Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/RGqZh0xYpeKItuTbv_GsvClbPus.roa
File: RGqZh0xYpeKItuTbv_GsvClbPus.roa (raw, json)
Hash identifier: B6cCg+Is3PWP2J6yL5Xd5viGLjdKT5+/HataoT2fFPo=
Subject key identifier: 44:6A:99:87:4C:58:A5:E2:88:B6:E4:DB:BF:F1:AC:BC:29:5B:3E:EB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13A4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RGqZh0xYpeKItuTbv_GsvClbPus.roa
Signing time: Fri 01 Sep 2023 09:25:15 +0000
ROA not before: Fri 01 Sep 2023 09:25:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 106.105.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5028 (0x13a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=446A99874C58A5E288B6E4DBBFF1ACBC295B3EEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:06:db:58:a0:d9:74:15:8f:d3:d8:1d:6b:
6d:68:9f:db:15:a5:7f:71:7b:90:4c:fa:3b:6d:77:
66:53:73:20:1e:b0:aa:2d:bc:e3:a5:f7:78:82:8d:
a8:3e:f8:9f:d7:9e:29:fc:34:59:1f:35:59:58:d8:
6a:02:97:41:b4:84:67:4b:a9:d2:5a:bc:ec:58:2e:
d9:f7:9f:a9:20:40:b1:bf:23:a4:4f:b8:a4:eb:ff:
a8:a8:bc:b2:14:13:d3:db:31:4e:3e:82:74:13:cb:
2c:09:fe:28:87:4a:44:ba:9a:47:0e:c4:9d:43:fb:
97:c3:6c:12:a6:a2:4a:36:da:38:aa:22:ad:ff:d3:
c5:4c:94:9a:2a:3b:96:f1:77:65:c1:1a:c6:ff:3c:
4d:dc:4c:ff:3e:29:fb:3a:1a:ae:93:fd:d0:74:1b:
39:26:14:2f:ad:07:ef:7e:20:ed:de:29:64:9b:8e:
8e:11:7f:01:bd:49:60:b1:05:1d:42:bc:6b:20:72:
bf:7b:df:59:40:df:3f:7c:47:61:5a:e3:c4:65:d5:
e3:47:a0:e0:6f:49:3a:ea:dd:87:31:45:80:af:cd:
06:31:80:83:ea:e6:a3:bc:8c:79:b4:46:4b:d6:9d:
73:d2:0c:10:27:c2:65:c9:4c:87:db:2e:16:0a:f5:
f7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6A:99:87:4C:58:A5:E2:88:B6:E4:DB:BF:F1:AC:BC:29:5B:3E:EB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RGqZh0xYpeKItuTbv_GsvClbPus.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.96.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:5a:d4:ca:d1:6c:57:eb:81:ed:b8:1f:cc:df:45:b8:d2:d0:
aa:01:2d:62:38:0d:0b:e7:2a:10:00:9b:2d:bc:91:d5:5a:0a:
09:3d:e1:de:7d:41:c8:0f:a3:a9:89:9a:e6:fb:9b:f2:c2:c8:
15:43:bd:6e:3a:bf:88:44:ea:61:28:7b:67:01:83:74:b6:52:
4f:51:06:2d:03:43:51:5e:89:c7:e7:84:37:72:0c:38:7c:97:
a8:b8:bc:26:92:1c:fd:06:7e:87:5f:b0:ca:23:97:0d:51:e7:
59:47:cf:17:3c:7e:e9:22:ce:3f:f6:aa:57:68:88:95:50:a7:
56:b4:e4:4b:b3:0a:05:63:3d:2b:3e:c7:27:4e:46:e0:ba:1b:
0d:f1:b3:0f:db:b1:4f:09:d3:b6:a3:b1:ed:eb:a2:66:ea:4d:
23:f5:86:8f:3b:33:ca:e6:2e:11:65:20:9f:a5:72:2a:94:69:
77:cb:ea:48:d3:9c:f9:72:7c:12:3c:4f:81:1d:cf:25:f0:98:
ac:e5:5f:55:a3:c1:bd:50:fc:1a:a4:62:71:6d:c7:81:a9:42:
eb:88:8c:98:90:27:a1:43:ec:39:33:8f:68:c5:85:f3:9f:61:
34:81:e9:5c:55:82:44:35:78:a0:8e:37:5a:62:13:0b:00:d0:
ce:51:41:06
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICE6QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw
OTI1MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ0NkE5OTg3NEM1OEE1
RTI4OEI2RTREQkJGRjFBQ0JDMjk1QjNFRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC01wbbWKDZdBWP09gda21on9sVpX9xe5BM+jttd2ZTcyAesKot
vOOl93iCjag++J/Xnin8NFkfNVlY2GoCl0G0hGdLqdJavOxYLtn3n6kgQLG/I6RP
uKTr/6iovLIUE9PbMU4+gnQTyywJ/iiHSkS6mkcOxJ1D+5fDbBKmoko22jiqIq3/
08VMlJoqO5bxd2XBGsb/PE3cTP8+Kfs6Gq6T/dB0GzkmFC+tB+9+IO3eKWSbjo4R
fwG9SWCxBR1CvGsgcr9731lA3z98R2Fa48Rl1eNHoOBvSTrq3YcxRYCvzQYxgIPq
5qO8jHm0RkvWnXPSDBAnwmXJTIfbLhYK9fetAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQURGqZh0xYpeKItuTbv/GsvClbPuswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUkdxWmgweFlwZUtJdHVUYnZfR3N2
Q2xiUHVzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2ppYDAN
BgkqhkiG9w0BAQsFAAOCAQEAulrUytFsV+uB7bgfzN9FuNLQqgEtYjgNC+cqEACb
LbyR1VoKCT3h3n1ByA+jqYma5vub8sLIFUO9bjq/iETqYSh7ZwGDdLZST1EGLQND
UV6Jx+eEN3IMOHyXqLi8JpIc/QZ+h1+wyiOXDVHnWUfPFzx+6SLOP/aqV2iIlVCn
VrTkS7MKBWM9Kz7HJ05G4LobDfGzD9uxTwnTtqOx7euiZupNI/WGjzszyuYuEWUg
n6VyKpRpd8vqSNOc+XJ8EjxPgR3PJfCYrOVfVaPBvVD8GqRicW3HgalC64iMmJAn
oUPsOTOPaMWF859hNIHpXFWCRDV4oI43WmITCwDQzlFBBg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:02 2025 by rpki-client