Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/N940NaeUmFyi0IzNU6Y5L0UQXdA.roa
File: N940NaeUmFyi0IzNU6Y5L0UQXdA.roa (raw, json)
Hash identifier: ljnfm2nhrwgrxIRG9KwyfbjoCqEGhqb6wwRN8j3VcLQ=
Subject key identifier: 37:DE:34:35:A7:94:98:5C:A2:D0:8C:CD:53:A6:39:2F:45:10:5D:D0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13AF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/N940NaeUmFyi0IzNU6Y5L0UQXdA.roa
Signing time: Fri 01 Sep 2023 09:25:17 +0000
ROA not before: Fri 01 Sep 2023 09:25:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 220.229.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5039 (0x13af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=37DE3435A794985CA2D08CCD53A6392F45105DD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:64:df:f8:e6:b8:2d:6a:d6:00:ce:2f:fd:
7f:d0:49:1c:ad:2f:26:55:34:bc:a1:e5:59:d1:7d:
1a:a6:46:62:24:18:05:a3:f4:6b:2d:c3:ae:21:b9:
f8:dc:e6:84:a8:23:5f:63:51:89:63:30:65:e3:f5:
6e:26:da:87:33:b2:21:a9:22:05:51:b8:e2:da:ab:
39:7d:79:a0:69:ab:cf:bf:44:90:b5:89:51:22:94:
c6:a7:6c:e6:34:03:10:c8:72:a5:46:68:80:05:b6:
6d:13:a6:a5:82:09:a5:a6:e4:80:ae:57:4c:8f:35:
16:bc:0b:d8:1e:77:11:60:b9:c3:66:3f:c6:b4:ca:
f3:5f:41:72:7d:b9:91:9c:d3:c6:3a:67:a6:53:42:
7c:d2:02:1d:34:f4:69:ad:82:1b:9f:e0:d8:ed:e7:
e1:cd:7a:c9:bc:d0:c1:b9:46:01:dd:41:1b:25:89:
85:62:39:4b:68:7e:29:50:2a:e3:3c:86:ce:7d:d5:
1e:88:85:41:2b:90:02:d1:19:86:75:cb:d4:8b:26:
54:71:cc:bf:6f:7d:d1:f6:eb:ce:2e:51:55:39:4f:
63:d0:15:0d:75:40:d3:73:44:c4:f7:1a:2d:4d:56:
ee:b0:18:4f:d0:05:2d:1d:88:64:20:e6:b2:97:b1:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DE:34:35:A7:94:98:5C:A2:D0:8C:CD:53:A6:39:2F:45:10:5D:D0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/N940NaeUmFyi0IzNU6Y5L0UQXdA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.96.0/19
Signature Algorithm: sha256WithRSAEncryption
b8:03:43:96:43:f1:bb:cb:63:cf:06:10:38:f7:81:76:ab:3c:
d9:d1:e7:21:12:c6:63:8e:ad:84:a3:e0:1c:55:47:23:6e:71:
4a:3e:e3:2d:16:cb:1d:d7:44:8d:09:24:58:91:ee:c5:4c:54:
06:69:c1:3d:82:72:b4:15:6e:83:3f:28:05:b6:ee:93:9f:12:
ea:81:3b:a2:59:b7:5a:91:cf:83:48:26:1e:ea:ff:3b:01:08:
8a:58:42:41:ee:86:ec:fd:28:8b:c2:2e:75:b4:c2:87:08:9e:
38:6a:c5:49:9a:2d:d8:6e:d9:60:11:e1:eb:bc:c3:56:ea:aa:
65:c4:89:9b:b5:7d:3f:bf:e4:df:98:93:fd:1a:32:df:57:d3:
1f:0c:40:d9:2a:d4:64:8c:9e:de:9d:39:db:a5:1a:94:26:09:
da:49:4a:48:62:43:16:73:2b:39:24:5d:3d:8d:6f:c7:d2:ab:
fd:b3:01:76:7e:d3:5a:6c:67:13:7b:42:aa:5f:c9:f7:c8:61:
e9:39:3f:21:0e:a8:ec:29:8f:56:af:a7:26:84:e7:68:11:25:
8e:75:55:37:4e:ab:4a:e2:ba:ba:32:44:b4:b5:95:57:dc:e2:
e9:ab:86:c3:9a:ae:f3:4d:d2:4b:9e:0a:bb:80:33:12:9f:54:
3b:19:c1:9d
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICE68wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw
OTI1MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM3REUzNDM1QTc5NDk4
NUNBMkQwOENDRDUzQTYzOTJGNDUxMDVERDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCaiGTf+Oa4LWrWAM4v/X/QSRytLyZVNLyh5VnRfRqmRmIkGAWj
9Gstw64hufjc5oSoI19jUYljMGXj9W4m2oczsiGpIgVRuOLaqzl9eaBpq8+/RJC1
iVEilManbOY0AxDIcqVGaIAFtm0TpqWCCaWm5ICuV0yPNRa8C9gedxFgucNmP8a0
yvNfQXJ9uZGc08Y6Z6ZTQnzSAh009Gmtghuf4Njt5+HNesm80MG5RgHdQRsliYVi
OUtofilQKuM8hs591R6IhUErkALRGYZ1y9SLJlRxzL9vfdH2684uUVU5T2PQFQ11
QNNzRMT3Gi1NVu6wGE/QBS0diGQg5rKXsZR/AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUN940NaeUmFyi0IzNU6Y5L0UQXdAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvTjk0ME5hZVVtRnlpMEl6TlU2WTVM
MFVRWGRBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdzlYDAN
BgkqhkiG9w0BAQsFAAOCAQEAuANDlkPxu8tjzwYQOPeBdqs82dHnIRLGY46thKPg
HFVHI25xSj7jLRbLHddEjQkkWJHuxUxUBmnBPYJytBVugz8oBbbuk58S6oE7olm3
WpHPg0gmHur/OwEIilhCQe6G7P0oi8IudbTChwieOGrFSZot2G7ZYBHh67zDVuqq
ZcSJm7V9P7/k35iT/Roy31fTHwxA2SrUZIye3p0526UalCYJ2klKSGJDFnMrOSRd
PY1vx9Kr/bMBdn7TWmxnE3tCql/J98hh6Tk/IQ6o7CmPVq+nJoTnaBEljnVVN06r
SuK6ujJEtLWVV9zi6auGw5qu803SS54Ku4AzEp9UOxnBnQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:21:24 2025 by rpki-client