Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/54DStnU3XN3S3hzTohtCxXTMIRY.roa
File: 54DStnU3XN3S3hzTohtCxXTMIRY.roa (raw, json)
Hash identifier: wPtM/lGbpl4W8BLdmBZSxigo9C1t0mpOOGEXn+DVtWk=
Subject key identifier: E7:80:D2:B6:75:37:5C:DD:D2:DE:1C:D3:A2:1B:42:C5:74:CC:21:16
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0B6D
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/54DStnU3XN3S3hzTohtCxXTMIRY.roa
Signing time: Wed 29 Sep 2021 02:44:11 +0000
ROA not before: Wed 29 Sep 2021 02:44:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 192.72.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2925 (0xb6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 29 02:44:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E780D2B675375CDDD2DE1CD3A21B42C574CC2116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:01:a7:65:d5:2a:9e:3e:a3:f8:36:e3:18:
42:f2:aa:39:66:7b:b7:8c:51:09:39:f4:ab:5b:34:
0b:af:c8:50:e1:78:f2:93:0e:31:8f:0f:ff:31:da:
0e:4a:34:a0:cc:49:c4:c4:b2:e4:3f:3f:e4:06:38:
01:32:1a:43:7c:05:58:a0:be:f7:5a:84:01:57:50:
66:49:41:9c:2e:25:92:68:2f:d0:55:e5:09:fc:b5:
cc:d2:57:d8:46:c1:49:e7:9d:2e:8b:22:75:29:88:
35:ae:2c:72:13:8b:ff:00:dc:e8:27:53:0d:32:66:
f3:c2:3a:8f:8b:60:93:5b:d4:bf:6c:90:84:91:d2:
03:0b:d7:f1:c1:66:a5:45:d2:3a:87:bf:1e:b6:a7:
5c:d3:78:e4:37:f2:b4:2f:23:db:48:48:9e:e9:8d:
d5:d5:ee:1a:1f:48:e2:b4:1a:df:71:f5:3f:a3:da:
29:79:9e:2f:91:eb:e9:28:43:af:ee:b4:67:7c:eb:
e0:d2:f8:f7:5f:09:97:9f:3e:e7:e9:27:34:8a:7d:
b8:41:8c:40:72:41:88:e7:39:d8:88:77:64:19:ff:
f7:c7:9c:c9:9b:6b:9e:9e:77:62:62:63:95:3e:17:
2c:4f:d1:5f:23:d4:74:72:19:15:58:b0:e5:07:b9:
72:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:80:D2:B6:75:37:5C:DD:D2:DE:1C:D3:A2:1B:42:C5:74:CC:21:16
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/54DStnU3XN3S3hzTohtCxXTMIRY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.64.0/18
Signature Algorithm: sha256WithRSAEncryption
66:bd:6c:8a:e6:77:d8:b1:2a:57:fb:59:df:65:82:19:8b:ad:
a3:40:c6:19:ee:14:f9:b8:d8:d1:96:2b:8e:c9:8a:9a:ac:b8:
23:82:8a:38:4a:fb:ff:17:2a:de:40:6e:fa:c9:6e:e7:aa:d1:
84:1d:5c:ec:01:11:38:25:ad:05:4d:c9:1c:c8:45:24:ba:6f:
e4:25:b1:8b:06:18:a5:f0:04:39:05:17:3e:b5:48:58:79:83:
4b:4a:e6:2a:1c:fe:bc:fa:2d:a8:8e:d9:fa:9d:30:85:e6:85:
6a:f8:94:52:0e:6a:d1:5c:26:e5:b6:90:d0:c0:6e:02:d3:ca:
0e:5e:44:c1:34:8a:86:67:6f:04:c5:ef:06:25:f7:a2:19:18:
88:97:6d:cd:29:26:64:ea:ae:a8:ca:78:97:76:81:0f:57:84:
d9:85:13:d0:f4:c6:ad:14:7c:80:86:a7:1d:69:e4:25:70:ab:
06:bd:41:05:8d:89:f6:a9:15:95:80:be:09:1a:6f:f6:1e:ff:
76:f6:5e:7f:59:92:67:9f:62:6b:e4:6e:4e:36:d6:08:64:42:
ca:75:e8:c4:45:a1:dd:92:5b:70:00:38:31:64:fe:ce:b9:81:
db:1e:a6:5d:93:7e:f7:d2:cd:c9:01:3e:e0:d9:1c:53:e8:c5:
be:c7:ba:dc
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICC20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB
NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMTA5Mjkw
MjQ0MTFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEU3ODBEMkI2NzUzNzVD
REREMkRFMUNEM0EyMUI0MkM1NzRDQzIxMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJIAGnZdUqnj6j+DbjGELyqjlme7eMUQk59KtbNAuvyFDhePKT
DjGPD/8x2g5KNKDMScTEsuQ/P+QGOAEyGkN8BVigvvdahAFXUGZJQZwuJZJoL9BV
5Qn8tczSV9hGwUnnnS6LInUpiDWuLHITi/8A3OgnUw0yZvPCOo+LYJNb1L9skISR
0gML1/HBZqVF0jqHvx62p1zTeOQ38rQvI9tISJ7pjdXV7hofSOK0Gt9x9T+j2il5
ni+R6+koQ6/utGd86+DS+PdfCZefPufpJzSKfbhBjEByQYjnOdiId2QZ//fHnMmb
a56ed2JiY5U+FyxP0V8j1HRyGRVYsOUHuXL3AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU54DStnU3XN3S3hzTohtCxXTMIRYwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC
1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90
S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNTREU3RuVTNYTjNTM2h6VG9odEN4
WFRNSVJZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBsBIQDAN
BgkqhkiG9w0BAQsFAAOCAQEAZr1siuZ32LEqV/tZ32WCGYuto0DGGe4U+bjY0ZYr
jsmKmqy4I4KKOEr7/xcq3kBu+slu56rRhB1c7AEROCWtBU3JHMhFJLpv5CWxiwYY
pfAEOQUXPrVIWHmDS0rmKhz+vPotqI7Z+p0wheaFaviUUg5q0Vwm5baQ0MBuAtPK
Dl5EwTSKhmdvBMXvBiX3ohkYiJdtzSkmZOquqMp4l3aBD1eE2YUT0PTGrRR8gIan
HWnkJXCrBr1BBY2J9qkVlYC+CRpv9h7/dvZef1mSZ59ia+RuTjbWCGRCynXoxEWh
3ZJbcAA4MWT+zrmB2x6mXZN+99LNyQE+4NkcU+jFvse63A==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:37:45 2025 by rpki-client