Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/QfTlmGITCVw4aKOA-r9G1YbA5ow.roa
File: QfTlmGITCVw4aKOA-r9G1YbA5ow.roa (raw, json)
Hash identifier: AaYgpk6SUmA1cs2nwVlOZym1fO1i1mFGdmPZS0bC4yU=
Subject key identifier: 41:F4:E5:98:62:13:09:5C:38:68:A3:80:FA:BF:46:D5:86:C0:E6:8C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0BFD
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QfTlmGITCVw4aKOA-r9G1YbA5ow.roa
Signing time: Sun 07 Feb 2021 06:43:27 +0000
ROA not before: Sun 07 Feb 2021 06:43:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 210.66.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3069 (0xbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:43:27 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=41F4E5986213095C3868A380FABF46D586C0E68C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:9a:2f:b0:81:2d:0c:1a:06:fb:81:a4:6f:
ed:5d:d8:12:e7:41:07:63:48:12:37:0d:df:73:6b:
78:a9:1c:9a:4e:75:2b:e1:82:c7:97:4e:3e:cb:cd:
91:70:1f:1c:fc:17:93:3e:3a:52:00:73:fe:f8:d3:
16:54:24:d7:80:fd:67:c5:93:35:5f:5c:82:ec:b7:
3b:c7:74:95:68:8e:a9:a6:e6:04:a4:8b:63:ad:2c:
cd:b9:4f:6b:bb:26:a5:a5:4d:72:dd:77:a3:f2:9f:
c9:6e:fb:ba:7f:ba:a0:66:3a:b2:91:91:ce:ac:99:
75:e6:8f:de:f0:ce:90:97:07:77:d3:5d:01:36:81:
ff:2c:89:c3:0a:1c:05:a9:5a:70:e8:7d:8c:f5:de:
17:0e:4a:96:51:37:12:42:37:18:db:0a:38:71:4e:
24:4c:ce:45:82:0e:f6:1a:64:28:d6:a2:8e:a6:25:
42:ca:23:13:c2:94:1c:05:32:78:c0:24:2c:f5:aa:
7a:cb:dc:12:60:72:25:5f:26:1c:fc:3d:31:57:ca:
a0:55:df:d1:36:83:53:9e:18:3b:9f:71:12:b1:6a:
9c:25:b7:e6:7c:03:4e:e2:fc:38:ab:b7:94:10:5d:
42:b6:cf:c4:20:6f:ed:e9:3d:5c:9d:63:45:8b:ca:
93:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F4:E5:98:62:13:09:5C:38:68:A3:80:FA:BF:46:D5:86:C0:E6:8C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QfTlmGITCVw4aKOA-r9G1YbA5ow.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.66.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:73:d5:f8:05:8b:a7:26:7f:55:03:ff:46:cc:0f:bb:9d:79:
23:68:c0:82:7d:a4:1b:91:57:93:17:78:65:a2:45:ee:a7:66:
3e:6c:5c:81:77:84:be:19:1b:fc:18:76:88:21:30:27:1b:3a:
b6:5b:b0:4d:6e:1f:78:0b:8d:2d:80:ea:70:49:8e:2d:71:34:
9a:c6:9b:ca:ae:83:ba:94:cf:8e:5e:ab:00:77:42:85:33:42:
25:f1:4b:65:84:07:51:98:03:af:33:5a:bc:4a:10:d2:5c:e7:
e5:ab:98:5c:c0:d6:54:1b:36:64:bb:0b:5e:52:ed:ac:88:5f:
b3:50:4c:a1:3c:94:32:dd:d9:5e:be:5f:3f:63:46:57:f0:52:
10:aa:aa:55:17:7b:aa:81:19:4d:f4:41:6b:c9:ac:ce:d7:4a:
a6:58:4b:2f:e3:0f:09:83:e1:5f:23:b7:54:e3:26:5d:fd:e1:
d1:71:61:c8:20:a1:aa:ef:e1:77:2f:d1:5a:57:5a:e5:1a:57:
ad:f8:71:51:80:b2:a2:a8:18:87:1d:e1:d6:87:f2:ca:ad:51:
4e:9c:21:76:b6:6b:5e:ed:5a:a6:ee:a6:cd:fa:e4:b9:4a:c2:
ff:13:46:55:7f:0c:8b:16:0d:17:33:ee:64:29:22:c6:fb:93:
60:14:e3:6a
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICC/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcw
NjQzMjdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDQxRjRFNTk4NjIxMzA5
NUMzODY4QTM4MEZBQkY0NkQ1ODZDMEU2OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDW5ovsIEtDBoG+4Gkb+1d2BLnQQdjSBI3Dd9za3ipHJpOdSvh
gseXTj7LzZFwHxz8F5M+OlIAc/740xZUJNeA/WfFkzVfXILstzvHdJVojqmm5gSk
i2OtLM25T2u7JqWlTXLdd6Pyn8lu+7p/uqBmOrKRkc6smXXmj97wzpCXB3fTXQE2
gf8sicMKHAWpWnDofYz13hcOSpZRNxJCNxjbCjhxTiRMzkWCDvYaZCjWoo6mJULK
IxPClBwFMnjAJCz1qnrL3BJgciVfJhz8PTFXyqBV39E2g1OeGDufcRKxapwlt+Z8
A07i/Dirt5QQXUK2z8Qgb+3pPVydY0WLypOFAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUQfTlmGITCVw4aKOA+r9G1YbA5owwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUWZUbG1HSVRDVnc0YUtPQS1yOUcx
WWJBNW93LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANJCMA0G
CSqGSIb3DQEBCwUAA4IBAQCzc9X4BYunJn9VA/9GzA+7nXkjaMCCfaQbkVeTF3hl
okXup2Y+bFyBd4S+GRv8GHaIITAnGzq2W7BNbh94C40tgOpwSY4tcTSaxpvKroO6
lM+OXqsAd0KFM0Il8UtlhAdRmAOvM1q8ShDSXOflq5hcwNZUGzZkuwteUu2siF+z
UEyhPJQy3dlevl8/Y0ZX8FIQqqpVF3uqgRlN9EFryazO10qmWEsv4w8Jg+FfI7dU
4yZd/eHRcWHIIKGq7+F3L9FaV1rlGlet+HFRgLKiqBiHHeHWh/LKrVFOnCF2tmte
7Vqm7qbN+uS5SsL/E0ZVfwyLFg0XM+5kKSLG+5NgFONq
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:21:59 2025 by rpki-client