Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/WeOeGsBTEUx1l8YTz3Nm63u04TI.roa
File: WeOeGsBTEUx1l8YTz3Nm63u04TI.roa (raw, json)
Hash identifier: 84AQ1dEVLqzuNoqjd3lPQ0/XJHW05+HkhzyjxSnpKHA=
Subject key identifier: 59:E3:9E:1A:C0:53:11:4C:75:97:C6:13:CF:73:66:EB:7B:B4:E1:32
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WeOeGsBTEUx1l8YTz3Nm63u04TI.roa
Signing time: Thu 15 Sep 2022 02:43:06 +0000
ROA not before: Thu 15 Sep 2022 02:43:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 220.229.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=59E39E1AC053114C7597C613CF7366EB7BB4E132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:52:6b:17:05:6e:83:a4:e1:f1:c9:a0:96:
08:56:9b:8f:8d:a8:a7:ae:bd:bb:6c:1c:18:f7:9c:
ed:41:8e:62:08:8c:6a:9a:8e:4c:da:7f:69:e3:f1:
18:82:dd:70:92:4c:a0:43:19:83:73:cb:f0:91:a8:
1b:ce:b5:8c:33:54:7b:53:f2:ee:53:78:b9:51:31:
ed:ef:1d:94:7c:86:bb:9e:ec:59:da:12:00:ef:32:
cd:2f:db:da:ca:79:b8:1c:ec:10:01:f1:db:f7:11:
5c:99:3a:74:11:b7:a2:1c:e6:f6:27:21:bc:eb:77:
c3:a5:f3:81:ff:9b:e5:4c:ae:76:64:39:cf:b3:fe:
52:4d:d4:45:69:ba:fa:5c:c1:b1:4b:82:c5:55:90:
2d:b1:be:42:81:42:18:c9:e6:c7:a4:bd:07:54:11:
42:bb:f8:a0:6a:86:73:24:b5:17:68:b4:81:e4:4a:
6a:6d:16:0a:0f:ad:bd:ff:48:98:75:4d:38:8a:6d:
81:a8:0b:10:03:e4:b4:4f:ac:02:75:e9:3b:b8:90:
b8:01:f6:17:8f:0c:3f:26:1b:c8:2f:37:f8:9c:34:
0b:0f:1c:96:43:98:97:95:3c:e4:3e:07:50:c0:ff:
f1:2f:88:4d:60:da:ff:53:06:c2:a8:f5:1b:20:1a:
f2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E3:9E:1A:C0:53:11:4C:75:97:C6:13:CF:73:66:EB:7B:B4:E1:32
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WeOeGsBTEUx1l8YTz3Nm63u04TI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.65.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5e:d6:e2:f9:f4:f4:93:cf:18:eb:bc:9b:fc:c8:6b:52:11:
e2:c9:5f:86:45:98:f4:d5:3f:ee:a7:ab:ba:dc:87:71:a6:f4:
21:6f:72:e7:76:2a:58:65:01:3c:34:99:50:10:4e:5e:20:1f:
aa:fd:e2:b5:4f:76:f9:9e:4b:74:b3:1c:54:87:c5:f2:7b:b8:
1e:20:b8:33:65:85:2d:52:f3:c9:c4:38:b3:aa:0a:93:0b:38:
10:18:2e:d8:e4:ec:d4:68:c3:1e:81:6d:0a:91:be:dc:43:b4:
70:9c:9d:cc:15:47:3f:55:c3:86:97:66:bc:f7:cd:07:74:0c:
a5:12:bd:e7:20:6b:be:64:1a:b5:6b:24:61:cd:1f:49:8d:96:
a7:ee:21:70:46:95:29:4f:2f:94:b5:fd:57:67:df:c9:50:d5:
22:5e:2c:c3:0b:28:e4:97:20:d6:01:36:63:c9:35:49:a3:37:
53:57:3e:1e:ae:41:b6:6e:89:d2:4d:6a:61:a4:88:bf:f3:60:
cf:cb:80:c0:c6:97:b2:26:5c:8a:97:93:5d:1f:60:78:88:7d:
96:67:d0:ca:ce:b6:c0:19:cc:ac:a3:81:da:d9:6f:03:52:97:
c4:ce:9b:ca:c1:88:56:81:47:1a:2c:7a:5c:82:00:35:60:75:
7a:74:1d:41
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU5RTM5RTFBQzA1MzEx
NEM3NTk3QzYxM0NGNzM2NkVCN0JCNEUxMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJSVJrFwVug6Th8cmglghWm4+NqKeuvbtsHBj3nO1BjmIIjGqa
jkzaf2nj8RiC3XCSTKBDGYNzy/CRqBvOtYwzVHtT8u5TeLlRMe3vHZR8hrue7Fna
EgDvMs0v29rKebgc7BAB8dv3EVyZOnQRt6Ic5vYnIbzrd8Ol84H/m+VMrnZkOc+z
/lJN1EVpuvpcwbFLgsVVkC2xvkKBQhjJ5sekvQdUEUK7+KBqhnMktRdotIHkSmpt
FgoPrb3/SJh1TTiKbYGoCxAD5LRPrAJ16Tu4kLgB9hePDD8mG8gvN/icNAsPHJZD
mJeVPOQ+B1DA//EviE1g2v9TBsKo9RsgGvJHAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUWeOeGsBTEUx1l8YTz3Nm63u04TIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvV2VPZUdzQlRFVXgxbDhZVHozTm02
M3UwNFRJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANzlQTAN
BgkqhkiG9w0BAQsFAAOCAQEAOl7W4vn09JPPGOu8m/zIa1IR4slfhkWY9NU/7qer
utyHcab0IW9y53YqWGUBPDSZUBBOXiAfqv3itU92+Z5LdLMcVIfF8nu4HiC4M2WF
LVLzycQ4s6oKkws4EBgu2OTs1GjDHoFtCpG+3EO0cJydzBVHP1XDhpdmvPfNB3QM
pRK95yBrvmQatWskYc0fSY2Wp+4hcEaVKU8vlLX9V2ffyVDVIl4swwso5Jcg1gE2
Y8k1SaM3U1c+Hq5Btm6J0k1qYaSIv/Ngz8uAwMaXsiZcipeTXR9geIh9lmfQys62
wBnMrKOB2tlvA1KXxM6bysGIVoFHGix6XIIANWB1enQdQQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:09 2025 by rpki-client