Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/81UBqcsJvydQr6fvWEXKGgDWX9A.roa
File: 81UBqcsJvydQr6fvWEXKGgDWX9A.roa (raw, json)
Hash identifier: FGsTVAGDUWNED5UJENNi4XIk4QMLvyN/Togfmo9s1AE=
Subject key identifier: F3:55:01:A9:CB:09:BF:27:50:AF:A7:EF:58:45:CA:1A:00:D6:5F:D0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1354
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/81UBqcsJvydQr6fvWEXKGgDWX9A.roa
Signing time: Fri 01 Sep 2023 09:24:47 +0000
ROA not before: Fri 01 Sep 2023 09:24:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 175.183.254.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4948 (0x1354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F35501A9CB09BF2750AFA7EF5845CA1A00D65FD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:fe:64:3f:1f:ee:a5:52:d5:cb:19:ab:d5:
07:fa:66:0b:e3:85:31:60:62:84:52:fa:42:e2:31:
c4:3b:a5:79:8f:19:3e:2e:49:28:1f:c1:f5:b9:54:
04:79:57:12:32:34:fd:c0:89:9b:2a:fd:7c:27:21:
15:41:f1:df:73:a7:29:ba:73:f5:a6:70:d4:69:a3:
e3:00:49:45:29:bc:56:8f:10:0e:e6:8a:41:4a:e7:
77:94:1e:3f:77:aa:de:25:9e:18:a6:42:48:04:74:
da:08:b1:50:e8:d4:f9:09:79:4a:26:78:a5:7d:51:
c5:09:04:bc:01:50:85:dd:38:82:98:ad:ee:3f:0e:
90:f1:38:f9:c2:1f:4f:30:37:44:a3:94:bf:39:a0:
30:af:7f:bd:65:da:93:fb:34:00:78:f1:26:a2:85:
b5:0e:ab:7d:ea:bd:37:b9:db:b4:80:c4:09:86:08:
79:cd:11:72:55:5e:c3:44:b5:b9:4f:81:26:4a:36:
d8:b0:c9:92:65:90:49:51:35:c2:ab:de:c6:0e:ac:
8d:24:a4:fd:b8:c9:5c:f8:21:2d:0f:b2:2c:5e:43:
44:92:f9:96:31:15:04:f7:70:c8:3c:c9:ee:96:c4:
01:09:a3:1d:dd:11:68:49:46:4c:dc:f2:22:e0:79:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:01:A9:CB:09:BF:27:50:AF:A7:EF:58:45:CA:1A:00:D6:5F:D0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/81UBqcsJvydQr6fvWEXKGgDWX9A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.254.0/23
Signature Algorithm: sha256WithRSAEncryption
25:40:33:50:06:3a:78:08:69:23:ad:6a:bf:d8:b4:93:2c:30:
42:12:3c:8b:d1:7a:25:85:2f:c6:29:c2:c1:0f:0f:a4:1f:98:
a1:9d:0f:ea:a5:05:59:ea:0b:b6:76:ea:41:4f:c9:bf:6c:66:
f2:6a:5a:0b:8e:b9:00:8f:91:f5:a0:13:bd:be:0d:83:65:0c:
c8:fa:74:19:a2:a7:40:e1:97:57:ab:a7:d2:a6:64:52:56:63:
8e:2c:bc:1f:6a:d7:80:bc:45:60:67:f1:56:39:85:87:8c:88:
67:50:9a:f9:68:db:bc:aa:a7:eb:07:c7:dc:71:43:9d:a9:17:
dc:ae:2a:9d:e4:08:d7:91:34:bd:4a:4a:dd:c0:84:a2:13:6e:
d3:0f:7a:17:73:93:fd:fa:77:14:aa:3b:90:9d:40:c0:90:1a:
f5:81:7c:53:a0:c2:fe:01:3b:7b:d3:a1:57:07:39:b6:f8:ca:
0b:21:48:4a:af:14:54:13:3c:45:5c:9d:38:df:13:3c:5e:40:
01:1e:89:45:d7:ce:78:b6:6a:0b:27:84:a4:14:ef:4b:f8:d4:
c8:ba:75:ec:1a:f7:15:89:f5:67:60:9b:79:60:02:cb:6a:7b:
c4:27:33:53:eb:21:0e:26:31:78:16:dc:41:ff:fa:7b:77:7b:
4a:48:31:a5
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICE1QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw
OTI0NDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYzNTUwMUE5Q0IwOUJG
Mjc1MEFGQTdFRjU4NDVDQTFBMDBENjVGRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr2/5kPx/upVLVyxmr1Qf6ZgvjhTFgYoRS+kLiMcQ7pXmPGT4u
SSgfwfW5VAR5VxIyNP3AiZsq/XwnIRVB8d9zpym6c/WmcNRpo+MASUUpvFaPEA7m
ikFK53eUHj93qt4lnhimQkgEdNoIsVDo1PkJeUomeKV9UcUJBLwBUIXdOIKYre4/
DpDxOPnCH08wN0SjlL85oDCvf71l2pP7NAB48SaihbUOq33qvTe527SAxAmGCHnN
EXJVXsNEtblPgSZKNtiwyZJlkElRNcKr3sYOrI0kpP24yVz4IS0PsixeQ0SS+ZYx
FQT3cMg8ye6WxAEJox3dEWhJRkzc8iLgef8PAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU81UBqcsJvydQr6fvWEXKGgDWX9AwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvODFVQnFjc0p2eWRRcjZmdldFWEtH
Z0RXWDlBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAa+3/jAN
BgkqhkiG9w0BAQsFAAOCAQEAJUAzUAY6eAhpI61qv9i0kywwQhI8i9F6JYUvxinC
wQ8PpB+YoZ0P6qUFWeoLtnbqQU/Jv2xm8mpaC465AI+R9aATvb4Ng2UMyPp0GaKn
QOGXV6un0qZkUlZjjiy8H2rXgLxFYGfxVjmFh4yIZ1Ca+WjbvKqn6wfH3HFDnakX
3K4qneQI15E0vUpK3cCEohNu0w96F3OT/fp3FKo7kJ1AwJAa9YF8U6DC/gE7e9Oh
Vwc5tvjKCyFISq8UVBM8RVydON8TPF5AAR6JRdfOeLZqCyeEpBTvS/jUyLp17Br3
FYn1Z2CbeWACy2p7xCczU+shDiYxeBbcQf/6e3d7SkgxpQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:08 2025 by rpki-client