Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/aOEJLLGGJFsvtmU2deQ1a7LjdAg.roa
File: aOEJLLGGJFsvtmU2deQ1a7LjdAg.roa (raw, json)
Hash identifier: XIrkihW0pwLMc4RT1KaEiyYHZ244qN4v4PpUkfZjVCo=
Subject key identifier: 68:E1:09:2C:B1:86:24:5B:2F:B6:65:36:75:E4:35:6B:B2:E3:74:08
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0CCF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aOEJLLGGJFsvtmU2deQ1a7LjdAg.roa
Signing time: Sun 07 Feb 2021 11:45:21 +0000
ROA not before: Sun 07 Feb 2021 11:45:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 113.196.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3279 (0xccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:45:21 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=68E1092CB186245B2FB6653675E4356BB2E37408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:51:23:93:ff:c5:65:87:3e:74:25:ba:16:
9d:b0:c3:78:49:ef:07:5e:90:1c:d8:6a:c3:f9:1a:
6d:08:df:f7:a5:38:4b:ec:d4:4b:b4:86:b6:60:84:
09:f2:68:74:80:93:1e:35:26:77:61:39:32:3f:17:
40:4b:8c:06:e2:de:85:dc:6c:fa:df:e3:8d:e1:3c:
d9:dc:7c:c8:4f:83:f4:7a:0f:45:5a:c2:53:cd:db:
9b:2b:e1:46:63:50:0e:03:74:c7:79:3c:e8:c2:b3:
0c:45:4b:8a:db:8c:4b:8c:3d:42:68:0b:02:09:ed:
b5:5e:c5:6e:df:ee:34:39:5c:84:31:d3:37:45:61:
a8:7e:cb:7a:0f:a5:eb:6f:4a:92:37:a4:0f:14:58:
7d:3d:a9:2c:45:c8:38:92:51:18:84:18:88:e3:00:
ec:ba:a2:e3:c8:4f:a8:d5:2f:dd:26:6b:e5:5f:51:
e3:2f:e8:f8:48:66:86:f6:89:73:0b:02:88:0b:fc:
a7:3d:53:02:31:fe:b5:1f:19:75:9b:14:aa:74:97:
ed:3b:98:f8:92:c0:c8:8f:b7:3f:8e:da:68:be:99:
ef:58:d4:5a:38:23:e4:03:6c:13:0d:6e:89:44:d3:
06:8e:69:bf:06:7a:87:70:0e:33:f2:4e:19:92:a7:
9c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E1:09:2C:B1:86:24:5B:2F:B6:65:36:75:E4:35:6B:B2:E3:74:08
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aOEJLLGGJFsvtmU2deQ1a7LjdAg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.128.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:87:b4:50:21:ef:b8:1a:86:b4:35:00:3d:6d:a9:30:d1:f4:
91:39:0d:11:e8:b9:54:67:c9:83:f3:40:0b:5e:c6:68:3c:f3:
ce:49:2c:47:b3:68:39:27:29:70:53:58:4f:39:38:e2:5d:82:
c8:3d:c8:57:26:f2:0e:e7:a9:57:40:c8:0d:21:76:ab:e8:73:
7a:13:9f:17:4e:60:d2:fd:48:8a:48:b4:9c:eb:ce:e1:06:64:
ca:04:b8:a1:ce:24:b2:0b:d0:4a:35:65:d0:a3:b6:2a:9c:7c:
de:24:6f:c2:31:59:47:33:a3:83:77:3d:22:1f:94:81:fa:1f:
83:ec:c9:e2:90:cd:6c:b3:f2:f1:cc:f3:94:be:cc:87:a0:4a:
17:33:64:74:26:b3:0d:d0:c6:79:11:88:e4:f6:48:eb:85:d0:
62:d7:10:87:b7:1a:96:8a:e1:ad:ba:d6:80:e3:70:f0:6d:49:
35:4f:17:e7:2b:26:bf:6d:d8:a2:29:5e:86:1d:54:58:68:07:
22:29:97:e1:78:a2:1f:33:c7:63:23:1a:20:e6:39:7e:9a:50:
bd:c1:d5:9c:1d:a5:3d:80:e0:5b:97:9e:4d:70:8e:bd:3b:64:
09:e4:0a:b3:53:ce:49:6b:49:c1:dc:f7:ff:f1:2c:ef:e9:83:
87:24:64:0e
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDM8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcx
MTQ1MjFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDY4RTEwOTJDQjE4NjI0
NUIyRkI2NjUzNjc1RTQzNTZCQjJFMzc0MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtMVEjk//FZYc+dCW6Fp2ww3hJ7wdekBzYasP5Gm0I3/elOEvs
1Eu0hrZghAnyaHSAkx41JndhOTI/F0BLjAbi3oXcbPrf443hPNncfMhPg/R6D0Va
wlPN25sr4UZjUA4DdMd5POjCswxFS4rbjEuMPUJoCwIJ7bVexW7f7jQ5XIQx0zdF
Yah+y3oPpetvSpI3pA8UWH09qSxFyDiSURiEGIjjAOy6ouPIT6jVL90ma+VfUeMv
6PhIZob2iXMLAogL/Kc9UwIx/rUfGXWbFKp0l+07mPiSwMiPtz+O2mi+me9Y1Fo4
I+QDbBMNbolE0waOab8GeodwDjPyThmSp5xtAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUaOEJLLGGJFsvtmU2deQ1a7LjdAgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYU9FSkxMR0dKRnN2dG1VMmRlUTFh
N0xqZEFnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHHEgDAN
BgkqhkiG9w0BAQsFAAOCAQEAWoe0UCHvuBqGtDUAPW2pMNH0kTkNEei5VGfJg/NA
C17GaDzzzkksR7NoOScpcFNYTzk44l2CyD3IVybyDuepV0DIDSF2q+hzehOfF05g
0v1Iiki0nOvO4QZkygS4oc4ksgvQSjVl0KO2Kpx83iRvwjFZRzOjg3c9Ih+Ugfof
g+zJ4pDNbLPy8czzlL7Mh6BKFzNkdCazDdDGeRGI5PZI64XQYtcQh7calorhrbrW
gONw8G1JNU8X5ysmv23Yoilehh1UWGgHIimX4XiiHzPHYyMaIOY5fppQvcHVnB2l
PYDgW5eeTXCOvTtkCeQKs1POSWtJwdz3//Es7+mDhyRkDg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:32 2025 by rpki-client