Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/GfbaLeVtmQ5B7klvjnWaqpRujVI.roa
File: GfbaLeVtmQ5B7klvjnWaqpRujVI.roa (raw, json)
Hash identifier: CnsOFB9hvKNLVmS5BcVmFjVCNtcNQHqLV1C+eT5eAnY=
Subject key identifier: 19:F6:DA:2D:E5:6D:99:0E:41:EE:49:6F:8E:75:9A:AA:94:6E:8D:52
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0880
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GfbaLeVtmQ5B7klvjnWaqpRujVI.roa
Signing time: Tue 29 Sep 2020 09:52:06 +0000
ROA not before: Tue 29 Sep 2020 09:52:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 122.147.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2176 (0x880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:06 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=19F6DA2DE56D990E41EE496F8E759AAA946E8D52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:6c:41:2d:c8:de:b3:05:94:38:41:ce:5e:
19:04:b3:71:0a:89:e6:94:f5:97:5c:7f:75:f3:66:
a1:4d:60:34:80:34:64:6b:3a:61:6a:83:a3:57:96:
c0:24:bb:7f:17:84:a3:9b:ad:fe:1f:65:df:94:2f:
16:8f:10:39:ff:50:74:6a:5b:dd:ed:69:6d:fa:d3:
5f:1b:5f:1a:ff:e8:8e:1e:66:25:48:d0:81:b3:1a:
f3:27:74:90:a0:37:cc:8e:aa:43:8e:2e:7f:01:70:
4e:4d:3f:3b:8f:84:d4:d5:ce:cb:10:a7:c3:7d:5f:
a6:57:0f:70:7d:d8:fd:9e:ae:05:8c:fe:6b:3d:59:
c1:c4:37:f4:43:30:7e:e7:4f:56:f0:91:02:e8:8e:
96:91:21:6c:2d:a8:67:45:f4:2e:41:2d:8e:b4:73:
e8:39:93:59:a3:c8:5e:01:bb:2d:6f:65:78:29:c4:
2f:69:5f:29:65:d8:c5:b9:52:bd:3e:95:3e:a5:03:
58:09:8a:d7:97:bd:05:a9:be:15:07:e1:8d:ae:a3:
0a:87:a0:6f:32:8c:04:a4:47:80:8f:29:37:7a:52:
36:2a:cc:43:1a:1a:22:d2:e8:7c:a8:16:8e:d3:f4:
74:d1:18:b8:24:c2:6e:64:55:43:5d:b4:f1:bb:b3:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F6:DA:2D:E5:6D:99:0E:41:EE:49:6F:8E:75:9A:AA:94:6E:8D:52
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GfbaLeVtmQ5B7klvjnWaqpRujVI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.160.0/22
Signature Algorithm: sha256WithRSAEncryption
82:e8:9b:f6:59:ed:fc:4f:ab:f0:97:db:d1:79:32:ac:6b:30:
67:60:10:51:ba:19:a4:f2:51:06:56:5e:17:96:2a:fb:f7:ce:
bc:fe:e3:9f:1a:99:9b:fd:5b:29:72:30:43:8a:01:2c:78:7e:
59:5d:a6:23:32:94:af:c6:36:3e:b7:2c:d3:e5:ff:cb:38:90:
37:3d:e4:0c:56:39:35:36:81:44:17:d9:89:9a:7f:27:11:88:
68:8d:07:ba:a0:85:2f:95:86:fe:17:8e:0b:37:cc:f0:37:71:
52:67:c1:69:26:b1:cc:92:f3:26:f6:da:ef:df:ce:b6:1a:ed:
78:ef:40:f7:77:18:e9:37:fb:fc:c4:7c:49:4f:c8:95:9f:93:
a9:b5:b7:31:12:cb:eb:a9:15:55:95:f1:5b:6e:b4:dd:3d:ca:
fc:61:89:5b:7e:3d:d3:84:7e:0e:6b:48:3b:c7:57:d8:f4:63:
0e:09:56:13:9d:1a:05:8e:05:cc:b1:d5:ba:be:3d:5a:b8:44:
a4:cc:f5:a4:57:ba:d2:0f:0d:d3:f1:52:1d:b7:75:a8:cf:c4:
57:04:81:99:cf:c4:3e:a0:39:bc:f8:8e:d1:58:84:7e:a5:d8:
86:5a:53:70:2f:61:47:9b:3b:71:4b:d8:77:f4:54:72:99:da:
30:eb:0a:79
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyMDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE5RjZEQTJERTU2RDk5
MEU0MUVFNDk2RjhFNzU5QUFBOTQ2RThENTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHXWxBLcjeswWUOEHOXhkEs3EKieaU9Zdcf3XzZqFNYDSANGRr
OmFqg6NXlsAku38XhKObrf4fZd+ULxaPEDn/UHRqW93taW36018bXxr/6I4eZiVI
0IGzGvMndJCgN8yOqkOOLn8BcE5NPzuPhNTVzssQp8N9X6ZXD3B92P2ergWM/ms9
WcHEN/RDMH7nT1bwkQLojpaRIWwtqGdF9C5BLY60c+g5k1mjyF4Buy1vZXgpxC9p
Xyll2MW5Ur0+lT6lA1gJiteXvQWpvhUH4Y2uowqHoG8yjASkR4CPKTd6UjYqzEMa
GiLS6HyoFo7T9HTRGLgkwm5kVUNdtPG7s/NjAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUGfbaLeVtmQ5B7klvjnWaqpRujVIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvR2ZiYUxlVnRtUTVCN2tsdmpuV2Fx
cFJ1alZJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnqToDAN
BgkqhkiG9w0BAQsFAAOCAQEAguib9lnt/E+r8Jfb0XkyrGswZ2AQUboZpPJRBlZe
F5Yq+/fOvP7jnxqZm/1bKXIwQ4oBLHh+WV2mIzKUr8Y2Prcs0+X/yziQNz3kDFY5
NTaBRBfZiZp/JxGIaI0HuqCFL5WG/heOCzfM8DdxUmfBaSaxzJLzJvba79/Othrt
eO9A93cY6Tf7/MR8SU/IlZ+TqbW3MRLL66kVVZXxW2603T3K/GGJW34904R+DmtI
O8dX2PRjDglWE50aBY4FzLHVur49WrhEpMz1pFe60g8N0/FSHbd1qM/EVwSBmc/E
PqA5vPiO0ViEfqXYhlpTcC9hR5s7cUvYd/RUcpnaMOsKeQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 17:14:33 2025 by rpki-client