Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1HbSfqSmhAKqKtxSl11ARveisQo.roa
File: 1HbSfqSmhAKqKtxSl11ARveisQo.roa (raw, json)
Hash identifier: F8WHYQrFgKXobLTCpjeyeGoTRfmUHeoBnOfEAQe03Qs=
Subject key identifier: D4:76:D2:7E:A4:A6:84:02:AA:2A:DC:52:97:5D:40:46:F7:A2:B1:0A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C9D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1HbSfqSmhAKqKtxSl11ARveisQo.roa
Signing time: Sun 07 Feb 2021 11:44:13 +0000
ROA not before: Sun 07 Feb 2021 11:44:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 106.107.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3229 (0xc9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:44:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D476D27EA4A68402AA2ADC52975D4046F7A2B10A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:25:06:33:83:b8:98:06:8c:f0:d9:98:1b:
53:d3:d7:3d:f2:8c:a8:fd:9c:50:d1:25:77:30:c4:
79:45:65:b4:f7:66:44:98:a3:8f:1c:0d:22:5e:49:
ac:5a:be:2e:2e:72:1c:4d:8e:3a:5b:bb:61:be:cd:
7b:80:b3:83:76:69:99:8d:f4:cd:17:a0:f9:2d:d3:
e5:e5:5d:ec:70:12:0d:78:ee:5b:28:1d:34:8a:f5:
f2:6e:95:98:55:39:83:27:e6:74:6a:9a:5a:d8:a0:
b9:bd:79:04:79:f5:ad:e3:cf:07:43:67:7f:18:f3:
77:60:51:2a:34:f6:e7:5b:cd:60:a2:02:c4:d0:54:
f1:65:78:b5:0c:b4:57:c2:3c:90:ed:ce:26:73:14:
81:31:fa:2b:18:10:91:de:a4:e8:a7:b1:94:fe:30:
16:76:6e:1e:a4:56:ee:73:07:7c:1a:09:a3:38:1e:
73:43:41:bf:27:3f:22:91:b9:31:5f:a9:42:e1:ce:
8c:2e:2a:13:ef:25:78:ec:f9:b7:ee:9f:bd:61:0b:
40:da:8a:bb:31:e9:33:f3:f3:ea:42:bd:a7:df:71:
92:5c:dd:d6:5a:40:e3:e1:29:d9:6d:ad:9f:f5:40:
ff:dd:f1:9e:26:62:d4:58:f9:38:85:9e:57:ba:49:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:76:D2:7E:A4:A6:84:02:AA:2A:DC:52:97:5D:40:46:F7:A2:B1:0A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1HbSfqSmhAKqKtxSl11ARveisQo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.175.0/24
Signature Algorithm: sha256WithRSAEncryption
20:54:94:17:7f:ea:b9:df:44:7e:39:4f:6c:7e:b7:e5:c4:a9:
0e:00:64:eb:44:c7:e4:b5:0c:63:1e:a5:fa:9e:56:58:36:89:
09:e5:e9:0b:ee:04:c3:5b:c0:d2:ae:fe:6a:25:30:53:b1:ac:
c6:8b:09:86:38:f2:ee:42:f9:16:d2:d7:25:db:51:5a:c9:76:
a4:0c:79:8c:40:6f:6a:fd:aa:2d:c7:03:2b:94:8e:69:c6:7c:
53:dc:a4:8c:ce:56:ef:a6:f2:24:2c:d5:a3:06:d0:35:29:8d:
c2:f0:b1:4c:23:18:2a:66:95:1e:8d:6e:59:d2:2e:f2:75:d8:
55:07:22:d4:62:30:de:f4:b7:ca:8b:9b:80:f6:48:68:9b:5d:
33:ce:39:79:50:88:3e:d4:3a:af:30:83:22:f6:4e:62:b1:ad:
7b:48:aa:44:81:66:7e:99:f9:9b:07:3a:f0:c2:e4:af:7b:c9:
3e:cd:35:b5:7d:32:f4:d9:b3:72:dc:9b:f7:6c:68:89:1a:d0:
40:15:80:53:d9:e0:bd:c3:ef:ca:01:78:55:fe:1b:6b:44:20:
98:a9:2b:a2:1e:d1:91:ba:e0:e7:18:35:13:4f:f7:cf:3b:4f:
b0:a4:b3:fb:aa:ff:3a:ab:c8:35:01:70:4a:f8:69:64:c5:f2:
1a:36:72:77
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcx
MTQ0MTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQ0NzZEMjdFQTRBNjg0
MDJBQTJBREM1Mjk3NUQ0MDQ2RjdBMkIxMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCToSUGM4O4mAaM8NmYG1PT1z3yjKj9nFDRJXcwxHlFZbT3ZkSY
o48cDSJeSaxavi4uchxNjjpbu2G+zXuAs4N2aZmN9M0XoPkt0+XlXexwEg147lso
HTSK9fJulZhVOYMn5nRqmlrYoLm9eQR59a3jzwdDZ38Y83dgUSo09udbzWCiAsTQ
VPFleLUMtFfCPJDtziZzFIEx+isYEJHepOinsZT+MBZ2bh6kVu5zB3waCaM4HnND
Qb8nPyKRuTFfqULhzowuKhPvJXjs+bfun71hC0Dairsx6TPz8+pCvaffcZJc3dZa
QOPhKdltrZ/1QP/d8Z4mYtRY+TiFnle6SZrbAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU1HbSfqSmhAKqKtxSl11ARveisQowHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMUhiU2ZxU21oQUtxS3R4U2wxMUFS
dmVpc1FvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGprrzAN
BgkqhkiG9w0BAQsFAAOCAQEAIFSUF3/qud9EfjlPbH635cSpDgBk60TH5LUMYx6l
+p5WWDaJCeXpC+4Ew1vA0q7+aiUwU7GsxosJhjjy7kL5FtLXJdtRWsl2pAx5jEBv
av2qLccDK5SOacZ8U9ykjM5W76byJCzVowbQNSmNwvCxTCMYKmaVHo1uWdIu8nXY
VQci1GIw3vS3youbgPZIaJtdM845eVCIPtQ6rzCDIvZOYrGte0iqRIFmfpn5mwc6
8MLkr3vJPs01tX0y9Nmzctyb92xoiRrQQBWAU9ngvcPvygF4Vf4ba0QgmKkroh7R
kbrg5xg1E0/3zztPsKSz+6r/OqvINQFwSvhpZMXyGjZydw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:27:56 2025 by rpki-client