Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/FSf4ndeAG2A5zqVc8FzYZAByKxY.roa
File: FSf4ndeAG2A5zqVc8FzYZAByKxY.roa (raw, json)
Hash identifier: LDpokLInx1Oa4PQEws8VGCKqe6BYuqTTmMLy/3ADG0k=
Subject key identifier: 15:27:F8:9D:D7:80:1B:60:39:CE:A5:5C:F0:5C:D8:64:00:72:2B:16
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0913
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FSf4ndeAG2A5zqVc8FzYZAByKxY.roa
Signing time: Tue 29 Sep 2020 09:52:46 +0000
ROA not before: Tue 29 Sep 2020 09:52:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 106.104.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2323 (0x913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1527F89DD7801B6039CEA55CF05CD86400722B16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a8:92:89:b3:05:1e:1f:3d:10:ea:af:df:e0:
d3:4d:0c:f4:c7:7b:5e:c5:94:b0:1d:3c:1f:52:91:
2b:17:82:16:c2:f9:55:09:de:ab:1f:70:f6:86:33:
6d:8f:e1:4b:7e:f1:1b:22:ef:4d:60:b5:94:d9:e8:
dd:ee:53:cc:0d:f5:c0:2e:4d:0e:cc:f1:51:35:a3:
b4:74:2e:57:88:73:1c:f9:cc:85:63:d0:2c:d9:ba:
c8:51:7b:de:1d:8d:8b:23:7f:98:9d:e4:3b:06:dd:
fc:f5:96:52:51:b5:e4:7c:40:de:1c:0e:f2:4d:25:
98:a7:a1:17:6e:a1:25:c3:47:65:4b:a3:b8:92:50:
eb:1a:60:1c:e6:cb:94:93:d5:71:88:17:4e:8b:87:
91:a6:2d:44:b7:43:3a:4b:a3:aa:88:07:90:ba:80:
6e:b8:d8:e0:a5:77:06:eb:3b:0d:af:97:6c:74:bc:
2d:d9:03:98:72:55:c2:3c:aa:8a:a6:76:6f:b1:e6:
de:db:19:35:0e:04:e2:a8:2f:58:30:80:dd:d7:22:
60:c8:ac:5d:2f:d9:29:62:2e:f7:5c:44:00:9b:22:
6e:9e:90:8a:34:4a:2a:e4:c6:cb:23:5f:40:7e:79:
03:cf:42:c6:ea:28:7f:76:2b:a9:62:80:cd:b8:86:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:27:F8:9D:D7:80:1B:60:39:CE:A5:5C:F0:5C:D8:64:00:72:2B:16
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FSf4ndeAG2A5zqVc8FzYZAByKxY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.104.0.0/14
Signature Algorithm: sha256WithRSAEncryption
a4:7e:50:2a:79:bb:6f:4c:41:1f:a4:23:37:4a:30:83:af:3d:
10:54:f2:33:eb:40:7a:88:b3:7c:40:15:18:41:7e:7c:55:14:
98:17:b4:f0:66:43:bf:55:98:a2:c1:ea:06:5f:2c:ff:6c:1c:
84:a6:df:47:62:19:32:18:5f:10:60:14:20:73:b1:60:9a:e3:
02:8a:29:67:71:0e:09:14:e0:13:7f:2d:ba:77:91:78:d4:94:
a8:42:db:e1:9b:ab:88:29:aa:5c:d4:f1:2e:11:3b:8e:6c:fa:
15:3d:4b:66:81:8d:37:85:3f:1f:e6:b9:06:7c:02:63:ce:08:
30:19:05:5b:ca:b1:7f:37:8b:c9:86:82:25:c9:97:66:84:5d:
c7:8b:a3:7b:4d:30:e1:13:eb:68:be:e0:53:61:db:d5:f6:87:
98:e0:a0:88:16:71:54:24:db:25:69:c6:c0:55:e2:d0:3d:57:
fa:94:fc:89:94:66:56:c7:71:13:cd:94:67:c0:6e:64:32:04:
58:62:41:d3:ea:6f:55:c8:1f:e7:f8:c1:20:f5:67:65:75:10:
e4:55:32:cb:5c:2a:06:e1:5b:6a:78:5f:02:59:0b:c8:27:68:
06:68:15:fc:2f:e7:c7:e6:da:83:ae:fa:6c:42:7d:f2:df:70:
79:57:31:37
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICCRMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyNDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE1MjdGODlERDc4MDFC
NjAzOUNFQTU1Q0YwNUNEODY0MDA3MjJCMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfqJKJswUeHz0Q6q/f4NNNDPTHe17FlLAdPB9SkSsXghbC+VUJ
3qsfcPaGM22P4Ut+8Rsi701gtZTZ6N3uU8wN9cAuTQ7M8VE1o7R0LleIcxz5zIVj
0CzZushRe94djYsjf5id5DsG3fz1llJRteR8QN4cDvJNJZinoRduoSXDR2VLo7iS
UOsaYBzmy5ST1XGIF06Lh5GmLUS3QzpLo6qIB5C6gG642OCldwbrOw2vl2x0vC3Z
A5hyVcI8qoqmdm+x5t7bGTUOBOKoL1gwgN3XImDIrF0v2SliLvdcRACbIm6ekIo0
SirkxssjX0B+eQPPQsbqKH92K6ligM24hoevAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUFSf4ndeAG2A5zqVc8FzYZAByKxYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRlNmNG5kZUFHMkE1enFWYzhGella
QUJ5S3hZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAmpoMA0G
CSqGSIb3DQEBCwUAA4IBAQCkflAqebtvTEEfpCM3SjCDrz0QVPIz60B6iLN8QBUY
QX58VRSYF7TwZkO/VZiiweoGXyz/bByEpt9HYhkyGF8QYBQgc7FgmuMCiilncQ4J
FOATfy26d5F41JSoQtvhm6uIKapc1PEuETuObPoVPUtmgY03hT8f5rkGfAJjzggw
GQVbyrF/N4vJhoIlyZdmhF3Hi6N7TTDhE+tovuBTYdvV9oeY4KCIFnFUJNslacbA
VeLQPVf6lPyJlGZWx3ETzZRnwG5kMgRYYkHT6m9VyB/n+MEg9WdldRDkVTLLXCoG
4VtqeF8CWQvIJ2gGaBX8L+fH5tqDrvpsQn3y33B5VzE3
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:55 2025 by rpki-client