Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BZSW0rK0pfkt8qTX3kfcrQ_2hxY.roa
File: BZSW0rK0pfkt8qTX3kfcrQ_2hxY.roa (raw, json)
Hash identifier: CxSEH/dL6Hq96Gzf6KD7aetemSK7DWbYgOHXpzoVlKU=
Subject key identifier: 05:94:96:D2:B2:B4:A5:F9:2D:F2:A4:D7:DE:47:DC:AD:0F:F6:87:16
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0B6B
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BZSW0rK0pfkt8qTX3kfcrQ_2hxY.roa
Signing time: Wed 29 Sep 2021 02:44:10 +0000
ROA not before: Wed 29 Sep 2021 02:44:10 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 192.72.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2923 (0xb6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 29 02:44:10 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=059496D2B2B4A5F92DF2A4D7DE47DCAD0FF68716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:98:74:eb:e0:84:5a:c9:00:9c:9f:f3:6f:
38:44:6d:30:df:d3:ba:8b:0f:1d:db:29:66:83:da:
21:70:6e:30:a0:3d:07:1b:c0:96:33:1d:2a:a0:dd:
4d:8d:51:47:bb:95:4b:12:37:4f:07:fe:38:55:fb:
9b:cf:67:b5:2d:ad:9e:03:b4:c1:af:28:ae:3d:bd:
a3:3c:8b:54:71:c7:20:7a:a8:a4:8a:55:ed:f7:f9:
9b:e4:7e:92:a1:9c:33:b6:f3:2f:78:14:1d:6c:2b:
e0:48:65:6e:12:80:9e:17:1d:7d:ad:c9:42:5f:8d:
01:b4:28:dd:9d:18:ea:d0:d5:31:4c:cd:c3:d3:61:
3e:1f:ed:7f:1a:13:44:0f:01:7e:fc:16:9f:8d:5c:
d3:47:66:9e:2d:9c:41:f0:50:4e:f1:ba:83:db:ad:
2b:dc:40:07:35:93:f9:21:a4:8a:72:fe:14:2c:c9:
ec:ae:54:5f:e5:ee:43:12:25:a3:c8:62:7e:3f:ab:
90:0a:eb:0a:06:c1:ab:25:40:ed:ce:81:33:53:73:
3e:b8:0c:c5:1c:de:dd:a0:df:c4:7a:dc:c8:01:dd:
5e:3c:da:58:21:c8:ec:ce:1f:01:a7:cd:3e:a8:07:
f1:b0:01:6a:0c:95:39:5a:b0:70:fa:21:19:35:68:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:94:96:D2:B2:B4:A5:F9:2D:F2:A4:D7:DE:47:DC:AD:0F:F6:87:16
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BZSW0rK0pfkt8qTX3kfcrQ_2hxY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.8.0/21
Signature Algorithm: sha256WithRSAEncryption
70:4a:f8:70:72:4e:fc:64:db:91:a8:15:ca:ae:c2:33:54:6c:
74:dd:43:a2:77:73:68:f3:ab:12:4c:e1:14:56:fc:ce:44:11:
e2:9c:96:26:53:bc:a2:09:cf:b2:63:22:93:04:0a:d6:eb:23:
59:dc:1d:98:26:e3:3b:02:bb:8d:12:93:35:8a:39:68:3d:42:
a3:8f:04:fa:5c:8e:14:ad:61:98:ed:71:d2:df:04:4f:e1:21:
ad:68:6e:e5:6a:52:9e:6d:c1:9e:e9:f6:20:50:5d:c3:ad:9a:
1b:ce:b8:0a:e4:d7:fa:54:00:32:7d:6c:66:24:14:3e:a8:c5:
4a:56:64:26:53:bf:4b:90:1e:34:41:0d:0f:8d:94:64:0d:35:
d0:30:99:e3:a4:2a:98:61:f9:f1:e1:8b:1d:8a:2d:50:61:88:
c7:7e:b2:99:c1:ea:ea:58:c8:34:0d:b3:c7:24:07:7b:cb:d6:
05:d9:3d:4c:23:9a:c2:b2:38:fa:b1:c6:5f:37:cb:ed:98:af:
ba:26:4f:35:72:39:2e:3b:eb:17:75:d8:ef:61:11:ee:56:a5:
8c:9c:71:81:fb:37:5c:42:bc:16:e2:0d:59:e1:bf:c9:11:e9:
7b:92:50:02:a9:84:65:9f:35:5e:e3:aa:a4:67:78:ea:ca:7f:
1c:eb:35:29
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICC2swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB
NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMTA5Mjkw
MjQ0MTBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDA1OTQ5NkQyQjJCNEE1
RjkyREYyQTREN0RFNDdEQ0FEMEZGNjg3MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKEZh06+CEWskAnJ/zbzhEbTDf07qLDx3bKWaD2iFwbjCgPQcb
wJYzHSqg3U2NUUe7lUsSN08H/jhV+5vPZ7UtrZ4DtMGvKK49vaM8i1RxxyB6qKSK
Ve33+ZvkfpKhnDO28y94FB1sK+BIZW4SgJ4XHX2tyUJfjQG0KN2dGOrQ1TFMzcPT
YT4f7X8aE0QPAX78Fp+NXNNHZp4tnEHwUE7xuoPbrSvcQAc1k/khpIpy/hQsyeyu
VF/l7kMSJaPIYn4/q5AK6woGwaslQO3OgTNTcz64DMUc3t2g38R63MgB3V482lgh
yOzOHwGnzT6oB/GwAWoMlTlasHD6IRk1aGgXAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUBZSW0rK0pfkt8qTX3kfcrQ/2hxYwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC
1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90
S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQlpTVzBySzBwZmt0OHFUWDNrZmNy
UV8yaHhZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8BICDAN
BgkqhkiG9w0BAQsFAAOCAQEAcEr4cHJO/GTbkagVyq7CM1RsdN1DondzaPOrEkzh
FFb8zkQR4pyWJlO8ognPsmMikwQK1usjWdwdmCbjOwK7jRKTNYo5aD1Co48E+lyO
FK1hmO1x0t8ET+EhrWhu5WpSnm3Bnun2IFBdw62aG864CuTX+lQAMn1sZiQUPqjF
SlZkJlO/S5AeNEEND42UZA010DCZ46QqmGH58eGLHYotUGGIx36ymcHq6ljINA2z
xyQHe8vWBdk9TCOawrI4+rHGXzfL7ZivuiZPNXI5LjvrF3XY72ER7laljJxxgfs3
XEK8FuINWeG/yRHpe5JQAqmEZZ81XuOqpGd46sp/HOs1KQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:39 2025 by rpki-client