Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1eNxZ3dHPGH64kkR66MEE4sPmV0.roa
File: 1eNxZ3dHPGH64kkR66MEE4sPmV0.roa (raw, json)
Hash identifier: NBp41QfTQ4X4B+sp1JN015pqxTJgWtZ6dMn8bF0dyNo=
Subject key identifier: D5:E3:71:67:77:47:3C:61:FA:E2:49:11:EB:A3:04:13:8B:0F:99:5D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0867
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1eNxZ3dHPGH64kkR66MEE4sPmV0.roa
Signing time: Tue 29 Sep 2020 09:52:00 +0000
ROA not before: Tue 29 Sep 2020 09:52:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 2001:cd8::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2151 (0x867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:00 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D5E3716777473C61FAE24911EBA304138B0F995D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:68:c1:3c:ae:86:0d:6a:f0:fd:9a:44:32:
18:f0:ff:ae:d4:10:31:50:ed:84:11:a6:1f:5a:44:
6b:1c:1b:4c:8f:f1:14:fd:1a:d1:7e:26:34:91:a3:
61:54:44:06:58:f8:5f:e3:98:28:79:65:c3:72:38:
07:c1:34:db:24:41:cf:97:2c:96:27:44:96:89:97:
e7:3d:96:7a:69:2a:aa:7e:c1:70:ca:e5:0d:62:3c:
20:89:c2:0f:27:34:38:84:c5:27:65:ab:5e:cc:62:
1d:7a:c5:57:c2:bd:fe:e8:f7:36:2d:07:b9:6b:4d:
89:40:1e:df:4e:98:da:c8:34:9e:64:0d:ad:43:92:
ae:39:04:18:c0:a0:a3:00:0e:2a:b2:c7:a5:8f:ec:
85:a0:6c:eb:6c:37:03:04:8a:cb:91:ce:2a:ac:0e:
c4:18:ea:0c:b6:af:a2:f3:9a:28:33:ea:0d:44:97:
63:3c:1e:ae:9e:82:9a:6d:c3:19:78:20:6e:44:50:
79:cd:24:45:11:a9:d7:4b:1f:14:55:24:45:7a:69:
4c:59:34:a2:ca:e3:97:95:f2:e4:7b:c1:86:61:1a:
9e:2f:e6:e2:77:be:39:1a:5b:f5:83:c1:fa:0b:d9:
f6:f5:82:63:fe:e4:26:b0:e7:aa:51:a6:11:bd:03:
d3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E3:71:67:77:47:3C:61:FA:E2:49:11:EB:A3:04:13:8B:0F:99:5D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1eNxZ3dHPGH64kkR66MEE4sPmV0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:cd8::/32
Signature Algorithm: sha256WithRSAEncryption
49:65:83:39:e6:6b:4b:30:c2:79:8a:83:4e:df:3a:78:38:b8:
33:19:e3:42:29:1d:8f:2a:e0:a0:83:97:96:6c:9f:06:cc:69:
e4:21:4d:cf:de:01:bf:1a:9c:55:90:6b:2d:56:42:64:b6:e2:
96:e6:a8:c8:85:ac:f9:39:97:68:45:a3:06:ba:92:a3:d6:88:
e3:77:b3:e3:a3:4d:13:4e:2f:18:c0:da:44:71:e3:a6:4c:15:
0f:67:b7:33:2d:a0:2f:b6:1d:a4:f3:62:4d:1b:2a:8a:3e:8b:
10:8f:dd:9c:8c:78:a3:d2:ea:4b:53:3e:6d:08:af:e0:d3:8d:
a0:cd:02:d9:5d:5f:c1:cc:c6:04:dd:54:3e:9b:d4:6a:f3:44:
98:06:88:65:59:da:c5:91:bc:37:1b:e7:3a:84:0a:b1:72:c2:
d6:61:0f:5b:40:87:28:52:34:95:66:b3:23:79:6a:1c:d5:35:
3e:e0:30:b1:a0:af:70:4a:f7:0a:38:9d:57:1d:c5:f5:bb:30:
86:94:18:d6:a7:4f:43:42:95:40:f1:1b:05:f0:3c:44:36:d8:
90:2a:f8:64:46:9c:6b:c1:d9:69:a6:6e:f9:e4:73:4d:93:a6:
3e:ee:25:80:05:54:c3:36:82:1e:db:64:4d:5b:39:5f:f2:8b:
bc:fb:1d:41
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICCGcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyMDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQ1RTM3MTY3Nzc0NzND
NjFGQUUyNDkxMUVCQTMwNDEzOEIwRjk5NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDD9WjBPK6GDWrw/ZpEMhjw/67UEDFQ7YQRph9aRGscG0yP8RT9
GtF+JjSRo2FURAZY+F/jmCh5ZcNyOAfBNNskQc+XLJYnRJaJl+c9lnppKqp+wXDK
5Q1iPCCJwg8nNDiExSdlq17MYh16xVfCvf7o9zYtB7lrTYlAHt9OmNrINJ5kDa1D
kq45BBjAoKMADiqyx6WP7IWgbOtsNwMEisuRziqsDsQY6gy2r6Lzmigz6g1El2M8
Hq6egpptwxl4IG5EUHnNJEURqddLHxRVJEV6aUxZNKLK45eV8uR7wYZhGp4v5uJ3
vjkaW/WDwfoL2fb1gmP+5Caw56pRphG9A9NHAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQU1eNxZ3dHPGH64kkR66MEE4sPmV0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMWVOeFozZEhQR0g2NGtrUjY2TUVF
NHNQbVYwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACABDNgw
DQYJKoZIhvcNAQELBQADggEBAEllgznma0swwnmKg07fOng4uDMZ40IpHY8q4KCD
l5ZsnwbMaeQhTc/eAb8anFWQay1WQmS24pbmqMiFrPk5l2hFowa6kqPWiON3s+Oj
TRNOLxjA2kRx46ZMFQ9ntzMtoC+2HaTzYk0bKoo+ixCP3ZyMeKPS6ktTPm0Ir+DT
jaDNAtldX8HMxgTdVD6b1GrzRJgGiGVZ2sWRvDcb5zqECrFywtZhD1tAhyhSNJVm
syN5ahzVNT7gMLGgr3BK9wo4nVcdxfW7MIaUGNanT0NClUDxGwXwPEQ22JAq+GRG
nGvB2Wmmbvnkc02Tpj7uJYAFVMM2gh7bZE1bOV/yi7z7HUE=
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:21:59 2025 by rpki-client