Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/PbXvR_BVhbyxBhmwoM42VfpyS4A.roa
File: PbXvR_BVhbyxBhmwoM42VfpyS4A.roa (raw, json)
Hash identifier: xJzMTHphrqbe7/SdQenKpTDU61XKzHX92Dhyrp9CaGs=
Subject key identifier: 3D:B5:EF:47:F0:55:85:BC:B1:06:19:B0:A0:CE:36:55:FA:72:4B:80
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 09EF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PbXvR_BVhbyxBhmwoM42VfpyS4A.roa
Signing time: Tue 10 Nov 2020 08:30:38 +0000
ROA not before: Tue 10 Nov 2020 08:30:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131586
IP address blocks: 106.106.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2543 (0x9ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Nov 10 08:30:38 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3DB5EF47F05585BCB10619B0A0CE3655FA724B80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:62:90:07:c9:a7:9a:a0:55:3f:09:c4:f6:
0e:d4:e7:53:8f:45:29:a0:65:3f:f6:d6:2b:55:37:
d5:79:42:aa:e5:f1:da:22:47:88:29:9e:8d:86:30:
f7:03:5b:93:40:9d:84:0a:65:3f:58:47:50:3c:17:
2b:81:e7:4a:cc:1e:df:72:2a:c0:5e:93:9a:06:7b:
0e:69:98:57:f2:d4:eb:07:a0:af:5b:82:fc:93:af:
6c:17:bd:03:b5:e6:de:e8:fe:86:a7:e2:c9:88:1d:
e3:e9:c3:5c:fd:39:99:d3:b6:d5:5e:35:a6:ad:27:
72:de:2e:a7:03:64:bb:d9:46:99:c7:8e:6f:97:fc:
e9:f6:1e:8c:72:58:0f:21:98:c8:17:12:2f:34:e3:
57:c3:42:54:00:bb:a7:be:16:5c:e1:5c:51:cb:5b:
c7:b9:73:bd:e9:50:06:24:53:ee:97:0b:a4:50:4b:
6d:c0:a1:91:e6:ff:c7:80:43:5a:0b:67:50:e4:07:
ed:6c:23:52:12:e9:44:37:fe:54:4b:af:51:30:33:
fc:d9:5f:bb:d1:8f:88:23:76:17:c1:a7:2a:2f:7c:
67:e5:cb:6c:97:10:d3:29:31:0a:c5:6f:bf:c8:76:
29:fa:4e:29:48:bd:ce:c3:0e:ec:d9:30:8f:d0:38:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B5:EF:47:F0:55:85:BC:B1:06:19:B0:A0:CE:36:55:FA:72:4B:80
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PbXvR_BVhbyxBhmwoM42VfpyS4A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.106.0.0/17
Signature Algorithm: sha256WithRSAEncryption
84:8f:44:6d:25:ca:67:ac:d7:e5:d1:14:4e:5e:7c:e7:f5:a3:
56:13:c7:0a:30:77:a8:e4:c8:05:39:c7:87:d4:eb:da:10:e1:
78:19:45:a6:16:30:a9:ad:dc:ce:9c:fc:0b:56:5f:10:31:b1:
80:2c:41:fb:e4:7e:e4:35:ec:c8:77:55:1f:38:3a:06:01:e3:
ef:81:fb:00:99:23:47:6f:1b:82:15:89:e9:38:27:43:6b:46:
80:e3:dd:2b:76:72:7a:16:31:ab:56:30:81:44:5b:89:33:7f:
f5:1c:56:c6:f7:12:d9:37:d4:91:d7:45:ec:15:0d:e9:3d:92:
8d:9c:65:c5:ff:d3:a9:55:a9:9a:fa:b8:7b:02:1f:40:e4:72:
35:a5:0c:bc:cd:6f:1e:29:7c:3b:9b:4c:96:69:2b:b5:04:a9:
9e:80:8a:b9:98:99:d3:3a:41:ff:68:3d:c3:19:01:b4:2e:0b:
40:46:9b:36:db:60:3d:4b:dd:57:3d:4b:bb:cf:85:62:c8:4c:
c2:1c:c3:5e:b2:d2:af:31:bf:b7:99:1c:52:6d:ba:f0:27:c8:
4d:ea:91:38:b7:8d:5b:04:68:80:82:2d:e7:4b:1a:b2:de:e7:
38:04:c8:8d:c0:bb:65:88:d7:28:2f:7b:0e:97:56:30:2f:fb:
5c:d5:fc:3c
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCe8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDExMTAw
ODMwMzhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNEQjVFRjQ3RjA1NTg1
QkNCMTA2MTlCMEEwQ0UzNjU1RkE3MjRCODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1mmKQB8mnmqBVPwnE9g7U51OPRSmgZT/21itVN9V5Qqrl8doi
R4gpno2GMPcDW5NAnYQKZT9YR1A8FyuB50rMHt9yKsBek5oGew5pmFfy1OsHoK9b
gvyTr2wXvQO15t7o/oan4smIHePpw1z9OZnTttVeNaatJ3LeLqcDZLvZRpnHjm+X
/On2HoxyWA8hmMgXEi8041fDQlQAu6e+FlzhXFHLW8e5c73pUAYkU+6XC6RQS23A
oZHm/8eAQ1oLZ1DkB+1sI1IS6UQ3/lRLr1EwM/zZX7vRj4gjdhfBpyovfGfly2yX
ENMpMQrFb7/Idin6TilIvc7DDuzZMI/QOPdTAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUPbXvR/BVhbyxBhmwoM42VfpyS4AwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUGJYdlJfQlZoYnl4Qmhtd29NNDJW
ZnB5UzRBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB2pqADAN
BgkqhkiG9w0BAQsFAAOCAQEAhI9EbSXKZ6zX5dEUTl585/WjVhPHCjB3qOTIBTnH
h9Tr2hDheBlFphYwqa3czpz8C1ZfEDGxgCxB++R+5DXsyHdVHzg6BgHj74H7AJkj
R28bghWJ6TgnQ2tGgOPdK3ZyehYxq1YwgURbiTN/9RxWxvcS2TfUkddF7BUN6T2S
jZxlxf/TqVWpmvq4ewIfQORyNaUMvM1vHil8O5tMlmkrtQSpnoCKuZiZ0zpB/2g9
wxkBtC4LQEabNttgPUvdVz1Lu8+FYshMwhzDXrLSrzG/t5kcUm268CfITeqROLeN
WwRogIIt50sast7nOATIjcC7ZYjXKC97DpdWMC/7XNX8PA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:56 2025 by rpki-client