHLgt
S8gSsWVSKu4durCnm34Z6fKXNYoV9Zg9tN3hFsNfmBpQpXagBxnBHfuZK7lhciAL
oUNVfPdlAePFatWUe90bDXtvyZfzGEM5DgOCSblLevSHn9VMSuTY8QgJS5Mi+Zp+
7ZZN+ANs84SbWqByOQsqkHXIZz/RGJVs/YjblUxy5/kU2byTSkmKIyjf27FIJA5M
i3a8Clo/aKrMzFEZJyRy2F/ObGuC4rh+HDjvAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUmwbdnRFxGjTypiJm87k6N0/fvdQwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL213YmRuUkZ4R2pU
eXBpSm04N2s2TjBfZnZkUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAB5MpIwDQYJKoZIhvcNAQELBQADggEBALOe7izDthUrF0l+xNfLi0nmkc/L
Ssqzpkl14aU2NL2GxMT1oWjcEgPc64SMkjPOeVBLgoPcvAUnPF+JdRcLxDFZ3ShZ
2hQgiVZqqTaWXrDRGVGC08APheFj6p4YJR0KEh4boukBV2QeUfIE7OA3RXnVgKyB
aMZM89EpRyeaqJ9mURhWz4f7gkxFMWkaaXIKvLGssQgSo9oB07x6dIgkaypOcICC
++D0HT0wEL+KkjQM3K0gvT0mHB8mqtTUNC8yP9R2h9G1kZzMNYifBRdD0Tc8Hgty
vKjGD04t/JesObjFFCsVNgOzl3afN0HoJZwFIh3sltkA4vttftdfvpsn7Nw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:58 2025 by rpki-client