Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/TLIv81LRtz_DJvjkQerXAZzPxtE.roa
File: TLIv81LRtz_DJvjkQerXAZzPxtE.roa (raw, json)
Hash identifier: 8pV/4IkMTph/5b9Uidi/QrI4KBA9OkXs80Gp5l7JjSM=
Subject key identifier: 4C:B2:2F:F3:52:D1:B7:3F:C3:26:F8:E4:41:EA:D7:01:9C:CF:C6:D1
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TLIv81LRtz_DJvjkQerXAZzPxtE.roa
Signing time: Thu 15 Sep 2022 02:43:38 +0000
ROA not before: Thu 15 Sep 2022 02:43:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 106.105.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4CB22FF352D1B73FC326F8E441EAD7019CCFC6D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:8a:46:ba:88:d6:a5:58:07:69:7b:59:58:
33:8d:64:81:72:02:3f:bd:b9:1b:32:18:ae:03:8b:
10:82:80:b3:40:8f:30:3a:36:91:f5:7d:3e:ea:30:
cf:0f:9b:13:71:e4:eb:2b:4b:b9:c6:52:3c:66:71:
ed:03:20:a2:e1:92:d7:8c:f8:ee:20:0e:f6:3a:f0:
3f:de:b3:86:fd:4a:0a:16:20:01:ee:1e:e7:49:56:
1c:92:87:ad:64:22:39:68:4f:96:f7:2f:dc:6a:8f:
60:3e:b4:a3:dd:34:9b:07:51:47:25:49:54:50:2d:
fa:0b:fb:da:c4:ed:bc:50:4c:ae:a8:08:a3:d4:24:
2c:42:1f:67:e1:d0:0c:e2:12:41:db:9d:4e:bf:60:
b5:42:86:27:64:c7:13:eb:5e:14:78:52:1a:ee:7d:
a1:87:ff:c3:52:89:18:f2:2e:fc:ec:84:03:03:d7:
45:d1:c4:e5:12:9b:68:9a:80:da:3b:77:ad:1e:51:
14:ec:e6:8c:eb:3d:87:92:06:a8:d7:c8:b2:41:08:
1e:da:d7:49:58:d1:47:93:3b:9f:c4:0a:e2:f5:74:
dc:50:29:44:34:02:70:3b:2e:f1:52:6c:ce:ef:1f:
b7:c3:c0:03:1b:63:83:83:5a:f4:2e:55:0a:8f:a8:
0b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B2:2F:F3:52:D1:B7:3F:C3:26:F8:E4:41:EA:D7:01:9C:CF:C6:D1
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TLIv81LRtz_DJvjkQerXAZzPxtE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.249.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:f3:cc:06:14:2e:6d:50:48:2e:73:44:99:29:0a:17:dc:f7:
23:c8:e6:b6:79:df:3f:08:3e:50:76:47:2d:8a:92:83:71:ce:
d5:0f:6b:29:cf:42:7c:06:e9:9a:94:33:33:21:59:e0:7d:7e:
17:a4:ce:00:5a:10:cf:90:5c:a1:2f:45:2f:e7:36:89:d3:a4:
29:1a:c2:ef:bc:cb:dd:19:fb:bf:ec:f8:93:0f:54:0e:db:e8:
fb:27:29:e2:a9:b0:cf:12:47:6b:cd:72:ea:d5:06:99:18:6e:
c8:32:f6:c0:f5:27:c0:c8:a8:42:7e:3e:a1:81:8d:78:72:21:
23:f4:c8:04:32:e8:94:99:52:b9:44:d1:fb:3a:1f:7c:0a:f2:
81:17:ba:f2:5d:af:56:26:55:8b:51:5b:17:8c:0c:22:de:73:
81:f1:71:5e:a4:6a:8e:a4:77:24:f4:1d:4a:a5:22:06:b1:04:
51:4f:b5:97:48:54:b9:36:67:52:76:34:c7:1b:66:33:fc:c7:
6e:ea:3a:56:1f:4a:a7:e7:f6:d5:8c:84:de:52:34:51:a7:21:
36:be:82:de:ee:41:6b:a3:89:e8:38:89:d7:b2:d9:63:62:fd:
02:9f:20:f7:9f:9f:5e:13:a9:64:aa:bb:6c:c5:34:92:2c:b1:
e6:e4:da:ff
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMzhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDRDQjIyRkYzNTJEMUI3
M0ZDMzI2RjhFNDQxRUFENzAxOUNDRkM2RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2D4pGuojWpVgHaXtZWDONZIFyAj+9uRsyGK4DixCCgLNAjzA6
NpH1fT7qMM8PmxNx5OsrS7nGUjxmce0DIKLhkteM+O4gDvY68D/es4b9SgoWIAHu
HudJVhySh61kIjloT5b3L9xqj2A+tKPdNJsHUUclSVRQLfoL+9rE7bxQTK6oCKPU
JCxCH2fh0AziEkHbnU6/YLVChidkxxPrXhR4UhrufaGH/8NSiRjyLvzshAMD10XR
xOUSm2iagNo7d60eURTs5ozrPYeSBqjXyLJBCB7a10lY0UeTO5/ECuL1dNxQKUQ0
AnA7LvFSbM7vH7fDwAMbY4ODWvQuVQqPqAv7AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUTLIv81LRtz/DJvjkQerXAZzPxtEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVExJdjgxTFJ0el9ESnZqa1FlclhB
WnpQeHRFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGpp+TAN
BgkqhkiG9w0BAQsFAAOCAQEAt/PMBhQubVBILnNEmSkKF9z3I8jmtnnfPwg+UHZH
LYqSg3HO1Q9rKc9CfAbpmpQzMyFZ4H1+F6TOAFoQz5BcoS9FL+c2idOkKRrC77zL
3Rn7v+z4kw9UDtvo+ycp4qmwzxJHa81y6tUGmRhuyDL2wPUnwMioQn4+oYGNeHIh
I/TIBDLolJlSuUTR+zoffArygRe68l2vViZVi1FbF4wMIt5zgfFxXqRqjqR3JPQd
SqUiBrEEUU+1l0hUuTZnUnY0xxtmM/zHbuo6Vh9Kp+f21YyE3lI0UachNr6C3u5B
a6OJ6DiJ17LZY2L9Ap8g95+fXhOpZKq7bMU0kiyx5uTa/w==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:36:19 2025 by rpki-client