Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/3k14MLtpBUiqiwlc6QZ-cfOyRo4.roa
File: 3k14MLtpBUiqiwlc6QZ-cfOyRo4.roa (raw, json)
Hash identifier: 0EEuxB/rfEGy97IRmABkPY9ld04flGkdRBFPUEM3EHQ=
Subject key identifier: DE:4D:78:30:BB:69:05:48:AA:8B:09:5C:E9:06:7E:71:F3:B2:46:8E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/3k14MLtpBUiqiwlc6QZ-cfOyRo4.roa
Signing time: Thu 15 Sep 2022 02:43:33 +0000
ROA not before: Thu 15 Sep 2022 02:43:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 218.210.116.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DE4D7830BB690548AA8B095CE9067E71F3B2468E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:1b:20:79:6c:60:22:b9:75:95:78:c6:bf:
d7:89:83:45:96:91:94:c7:63:01:cf:89:9c:52:41:
e1:b8:0a:65:b3:d9:56:c8:27:34:04:42:a6:60:17:
50:06:14:d5:dc:74:39:45:61:07:7a:94:37:91:73:
ab:28:ba:c6:3d:2c:8d:e2:6d:0d:68:d2:e9:43:b1:
99:d5:a9:1c:40:1e:50:11:af:f3:67:68:46:91:1a:
24:ac:65:e7:c6:06:16:04:a7:9e:10:ce:1b:2d:bc:
51:6e:42:9e:b9:45:ec:5a:0b:89:74:45:ec:61:21:
b5:fe:93:fb:f5:43:ae:c9:38:33:4d:c2:77:cb:54:
77:5e:49:1d:6b:ec:44:8e:28:a9:f2:39:9c:5e:2a:
77:6c:3e:c9:f0:13:39:89:47:c4:d0:dc:7c:40:ef:
b0:54:ed:e4:74:65:53:01:d4:d1:5d:c5:65:1e:8c:
a7:ac:ed:98:5f:28:8d:ee:54:58:f3:cc:da:df:f8:
e0:7f:be:83:ec:c5:e0:26:89:c6:e4:dd:5b:2f:05:
58:13:c2:50:98:9b:b8:df:b8:c0:85:62:8e:63:06:
e3:9a:71:c8:f7:6e:94:98:12:6b:dd:49:b8:33:0a:
11:78:20:b9:62:67:34:87:d5:e2:2f:e2:04:01:bb:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4D:78:30:BB:69:05:48:AA:8B:09:5C:E9:06:7E:71:F3:B2:46:8E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/3k14MLtpBUiqiwlc6QZ-cfOyRo4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.116.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:62:51:fd:62:07:86:1f:5d:be:9f:29:51:47:7f:b2:0c:31:
49:95:cb:06:a4:e5:07:16:a2:60:18:0d:ef:e9:50:ef:67:8e:
86:95:6b:7c:44:95:7c:a5:2e:b5:ef:d0:2d:e8:8f:a7:0a:20:
01:00:1d:fd:fc:dc:e1:72:32:69:78:64:55:df:95:00:e7:d0:
11:d1:ac:a0:20:fa:7e:4a:ae:c8:fc:b3:ee:05:a9:e9:83:a8:
39:ed:8e:4f:fa:07:e6:10:cb:fb:6c:a5:01:22:ed:20:e8:fe:
e1:45:c4:9e:76:00:d5:05:58:0b:b1:aa:93:11:6c:ef:8d:db:
4d:c2:1c:37:0b:e6:e6:a6:33:a8:e4:ae:55:29:22:ce:ff:db:
59:b0:77:b9:b9:63:14:00:97:3d:ab:89:3b:f1:72:d8:a5:59:
5b:8f:2c:79:8a:d2:fc:17:ea:11:b4:60:46:5c:65:65:c0:80:
66:bd:a6:2f:3e:aa:1e:2d:7b:6e:c7:01:4c:7f:38:89:9e:9a:
2c:2f:77:d2:f3:73:f2:94:5e:53:8c:bb:7e:4b:75:20:dc:c4:
3b:06:66:bb:6c:43:04:77:88:c9:50:0a:2e:b3:89:d8:d2:6b:
a8:e6:b0:77:73:4e:2d:b8:d8:f5:33:8a:03:54:43:98:9e:2a:
79:c7:19:d0
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMzNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKERFNEQ3ODMwQkI2OTA1
NDhBQThCMDk1Q0U5MDY3RTcxRjNCMjQ2OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJYhsgeWxgIrl1lXjGv9eJg0WWkZTHYwHPiZxSQeG4CmWz2VbI
JzQEQqZgF1AGFNXcdDlFYQd6lDeRc6sousY9LI3ibQ1o0ulDsZnVqRxAHlARr/Nn
aEaRGiSsZefGBhYEp54QzhstvFFuQp65RexaC4l0RexhIbX+k/v1Q67JODNNwnfL
VHdeSR1r7ESOKKnyOZxeKndsPsnwEzmJR8TQ3HxA77BU7eR0ZVMB1NFdxWUejKes
7ZhfKI3uVFjzzNrf+OB/voPsxeAmicbk3VsvBVgTwlCYm7jfuMCFYo5jBuOaccj3
bpSYEmvdSbgzChF4ILliZzSH1eIv4gQBu1iTAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU3k14MLtpBUiqiwlc6QZ+cfOyRo4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvM2sxNE1MdHBCVWlxaXdsYzZRWi1j
Zk95Um80LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdrSdDAN
BgkqhkiG9w0BAQsFAAOCAQEAXmJR/WIHhh9dvp8pUUd/sgwxSZXLBqTlBxaiYBgN
7+lQ72eOhpVrfESVfKUute/QLeiPpwogAQAd/fzc4XIyaXhkVd+VAOfQEdGsoCD6
fkquyPyz7gWp6YOoOe2OT/oH5hDL+2ylASLtIOj+4UXEnnYA1QVYC7GqkxFs743b
TcIcNwvm5qYzqOSuVSkizv/bWbB3ubljFACXPauJO/Fy2KVZW48seYrS/BfqEbRg
RlxlZcCAZr2mLz6qHi17bscBTH84iZ6aLC930vNz8pReU4y7fkt1INzEOwZmu2xD
BHeIyVAKLrOJ2NJrqOawd3NOLbjY9TOKA1RDmJ4qeccZ0A==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:23:05 2025 by rpki-client